How to Enable (or Disable) Secure Boot in Windows 10 and 11

Download Article

Plus, how to check your Secure Boot status outside of BIOS

Co-authored by Hannah Dillon Reviewed by Luigi Oppido

Last Updated: September 3, 2025 Fact Checked

Download Article

• Check if Secure Boot is Already Enabled
|
• Enabling Secure Boot
|
• Disabling Secure Boot

|Show more |Show less

Are you trying to turn on Secure Boot on your Windows PC? Whether you have a Windows 10 computer and you're trying to upgrade to Windows 11 or you have a Windows 11 PC and you just want to turn Secure Boot on, it's a quick and easy process that can be completed in just a few minutes. Keep reading to learn how.

Quick Steps

1. Open Windows settings.
2. Navigate to Update & Security > Recovery.
3. Click Restart now.
4. Navigate to Troubleshoot > Advanced options > UEFI Firmware settings.
5. Press Restart if prompted.
6. Find and enable Secure Boot (usually found in Boot or Security).
7. Press F10 to save, then exit the BIOS and restart your PC.

Steps

Section 1 of 3:

Check if Secure Boot is Already Enabled

Download Article

1. 
   Check if Secure Boot is enabled before beginning. If Secure Boot is already enabled but you didn't know it, this can save you a little time. The steps are quick and easy:

   • Type sysinfo in the taskbar search bar.
   • Locate the line that says "Secure Boot State." It will say On (which means Secure Boot is enabled) or Off (which means Secure Boot is disabled).
Advertisement

Section 2 of 3:

Enabling Secure Boot

Download Article

1. 
   1
   Open Windows settings. To do this, click the Windows (Start) button in the lower-left corner of the screen, then click the cogwheel icon.

   • Alternatively, you can restart your PC and press the BIOS/UEFI access key (which is usually Del or F2) when the motherboard logo flashes on your screen to access BIOS/UEFI. However the timing is hard to get right, so the steps below will guarantee that you can get into the BIOS/UEFI.
2. 
   2
   Click Update & Security. This option will be towards the end of the list of options. It has an icon of two arrows going in a circle.

   • On Windows 11, this option is called System instead.
3. 
   3
   Select Recovery in the left-hand sidebar. It's near the middle of the menu options, and has an icon of a thin rectangle with a circular arrow above it.
4. 
   4
   Click Restart now under "Advanced startup." This will immediately restart your PC, so make sure to save any open files before restarting to avoid losing any data or changes to them.
5. 
   5
   Select Troubleshoot > Advanced options. Once your PC restarts, you will be presented with a blue screen and several options to choose from.
6. 
   6
   Click UEFI Firmware settings. If your computer immediately restarts and enters BIOS, you can move to the next step. If not, click Restart and select BIOS setup, which will restart your computer into BIOS.

   • If you have a Restart button but not a BIOS setup button, follow these instructions:
     • Navigate to Settings > Advanced > Windows OS Configuration. Depending on your computer, these menu items may have different names, but they should be similar.
     • Select Secure Boot and enable the Secure Boot setting, then restart your computer.
7. 
   7
   Find the Secure Boot setting and enable it. The Secure Boot setting is usually found in the Security or Boot/Boot options tab, but each motherboard's BIOS is laid out slightly differently. If you aren't sure where to find the Secure Boot setting, check your computer's manual or the manufacturer's website.

   • To navigate the BIOS, use the arrow keys.
8. 
   8
   Press F10 to save your settings. If you are enabling Secure Boot to update to Windows 11, do not exit BIOS just yet, as you will also need to enable TPM 2.0. If you do not need to enable TPM 2.0, you can exit the BIOS and restart your computer.

   • Open the Security tab. You'll need to use the arrow keys to navigate the BIOS.
   • Look for the TPM setting. This option may say "TPM," "Intel Platform Trust Technology (IPTT)," "AMD CPU fTPM", or "Trusted Platform Module (TPM)."
   • Enable TPM 2.0. Press the Enter button to toggle on TPM 2.0.
   • Press F10 to save your settings. You can now exit BIOS and restart your computer.
Advertisement

Section 3 of 3:

Disabling Secure Boot

Download Article

1. 
   1
   Enter BIOS/UEFI. Follow the instructions above to access the BIOS/UEFI of your computer.
2. 
   2
   Find the Secure Boot setting and disable it. The Secure Boot setting is usually found in the Security or Boot/Boot options tab, but each motherboard's BIOS is laid out slightly differently. If you aren't sure where to find the Secure Boot setting, check your computer's manual or the manufacturer's website.

   • To navigate the BIOS, use the arrow keys.
3. 
   3
   Press F10 to save your settings. Once you've saved your BIOS settings, you can exit the BIOS and allow your computer to restart.
Advertisement

Expert Q&A

Search

Add New Question

Ask a Question

200 characters left

Include your email address to get a message when this question is answered.

Submit

Advertisement

Tips

Submit a Tip

All tip submissions are carefully reviewed before being published

Name

Please provide your name and last initial

Submit

Thanks for submitting a tip for review!