Windows Defender can be disabled, but you need to do it in the right order

Windows Defender is built into Windows and turned on by default. You can turn it off entirely, but the process has steps you must follow in a specific sequence — if you disable it the wrong way, Windows will turn it back on automatically. The cleanest method is to disable real-time protection first, then turn off the entire security app through Settings.

Before you disable Windows Defender, understand what you are losing: it scans files as you download and open them, watches for suspicious behavior, and blocks known malware. If you turn it off, you are responsible for protecting your device another way — either with a different antivirus program or by being extremely careful what you download and run.

Key Takeaways

  • Disabling real-time protection first prevents Windows from automatically restarting Windows Defender when you try to turn off the full app.
  • You can turn off Windows Defender through Settings on Windows 10 and 11, but the exact menu location differs between versions.
  • If you install a third-party antivirus program, Windows Defender usually disables itself automatically to avoid conflicts.
  • Windows may re-enable Windows Defender after major updates, so check periodically if you want it to stay off.

Disable real-time protection first (Windows 10 and 11)

Real-time protection is the part of Windows Defender that scans files as you use them. Turning this off first prevents Windows from restarting the full app when you try to disable it later.

Open Settings by pressing the Windows key and typing "settings", then press Enter. Go to Privacy & Security (Windows 11) or Update & Security (Windows 10). Look for Windows Security and click it. Click Virus & threat protection. Under "Virus & threat protection settings", click Manage settings. Toggle off Real-time protection. Windows will ask you to confirm — click Yes.

You may see a message that says "Your device is no longer being actively protected." This is expected. Real-time protection is now off, but Windows Defender itself is still running in the background.

Turn off Windows Defender entirely through Group Policy (Windows Pro, Enterprise, Education only)

If you have Windows Pro, Enterprise, or Education edition, you can use Group Policy to disable Windows Defender completely. Home edition does not have Group Policy, so skip to the next section.

Press the Windows key and type "gpedit.msc", then press Enter. Navigate to Computer Configuration > Administrative Templates > Windows Components > Microsoft Defender Antivirus. Look for the setting called Turn off Microsoft Defender Antivirus and double-click it. Select Enabled, then click OK. Close Group Policy and restart your computer.

This method completely disables Windows Defender and prevents Windows from turning it back on automatically. If you change your mind later, return to this same setting and select Not Configured or Disabled.

Turn off Windows Defender through Services (Windows Home edition)

Windows Home does not have Group Policy, so you must disable Windows Defender through Services instead. This method works on all Windows editions.

Press the Windows key and type "services.msc", then press Enter. The Services window will open. Scroll down and find Windows Defender Service (it may also be listed as "WinDefend"). Right-click it and select Properties. Under "Startup type", click the dropdown and select Disabled. Click Apply, then OK. Restart your computer.

After restart, Windows Defender will not run. However, Windows may re-enable this service after a major update, so check Services again after you install Windows updates.

Install a third-party antivirus to disable Windows Defender automatically

If you install another antivirus program like Norton, McAfee, Bitdefender, or Kaspersky, Windows Defender usually disables itself automatically to prevent conflicts. You do not need to manually turn it off first — the new program handles it.

After you install the third-party antivirus and restart your computer, open Windows Security and check Virus & threat protection. You should see a message saying your device is protected by the other program instead. If Windows Defender is still showing as active, open your new antivirus program's settings and look for an option to disable Windows Defender or other security software.

This is the safest way to replace Windows Defender because you ensure another protection layer is active before the first one shuts down. Never leave your device without any antivirus running.

What happens if Windows Defender turns itself back on

Windows automatically re-enables Windows Defender after major updates, or if it detects that no other antivirus is running. If you see it turn back on and you want it off, repeat the steps above. If you are using a third-party antivirus, check that program's settings to see if it has an option to keep Windows Defender disabled.

Some third-party antivirus programs include a setting to prevent Windows Defender from restarting. Look in your antivirus program's settings under "Protection", "Compatibility", or "Advanced" for an option like "Disable Windows Defender" or "Prevent Windows Defender activation".

Frequently Asked Questions

Will my computer be infected if I turn off Windows Defender?

Not automatically, but you lose the protection that scans files as you download and open them. Your risk depends on what you do online. If you install a different antivirus program first, you stay protected. If you turn off Windows Defender without replacing it, you must be very careful about what you download and which websites you visit.

Can I just disable it from the Windows Security app instead of using Settings?

You can disable real-time protection from the Windows Security app, but you cannot fully turn off Windows Defender from there. You must use Settings, Group Policy, or Services to disable the entire app. The Windows Security app only lets you toggle real-time protection on and off.

Why does Windows Defender keep turning back on after I disable it?

Windows re-enables it after major updates, or if it detects no other antivirus is running. If you are using Group Policy (Pro edition), make sure you set it to Enabled, not just Disabled. If you are using Services, check that the startup type is set to Disabled, not Manual.

Is it safe to disable Windows Defender if I do not have another antivirus?

It is not recommended. You lose real-time scanning of files and downloads. If you must disable it, be extremely cautious: avoid downloading files from untrusted sources, do not open email attachments from people you do not know, and do not visit suspicious websites. Installing a replacement antivirus program is a much safer choice.

What is the difference between disabling real-time protection and turning off Windows Defender completely?

Disabling real-time protection stops the scanning of files as you use them, but Windows Defender still runs in the background and can perform manual scans. Turning off Windows Defender completely stops the entire app from running. If you only want to reduce its impact on performance, disabling real-time protection may be enough.