Microsoft Defender Antivirus is built into Windows 10 to provide real-time protection against malware and threats. Whether you're troubleshooting or installing trusted software, knowing how to toggle it on or off can be useful.
Disable Microsoft Defender Antivirus (Temporarily)
This method is suitable for short-term use, such as installing software that Defender flags incorrectly.
Steps
- Open the Start Menu and search for Windows Security.
- Launch the Windows Security app.
- Go to Virus & threat protection.
- Click Manage settings under Virus & threat protection settings.
- Toggle Real-time protection to Off.
- Confirm the prompt by clicking Yes.
- Disable Tamper Protection if you plan to modify Defender settings from outside the Windows Security app. (Optional)
Note: Real-time protection will automatically re-enable after a restart or some time.
Disable Microsoft Defender Antivirus (Permanently)
This method is for advanced users and requires Safe Mode and registry edits.
Steps
- Boot into Safe Mode: Press Windows Key + R, type msconfig, and enable Safe boot under the Boot tab. Then restart your PC.
- Press Windows Key + R, type regedit, and press Enter.
- Navigate to the following (one by one):
- HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sense
- HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WdBoot
- HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WdFilter
- HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WdNisDrv
- HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WdNisSvc
- HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinDefend
- For each of the above folders, set the key Start value to 4. This prevents Defender services from starting.
- If needed, enter the system configuration again and disable Safe boot under the Boot tab. Then restart your PC.
Re-enable Microsoft Defender Antivirus
To undo the registry changes:
- Boot into Safe Mode.
- Restore the key Start values to:
- HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sense\Start = 3
- HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WdBoot\Start = 0
- HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WdFilter\Start = 0
- HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WdNisDrv\Start = 3
- HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WdNisSvc\Start = 3
- HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinDefend\Start = 2
Important Notes
- Disabling Defender exposes your system to potential threats.
- If performance is a concern, consider using a lightweight third-party antivirus instead of disabling protection entirely.
Managing Microsoft Defender Antivirus in Windows 10 gives you flexibility over system protection. Use temporary disabling for troubleshooting, and only apply permanent changes if you are confident in advanced configurations and alternative security measures.