随着网络安全的发展，威胁变得更加复杂，风险也更高。这可能是一个可怕的景象，每个人都会想到的问题是：“我如何保护我的Windows PC 和个人数据？”
如果您是Windows 11用户，您可能会考虑是否应该购买额外的防病毒程序，或者操作系统附带的内置安全功能是否足够。正确的答案取决于对Windows 11现有保护的深度和广度的了解，之后只有您可以决定是否觉得它还不够。
Windows安全套件(Windows Security Suite)：不仅仅是(Than Just)一个操作系统
Windows 11不仅仅是一个操作系统；更是一个操作系统。它是一位不知疲倦地巡逻您的数字边界的保安人员。从系统启动的那一刻起，Windows 11就开始值班，部署高科技硬件和软件组合来保护您的身份、信息和应用程序。
我们将根据它们保护数字生活的哪些部分来分解操作系统的不同安全组件。
恶意软件克星
恶意软件(Malware)防护是任何网络安全策略的关键部分，Windows 11 也不会让您失望。实时保护和检测机制正在发挥作用，以抵御这些数字寄生虫。有两个主要组件可以保护您免受恶意软件的侵害，首先是Windows Defender。
Microsoft Defender 防病毒软件(Microsoft Defender Antivirus)：您的数字保镖(Digital Bodyguard)
系统防御的核心是Microsoft Defender 防病毒(Microsoft Defender Antivirus)软件。将其视为始终值班的数字保镖，使用下一代技术提供实时防病毒保护。
与第三方防病毒程序一样，Microsoft会使用最新的病毒定义更新Defender 。只要您安装更新，它就应该提供与典型付费套件类似的保护。
Microsoft Defender SmartScreen：您的数字顾问(Digital Advisor)
Microsoft Defender SmartScreen(Microsoft Defender SmartScreen)是一个顾问，当网站、应用程序或下载内容带有恶意特征时，它会向你发出警报。
Smartscreen 可保护您免受钓鱼网站等在线威胁，并检查您下载的任何文件。它使用动态更新的报告威胁列表来确保您不会意外地陷入危险的地方并成为身份盗窃(identity theft)等犯罪行为的受害者。如果您在访问网站时收到SmartScreen警告，您最好三思而后行！
网络捍卫者
如今，几乎每台个人计算机都连接到某种类型的网络，如果您的安全措施达不到要求，世界任何地方的犯罪分子都有可能趁虚而入。Windows 11 具有广泛的网络安全功能，如果没有这些功能，您的计算机在连接到互联网后几分钟内就会被感染。
微软防火墙：围攻
Microsoft防火墙(Microsoft Firewall)充当数字墙，击退试图通过互联网或网络渗透您的 PC 的黑客或恶意软件。大多数情况下，这发生在后台，但有时当您启动需要网络访问的程序时，防火墙会要求您批准它。
安全 Wi-Fi：尽力而为
使用Windows 11(Windows 11)畅游无线世界比以往更加安全。该系统支持行业标准化的Wi-Fi身份验证和加密方法，包括WiFi 6和WPA3。
请记住(Remember)，要利用这种改进的 Wi-Fi 安全性，您必须拥有支持这些标准的硬件。即，您需要一个支持Wi-Fi 6和WPA3的路由器和网络适配器。
身份保护者
Windows 11 提供了各种身份保护措施。每分钟都会有不断的密码破解尝试，无论是通过网络远程还是由能够物理访问您的 Windows 11 设备的人进行。有了这些功能，当其他方法（例如恶意软件）失败时，其他人侵入您的计算机的可能性就会大大降低。
Windows Hello：您的个人数字门卫(Digital Doorkeeper)
Windows Hello就像一个数字门卫，让你可以使用PIN、面部识别或指纹进入 Windows 11 设备。其中哪些(Which)选项可用取决于您的计算机可以访问的硬件。例如，您必须拥有Windows Hello 认证的(Windows Hello-certified)网络摄像头才能使用面部解锁，当然，您需要兼容的指纹扫描仪才能使用该方法。
进近(Approach)时唤醒并离开时(Leave)锁定：(Lock)您的数字(Digital)哨兵
对于配备存在检测传感器的设备，Windows 11 提供了一项功能，可在您离开时使用面部识别功能自动锁定您的设备，并在您返回时将其解锁。(automatically locks your device)这解决了一个常见问题，即人们在起床做其他事情之前忘记锁定计算机，这为坏人留下了可乘之机。
设备和数据保护器
虽然我们上面提到的安全功能可以在您的Windows设备落入坏人之手时保护您的数据安全，但使用这些工具您可以将它们找回来，或者查看计算机上的某些内容是否在不应该的地方进行操作。
查找我的设备(My Device)：您的数字(Digital)定位器
“查找我的设备”(Find My Device)功能就像一个数字定位器。启用后，它可以帮助恢复丢失或被盗的硬件，从而减轻依赖于对设备的物理访问的安全威胁。
隐私仪表板(Privacy Dashboard)：您的数字控制中心(Digital Control Center)
隐私仪表板(Privacy Dashboard)是您的数字控制中心，提供简单的视图，您可以在其中管理数据、导出报告以及查看哪些应用程序正在使用您的相机、麦克风甚至您的位置。
应用守护者
应用程序通常是网络安全防护中的薄弱环节。然而，Windows 11 在保护您的应用程序方面取得了重大进展，以多种方式保护您的宝贵信息。
Microsoft Edge：您的数字侦察兵
Microsoft Edge是您的数字侦察员，可阻止广告跟踪器并防御恶意软件。它还会检查您的密码是否已被泄露。与Google Chrome一样，Edge现在也是基于 Chromium 的，因此它不再是 Google 浏览器或(Edge)Firefox浏览器的劣势。不再迫切需要使用第三方浏览器。
OneDrive：您的数字安全网
如果您使用Windows 11中的(Windows 11)OneDrive备份功能，您的文档和图片会自动备份，为您的数据提供数字安全网。因此，即使最坏的情况发生，即使您的本地数据被恶意软件破坏，您也可以随时将其恢复。特别是，OneDrive可以保护您的数据免受勒索软件(Ransomware)攻击。
微软家庭安全(Microsoft Family Safety)：您的数字(Digital)守护者
Microsoft 家庭安全(Microsoft Family Safety)是您家人的数字监护人。它通过提供家庭活动的透明度来帮助养成健康的数字习惯。您可以使用家长控制来阻止不当的应用和游戏，并使用Windows(Windows)、Xbox和Android上的Microsoft Edge限制浏览适合儿童的网站。
Windows 11安全功能(Security Features Compare)与Windows 10的比较
Windows 11建立在其前身 Windows 10 的安全框架之上，但又更进一步。它增强了现有功能，同时引入了新功能，创建了针对网络威胁的更强大的防御系统。从更先进的防病毒机制到更强大的身份保护，Windows 11在安全性方面取得了进步。
还值得一提的是，每个版本的Windows最终都会退出其支持窗口。届时，使用旧版本Windows的每个人都将需要迁移，否则将面临严重的安全风险。因此，即使Windows 11 的(Windows 11)安全性并不比Windows 10 高多少，假设您想坚持使用Windows作为操作系统，您也必须在某个时候进行升级。
Windows 11安全性的改进给那些想要从Windows 10等早期版本升级的人带来了额外的麻烦。具体来说，Windows 11需要某些硬件安全功能，例如TPM 2.0模块，否则您将无法升级。这意味着一台新计算机，或者至少在某个时候更换当前计算机的主要组件。
您是否需要防病毒软件(Antivirus Software)，或者 Windows Defender 是否足够好(Defender Good Enough)？
Windows 11 采用的分层安全方法值得称赞，可以针对各种威胁提供保护。然而，问题仍然存在：这些措施是否(Are)足以消除或防范重大安全威胁和恶意软件？
答案并不是一成不变的。虽然Windows 11提供的全面安全功能足以满足大多数用户的需求，但没有任何系统能够免受所有威胁。网络安全(Cybersecurity)是一场竞赛，随着防御措施的发展，其旨在应对的威胁也在不断发展。
Windows 11的内置功能应该为普通用户提供坚实的保护。然而，额外的安全措施，例如第三方防病毒或防火墙，可能对那些处理敏感数据或在高风险数字环境中操作的人有益。
Windows 的安全性确实存在一些明显的缺陷需要填补。例如，在撰写本文时，还没有操作系统本机VPN（虚拟专用网络），因此我们建议您在必要时购买一个信誉良好的 VPN。(Virtual Private Network)您可能还需要第三方密码管理器，因为 Microsoft 的内部解决方案不太用户友好。
特殊类型的恶意软件（例如广告软件和间谍软件）有时只能使用专业工具（例如Malwarebytes的反恶意软件应用程序）来处理。
无论如何，自微软开始将(Microsoft)Defender等软件纳入操作系统以来，笔者从未觉得有必要在内置防病毒软件之外添加更多安全软件。
第三方(Third-party Security Software)安全软件(Cons)的优缺点_(Pros)
虽然第三方防病毒软件可能会在特定区域提供额外的安全性，但您还必须考虑添加此类软件可能会干扰Windows，而不是 Windows 的集成部分，并且可能未进行优化。
此外，第三方解决方案可能会为您带来更多工作，因为它们可能必须请求Windows自动授予其自己的软件组件的权限。当所有安全组件都不在内部时，可能会出现某种额外的摩擦。
此外，这些安全软件包可能会使您的系统变得臃肿，从而减慢速度。这并不是说 Windows 11 自己的安全组件没有性能成本，但这就是我们在这里使用的基准。如果使用额外的第三方软件，速度不太可能更快。
如果您确实需要比Windows附带的更多保护，可以使用以下一些最佳防病毒软件选项来帮助您入门：
不仅仅是 Windows 可以从这些防病毒套件等安全工具中受益。您可能需要Apple macOS 的病毒防护，因此请查看我们针对 Mac 的最佳防病毒选项(best antivirus options for Mac)。
Does Your Windows 11 PC Need an Antivirus?
As cybersecurity evolves, threats become more sophisticated, with high ѕtakes. This can be a ѕcary landscape, and the question on everyone’s mind can be: “How can I protect my Windows PC and personal datа?”
If you’re a Windows 11 user, you may be mulling over whether or not you should invest in an additional antivirus program or if the built-in security features that come with your operating system are enough. The right answer depends on understanding the depth and breadth of protections already on Windows 11, after which only you can decide if you feel it isn’t sufficient.
The Windows Security Suite: More Than Just An Operating System
Windows 11 is not just an operating system; it’s a security guard tirelessly patrolling your digital borders. From the moment your system powers on, Windows 11 is on duty, deploying a mix of high-tech hardware and software to safeguard your identity, information, and applications.
We’ll break down the different security components of the OS grouped by what part of your digital life they protect.
The Malware Busters
Malware protection is a pivotal part of any cybersecurity strategy, and Windows 11 doesn’t disappoint. Real-time protection and detection mechanisms are in play to ward off these digital parasites. There are two main components that protect you from malware, starting with Windows Defender.
Microsoft Defender Antivirus: Your Digital Bodyguard
At the heart of the system’s defenses is the Microsoft Defender Antivirus. Think of it as a digital bodyguard always on duty, using next-generation technology to offer real-time antivirus protection.
Like a third-party antivirus program, Microsoft keeps Defender updated with the latest virus definitions. As long as you install your updates, it should offer similar protection to the typical paid suites.
Microsoft Defender SmartScreen: Your Digital Advisor
The Microsoft Defender SmartScreen is an advisor, alerting you when a website, application, or download bears the hallmarks of malicious intent.
Smartscreen protects you against online threats such as phishing websites and inspects any files you download. It uses a dynamically-updated list of reported threats to ensure you don’t accidentally end up somewhere dangerous and fall victim to crimes such as identity theft. If you get a SmartScreen warning when accessing a site, you’d better think twice about proceeding!
The Network Defenders
Almost every personal computer is connected to a network of some sort these days, which makes it possible for malefactors from anywhere in the world to slip in through the cracks if your security isn’t up to the job. Windows 11 has extensive network security features, without which your computer would be infected in minutes after being connected to the internet.
Microsoft Firewall: Under Siege
The Microsoft Firewall acts as a digital wall, repelling hackers or malicious software that attempt to infiltrate your PC through the internet or a network. For the most part, this happens in the background, but occasionally when you launch a program that wants network access, the firewall will ask you to approve it.
Secure Wi-Fi: Take Your Best Shot
Navigating the wireless world is safer than ever with Windows 11. The system supports industry-standardized authentication and encryption methods for Wi-Fi, including WiFi 6 and WPA3.
Remember that to take advantage of this improved Wi-Fi security, you must have hardware that supports those standards. I.e., you need a router and network adapter that supports Wi-Fi 6 and WPA3.
The Identity Protectors
Windows 11 offers various identity protection measures. There are constant password-breaking attempts every minute, whether remotely over the network or by someone with physical access to your Windows 11 device. With these features, it becomes significantly less likely that someone can break into your computer when other methods, such as malware, fail.
Windows Hello: Your Personal Digital Doorkeeper
Windows Hello is like a digital doorkeeper, letting you into your Windows 11 devices using a PIN, facial recognition, or a fingerprint. Which of these options is available depends on what hardware your computer has access to. For example, you must have a Windows Hello-certified webcam to use face unlock, and of course, you need a compatible fingerprint scanner to use that method.
Wake on Approach and Lock on Leave: Your Digital Sentry
For devices equipped with a presence detection sensor, Windows 11 offers a feature that automatically locks your device using facial recognition when you walk away and unlocks it when you return. This solved a common issue where people forget to lock their computers before getting up to do something else, which leaves a window of opportunity for the bad guys.
The Device and Data Protectors
While the security features we mentioned above can keep your data safe if your Windows device falls into the wrong hands, with these tools you can get them back, or see if something on your computer is poking around where it shouldn’t.
Find My Device: Your Digital Locator
The Find My Device feature is like a digital locator. When enabled, it can help recover lost or stolen hardware, mitigating security threats that rely on physical access to devices.
Privacy Dashboard: Your Digital Control Center
The Privacy Dashboard is your digital control center, offering a simple view where you can manage data, export reports, and view which apps are using your camera, mic, and even your location.
The Application Guardians
Applications are often a weak spot in the armor of cybersecurity. Windows 11, however, has taken significant strides to secure your apps, protecting your valuable information in multiple ways.
Microsoft Edge: Your Digital Scout
Microsoft Edge is your digital scout, blocking ad trackers and defending against malware. It also checks if your passwords have been compromised. Like Google Chrome, Edge is now Chromium-based, so it’s no longer the underdog against Google’s browser or Firefox. There’s no pressing need to use a third-party browser anymore.
OneDrive: Your Digital Safety Net
If you use the OneDrive backup feature in Windows 11, your documents and pictures are automatically backed up, providing a digital safety net for your data. So even if the worst happens, and even if your local data is destroyed by malware, you can always get it back. In particular, OneDrive can safeguard your data against Ransomware attacks.
Microsoft Family Safety: Your Digital Guardian
Microsoft Family Safety is the digital guardian for your family. It helps develop healthy digital habits by providing transparency into your family’s activities. You can use parental controls to block inappropriate apps and games, and limit browsing to kid-friendly websites using Microsoft Edge on Windows, Xbox, and Android.
How Windows 11 Security Features Compare to Windows 10’s
Windows 11 builds on the security framework of its predecessor, Windows 10, but goes a few steps further. It enhances existing features while introducing new ones, creating a more fortified defense system against cyber threats. From a more advanced antivirus mechanism to more robust identity protection, Windows 11 is a step up in security.
It’s also worth mentioning that every version of Windows eventually exits its support window. At which point, everyone on the older version of Windows will need to migrate or risk serious security risks. So even if Windows 11 didn’t have much more security than Windows 10, you’d have to upgrade at some point, assuming you want to stick with Windows as your OS.
Improvements in Windows 11 security add an additional wrinkle to those who want to upgrade from earlier versions such as Windows 10. Specifically, Windows 11 requires certain hardware security features, such as a TPM 2.0 module, or you won’t be able to upgrade. That means a new computer, or at the very least, replacing major components of your current computer at some point.
Do You Need Antivirus Software, or Is Windows Defender Good Enough?
The layered security approach that Windows 11 adopts is commendable, offering protection against a wide array of threats. However, the question remains: Are these measures enough to neutralize or protect against major security threats and malware?
The answer isn’t cut and dried. While Windows 11 offers comprehensive security features that should be sufficient for most users, no system is impervious to all threats. Cybersecurity is a race, and as defenses evolve, so do the threats they’re designed to counter.
Windows 11’s built-in features should provide solid protection for the average user. However, additional security measures, such as a third-party antivirus or firewall, could be beneficial for those dealing with sensitive data or operating in high-risk digital environments.
There are a few notable gaps that do need filling in Windows’ security. For example, there’s no OS-native VPN (Virtual Private Network) at the time of writing, so we advise you to get a reputable one if necessary. You’ll probably also want third-party password managers since Microsoft’s in-house solutions aren’t as user-friendly as possible.
Special types of malware, such as adware and spyware, can sometimes only be dealt with using specialist tools, such as the Malwarebytes’ anti-malware app.
For what it’s worth, this author has never felt the need to add more security software beyond the built-in antivirus, since Microsoft began to include software such as Defender as part of the operating system.
The Pros and Cons of Third-party Security Software
While third-party antivirus software might offer extra security in specific areas, you also have to consider that adding such software can interfere with Windows, not being an integrated part of it and, perhaps not optimized.
Also, third-party solutions might make more work for you as they may have to ask permission for things that Windows automatically grants to its own software components. There’s likely to be some sort of extra friction when all your security components aren’t in-house.
Additionally, these security software packages can add bloat to your system, slowing things down. That’s not to say that Windows 11’s own security components don’t have a performance cost, but that’s the baseline we’re working with here. It’s unlikely to be any faster with additional third-party software.
If you do want more protection than Windows ships with, here are some of the best antivirus software options to get you started:
It’s not just Windows that can benefit from security tools like these antivirus suites. You might want virus protection for Apple macOS, so check out our best antivirus options for Mac.
