Windows Defender can be disabled, but doing so leaves your computer unprotected

You can turn off Windows Defender through Settings, Group Policy, or the Registry, depending on your Windows version and whether your computer is part of a workplace domain. The process takes a few minutes. However, permanently disabling your antivirus software means your device has no built-in protection against malware, viruses, or other threats — even if you plan to install a different antivirus program, the gap between disabling one and installing another creates risk.

Most people disable Windows Defender because they want to use a third-party antivirus instead, because they believe it's slowing their computer down, or because they're troubleshooting a software conflict. Each situation has a safer alternative than complete removal.

Key Takeaways

  • Windows Defender disables itself automatically when you install most third-party antivirus programs, so you usually don't need to remove it manually.
  • If you disable Windows Defender without installing a replacement, your computer will have no antivirus protection at all.
  • On home computers, you can disable it through Settings > Update & Security > Windows Security, but the setting may re-enable after Windows updates.
  • On work computers connected to a domain, Group Policy or Registry edits may be locked by your IT department and won't stick.
  • If Windows Defender is slowing your computer, excluding certain folders or files from scanning is safer than disabling the entire program.

Disable Windows Defender through Settings (home computers)

On a home computer running Windows 10 or 11, the simplest method is through the Settings app. Open Settings, go to Update & Security (Windows 10) or Privacy & Security (Windows 11), then select Windows Security. Click Virus & threat protection, then Manage settings. Toggle off Real-time protection.

This disables active scanning, but Windows Defender may re-enable itself after a Windows update or restart. The setting is not permanent without additional steps. If you want it to stay off, you'll need to also disable the Windows Defender service itself or use Group Policy.

Disable the Windows Defender service permanently

To prevent Windows Defender from restarting on its own, you can disable the service. Press Windows key + R, type services.msc, and press Enter. Find Windows Defender Advanced Protection Service in the list. Right-click it and select Properties. Change the Startup type dropdown to Disabled, then click Apply and OK.

You may also need to disable Windows Update Medic Service the same way, as it can restart Windows Defender. After disabling both services, restart your computer. Windows Defender should remain off unless a Windows update re-enables it.

Use Group Policy Editor (Windows Pro and Enterprise only)

Windows 10 and 11 Pro, Enterprise, and Education editions include Group Policy Editor, which offers more permanent control. Press Windows key + R, type gpedit.msc, and press Enter. Navigate to Computer Configuration > Administrative Templates > Windows Components > Microsoft Defender Antivirus. Double-click Turn off Microsoft Defender Antivirus and select Enabled.

This method is more resistant to Windows updates than the Settings approach, but it still may not survive major OS updates. Home editions of Windows do not have Group Policy Editor available.

Edit the Registry (advanced method)

Registry edits carry higher risk of system problems if done incorrectly. Press Windows key + R, type regedit, and press Enter. Navigate to HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender. Right-click in the empty space, select New > DWORD (32-bit) Value, and name it DisableAntiSpyware. Set the value to 1. Restart your computer.

This method persists longer than Settings changes but still may not survive major Windows updates. Do not edit the Registry unless you are comfortable with the risk of making your system unstable.

Why third-party antivirus programs usually handle this for you

When you install Bitdefender, Norton, McAfee, Kaspersky, or most other commercial antivirus programs, they automatically detect Windows Defender and disable it during installation. You do not need to remove it yourself. The installer handles the conflict to prevent two antivirus engines from running at the same time, which would slow your computer and cause false alerts.

If you're switching antivirus programs, install the new one first, let it disable Windows Defender, and then uninstall the old program. This keeps your computer protected throughout the transition.

What to do if Windows Defender is slowing your computer

Complete removal is not the only solution if Windows Defender is affecting performance. You can exclude specific folders or files from scanning instead. Open Windows Security, go to Virus & threat protection > Manage settings > Add or remove exclusions, and add the folders or file types that are causing slowdowns. This keeps protection active for the rest of your system.

You can also schedule scans for times when you're not using the computer, or reduce the scan frequency. These changes are less risky than disabling the entire program and still let you use your computer normally during the day.

Frequently Asked Questions

Will Windows Defender turn back on after I disable it?

Yes, it often does. Windows updates, security patches, and system restarts can re-enable Windows Defender even after you've turned it off. Disabling the service through services.msc or Group Policy makes it less likely to restart, but neither method is completely permanent across major Windows updates.

What happens if I disable Windows Defender without installing another antivirus?

Your computer will have no built-in antivirus protection. Malware, viruses, and other threats can infect your system without any warning or detection. This is not recommended unless you are installing a replacement antivirus immediately.

Can my IT department prevent me from disabling Windows Defender?

Yes. On work computers connected to a domain, your IT department can lock Group Policy settings so you cannot change them, even if you have administrator access. Contact your IT support if you need Windows Defender disabled for work purposes.

Is it safe to disable Windows Defender if I use a VPN?

No. A VPN encrypts your internet traffic but does not protect your computer from malware or viruses. You still need antivirus protection whether you use a VPN or not.

Why does Windows Defender keep turning back on?

Windows Update, the Windows Defender service, and the Windows Update Medic Service can all re-enable it. If you've disabled it through Settings but it keeps returning, you need to also disable the services themselves through services.msc.