What HVCI does and why you might need it

Hypervisor-Protected Code Integrity (HVCI) is a Windows security feature that uses your processor's virtualization hardware to protect system memory from malicious changes. When HVCI is on, Windows runs a separate security layer that watches for unauthorized code trying to load into protected memory — even if malware has already gained access to your computer.

You do not need HVCI for everyday use. Most people run Windows without it. But if you work with sensitive data, use your computer for security-critical tasks, or your organization requires it, turning it on adds a real layer of protection. The tradeoff is that some older software and drivers may stop working or run slower.

HVCI only works on newer processors with virtualization support built in. If your processor does not have this feature, Windows will not let you turn it on, and that is fine — your computer simply cannot use it.

Key Takeaways

  • HVCI requires a processor with virtualization support (Intel VT-x or AMD-V), and you can check whether yours has it before attempting to enable it.
  • The fastest way to turn on HVCI is through Windows Security, which takes about three clicks and requires a restart.
  • Some older drivers and software will stop working once HVCI is on, so test it on a non-critical computer first if you are unsure.
  • If HVCI causes problems, you can turn it off the same way you turned it on, and Windows will return to normal after a restart.

Check whether your processor supports HVCI

Before you enable HVCI, confirm that your processor has the virtualization feature it needs. This takes two minutes and saves you from enabling a setting that will not actually work.

Open the Start menu and type System Information. Click the result to open it. Look for the line that says Hyper-V Capable. If it says Yes, your processor supports HVCI and you can proceed. If it says No, your processor does not have virtualization support, and HVCI cannot be enabled on this computer.

If you see No but believe your processor should support it, the feature may be disabled in your BIOS or UEFI settings. Restarting your computer and entering the BIOS (usually by pressing Delete, F2, or F12 during startup — check your computer manufacturer's documentation) to enable virtualization there may help, but this is an advanced step and not necessary for most users.

Enable HVCI through Windows Security

This is the standard way to turn on HVCI and works on Windows 10 and Windows 11. Open the Start menu and type Windows Security. Click the result to open it.

In Windows Security, click Device Security in the left sidebar. Look for the section called Core Isolation. You will see a toggle switch next to Memory Integrity. Click the toggle to turn it on.

Windows will ask you to restart your computer. Save any open work, then click Restart Now. Your computer will restart and HVCI will be active after the restart completes.

What to do if HVCI causes problems

Some older drivers — particularly for graphics cards, printers, and security software — do not work with HVCI enabled. If your computer becomes unstable, a program stops launching, or a device stops responding after you enable HVCI, the feature is likely conflicting with that software.

Turn HVCI off by going back to Windows Security, clicking Device SecurityCore Isolation, and toggling Memory Integrity off. Restart your computer. The problem should resolve immediately.

If you need HVCI on but have a conflicting driver, contact the software or device manufacturer to ask whether they have an updated driver that supports HVCI. Many manufacturers have released updates specifically to fix this. In the meantime, you can keep HVCI off without any security penalty — it is an optional hardening feature, not a requirement.

Verify that HVCI is actually running

After you restart, HVCI should be on, but you can confirm it is working. Open Windows Security again, go to Device Security, and check that Memory Integrity still shows as on. If the toggle is off, the restart did not complete properly or your system disabled it automatically due to a conflict.

You can also open PowerShell as Administrator (right-click the Start menu and select Windows Terminal (Admin)) and run this command: Get-ComputerInfo | Select HyperVRequirementVirtualizationFirmwareEnabled. If the result shows True, virtualization is enabled and HVCI can run.

Performance and compatibility considerations

HVCI has a real but usually small performance cost. On most modern computers, you will not notice it during everyday tasks like browsing, email, or document editing. Some applications that do heavy processing — video editing, 3D rendering, or gaming — may see a measurable slowdown, typically between 5 and 15 percent depending on the workload and your processor.

The bigger issue is compatibility. Antivirus software, VPN clients, and system utilities sometimes conflict with HVCI because they try to load code into protected memory. If you use specialized software for your work, test HVCI on a non-critical computer or during a time when you can afford downtime. If problems appear, you know to keep HVCI off on that machine.

Frequently Asked Questions

Do I need HVCI turned on?

No. HVCI is optional and most people do not use it. Turn it on only if your organization requires it, you work with highly sensitive data, or you want the additional security layer it provides. It is not necessary for normal computer use.

Will HVCI slow down my computer?

Probably not noticeably. Most everyday tasks run at the same speed with HVCI on. Some applications that do heavy processing may slow down by 5 to 15 percent, but this varies by software and processor. The only way to know for certain is to enable it and test your own workload.

What if I enable HVCI and my computer will not start?

Restart your computer and enter Safe Mode (hold Shift while clicking Restart from the Start menu, then choose Troubleshoot and Safe Mode). Once in Safe Mode, open Windows Security and turn HVCI off. Restart normally and your computer should work again.

Can I turn HVCI on and off whenever I want?

Yes. You can toggle it on or off through Windows Security at any time. Each change requires a restart, but there is no limit to how many times you can switch it. This makes it safe to test — if it causes problems, you can turn it off immediately.

Does HVCI protect against all malware?

No. HVCI protects against one specific attack method — malware trying to load code into protected system memory. It does not protect against phishing, ransomware that encrypts your files, or malware that runs in user-level processes. Use HVCI as one part of a broader security approach, not as your only defense.