Microsoft Defender has become an increasingly integral part of Windows over the years. It used to be Windows Defender, and for a long time, it was mostly known as a firewall, but Microsoft has been adding capabilities for over 10 years, and it now offers pretty solid baseline protection. However, sometimes you want to disable Microsoft Defender antivirus for one reason or another, and Windows 11 doesn't make it easy.

It's worth noting that the Windows Security app offers many layers of protection, and disabling each of them would not only take a lot of time but would also be very risky. This includes features like tamper protection, exploit protection, core isolation, and data encryption. We're focusing on some of the more basic features that might interfere with the usage of your PC in this guide.

Related
Windows 11: Everything you need to know
Windows 11 is the latest and greatest operating system from Microsoft, and it packs a ton of changes. Here's what you need to know.

Temporarily disable real-time protection

Disabling Windows Defender permanently on Windows 11 is not recommended, and somewhat challenging. However, you can temporarily turn off real-time protection if it's blocking you from doing something. Here's how:

  1. Open the Windows Security app.
  2. Click Virus & threat protection on the main menu or the left-side pane.
    Screenshot of the Windows Security app with the Virus & threat protection button highlighted
  3. Under Virus & threat protection settings, click Manage settings.
    Screenshot of the Virus & threat protection section of the Windows Security app. The "manage settings" option is highlighted on the page.
  4. Switch the toggle under Real-time protection to Off.
    Screenshot of the Virus & threat protection settings page in Windows Security showing that real-time protection is turned off.
  5. If Microsoft Defender prevented you from running a program before, you should be able to do it now.

Do note that, after a while, real-time protection will turn itself back on to make sure your device stays protected from actual threats.

Replace Microsoft Defender with another antivirus software

If you want to disable Microsoft Defender's built-in antivirus permanently, your best bet is to install another antivirus software that can take over for Microsoft Defender. To do this, simply download and install any other antivirus you trust. There are plenty of options out there, including Malwarebytes if you want a free option. Many paid options also exist, like Bitdefender, Webroot, and more.

Screenshot of the MalwareBytes home page

Simply download and install the antivirus of your choice, and Microsoft Defender's malware protection will be disabled. This means ou can remain protected without relying on Microsoft's software, but do keep in mind that Microsoft Defender will be re-enabled if you uninstall your other antivirus. You won't normally be allowed to have no anti-malware program on your PC.

Related
Best antivirus for Windows 11
Protecting your data is always important, and when the built-in Windows security fails, these antivirus programs are your best bet.

Additionally, even if you use a third-party anti-malware program, you can still have Microsoft Defender run periodic malware scans to get even more coverage against threats.

Screenshot of Microsoft Defender virus & threat protection settings when another antivirus is installed, showing that the option to run a periodic scan is enabled.

Disabling the firewall in Microsoft Defender

Something else you might want to disable in Microsoft Defender is firewall protection. This monitors your network for potentially dangerous requests and blocks any threats it detects. This is a separate setting from malware protection, and it's not actually disabled when you install another anti-malware software. Here's how to disable it:

  1. Open the Windows Security app.
  2. Click Firewall & network protection in the main menu or the left-side pane.
  3. You can choose firewall settings for domain networks, private networks, and public networks separately. Click the appropriate option, though we don't recommend disabling the firewall for public networks.
    Screenshot of the Firewall & network control section in the Windows Security app
  4. Set the toggle under Microsoft Defender Firewall to Off.
    Screenshot of the Microsoft Defender Firewall settings for private networks, showing that the firewall is disabled.
  5. Repeat this for other network types if necessary.

How to permanently disable Microsoft Defender

Disabling Microsoft Defender without replacing it can leave your computer severely unprotected against online attacks, potentially resulting in loss of sensitive data or even rendering your computer unusable. Don't disable it unless you know what you're doing.

If you understand the risks and still want to disable Microsoft Defender, there are a few methods to do it, though they're fairly complex. To do this, you'll first need to disable tamper protection in Windows Security. This will make it possible to change certain Windows security settings that are usually blocked off. Here's how:

  1. Open the Windows Security app.
  2. Click Virus & threat protection.
  3. Under Virus & threat protection settings, click Manage settings.
  4. Scroll down to Tamper protection and set the toggle to off.
    Screeshot of Microsoft Defender with Tamper Protection disabled

This will allow you to turn off Microsoft Defender using one of the following methods.

Disable Microsoft Defender using the Group Policy Editor

One way to disable Microsoft Defender is to use the Group Policy Editor. Normally, this tool is only available on Windows 11 Pro or higher, though you can access its settings on Home editions using an app like Policy Plus. We'll assume you're using the official Group Policy Editor here, though. Here's what to do:

  1. Press Windows + R on your keyboard to open the Run dialog.
  2. Type in gpedit.msc and press Enter to launch the Group Policy Editor.
  3. Under Computer Configuration on the left pane, choose Administrative Templates.
    Screenshot of Group Policy Editor with the Administrative Templates option highlighted
  4. Choose Windows Components.
  5. Find and open the Microsoft Defender Antivirus folder.
    Screenshot of Group Policy Editor with the Microsoft Defender antirivrus folder highlighted
  6. Double-click the option called Turn off Microsoft Defender Antivirus.
    Screenshot of Group Policy Editor with the option to turn off Microsoft Defender highlighted
  7. In the dialog that appears, choose the Enabled option and then click OK.
    Screenshot of a Group Policy Editor policy set to Enabled to turn off Microsoft Defender
  8. Restart your computer to finish applying the settings.

Microsoft Defender will now be disabled, which you can verify in the Windows Security app.

Disable Microsoft Defender with the Registry Editor

Another route for disabling Microsoft Defender on Windows 11 is using the Registry Editor, which is available on all editions of Windows 11. Here's how to disable Microsoft Defender:

  1. Open the Start menu and search for regedit. In the search results, click Run as administrator under Registry Editor on the right pane. Click Yes to confirm.
  2. Navigate to the following path in Registry Editor (you can copy and paste it in the address bar):
    Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender
  3. Right-click an empty area of the main pane and choose New > DWORD (32-bit) Value.
    Screenshow of Registry Editor with a context menu showing the option to add a new DWORD 32-bit value
  4. Change the value's name to DisableAntiSpyware, then press Enter.
  5. Double-click the value to change its properties.
  6. Set the Value data to 1. The base should be Hexadecimal. Click OK.
    Screenshot of a value's properties in Registry Editor to disable Microsoft Defender
  7. Close Registry Editor and restart your PC to apply the changes.

If you ever want to undo this, simply navigate to the same path in Registry Editor and delete the value you created.

Using the Command prompt (Windows Terminal)

If you'd rather use a command-line interface for changing these settings, you can use Command Prompt or Windows Terminal to add the registry value to disable Microsoft Defender. To do this, simply follow these steps:

  1. Press Windows + X and choose Terminal (Admin) from the menu.
  2. Copy and paste the following command into Windows Terminal, then press Enter:
    reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender" /v DisableAntiSpyware /t REG_DWORD /d 1 /f
    Screenshow of Windows Terminal showing a command for disabling Microsoft Defender
  3. You'll see a confirmation message. Close Windows Terminal and restart the computer for the changes to take effect.

To revert this process and delete the value you created, you can use this command to remove the registry key:

reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender" /v DisableAntiSpyware /f

You can also use third-party apps

If none of these methods seem easy enough for you, you can also use third-party apps like WinAero Tweaker to make this kind of change. However, there should be no need to do this since all the tools are built into Windows right out of the gate. Otherwise, that's all you need to know about disabling Windows Defender in Windows 11 As we've mentioned, other protection layers can be disabled in the Windows Security app, but these are usually too important to be turned off.