KREN awareness programme for Kosovo schools

Emergency: 192
KREN KREN CyberHygiene
🆘 Help

Home / Devices / Windows computer

Windows computer

Computers are used for school, games and work – often by several family members. Updates, separate accounts and Windows Security are the basics.

Windows computers are in most homes and schools. They're often used by several people with the same account, with no password and with administrator rights – which makes it easy for a single harmful download (e.g. a game “crack”) to infect the whole computer.

Note for 2026: Windows 10 has not received regular updates from Microsoft since October 2025 (apart from the Extended Security Updates programme, ESU, available for a fee or by enrolling, which for home users runs until October 2026). If your computer supports it, move to Windows 11.

The menu paths below are for Windows 11. In Windows 10 or other versions they may differ slightly.

⚙️ Step-by-step settings

Menu names may differ slightly depending on the model and version.

Install Windows updates

Most attacks use known holes that updates have already closed.

  1. Open Start → Settings, or press Windows + I.
  2. Choose Windows Update.
  3. Click Check for updates and install everything.
  4. Turn on Get the latest updates as soon as they're available (optional).
  5. Under Advanced options, turn on Receive updates for other Microsoft products.
  6. Restart the computer when asked – the update isn't finished until you restart.
  7. Update your apps too: Microsoft Store → Library → Get updates.

Check Windows Security (the built-in antivirus)

Microsoft Defender is free and is enough for most homes, as long as it's switched on and up to date.

  1. Start → search for Windows Security and open it.
  2. Under Virus & threat protection, check that everything has a green tick.
  3. Under Virus & threat protection settings → turn on Real-time protection, Cloud-delivered protection and Tamper Protection.
  4. Turn on Controlled folder access under Ransomware protection – if a legitimate program gets blocked, you can allow it separately.
  5. Under App & browser control → Reputation-based protection → turn on all the options (SmartScreen, Potentially unwanted app blocking).
  6. Under Firewall & network protection, check that the firewall is on for all networks.
  7. Don't install two antivirus programs at the same time – they get in each other's way.

Create separate accounts – children as standard users

With a standard account, a harmful program can't change the system without the parent's password.

  1. Settings → Accounts → Family → Add someone for children, or Other users for adults.
  2. For your child, create or use a Microsoft child account so that Microsoft Family Safety works.
  3. Check that the child's account is a Standard user, not an Administrator.
  4. The parent uses their own administrator account only for installing things and making changes.
  5. In Settings → Accounts → Sign-in options, set a Windows Hello PIN or a password for every account.
  6. In Control Panel → User Accounts → Change User Account Control settings (UAC), check that it's set to at least the default level.

Screen lock and secure sign-in

An open, unattended computer at school or in a library is an invitation to misuse.

  1. Settings → Accounts → Sign-in options → set a PIN (Windows Hello), fingerprint or facial recognition.
  2. In Sign-in options → If you've been away, when should Windows require you to sign in again? → When PC wakes up from sleep.
  3. Settings → System → Power (or Power & battery) → Screen, sleep & hibernate timeouts → set the screen to turn off after 5–10 minutes.
  4. Learn the shortcut Windows + L to lock the computer every time you walk away.
  5. Turn on Dynamic lock (it locks when your Bluetooth-paired phone moves away), if you find it useful.

Encrypt the disk

If your laptop is stolen, the data can't be read without your sign-in.

  1. Settings → Privacy & security → Device encryption → turn it on (Windows 11 Home, on devices that support it).
  2. On Windows Pro: Control Panel → BitLocker Drive Encryption → Turn on BitLocker.
  3. Save the recovery key – it's usually stored in your Microsoft account at account.microsoft.com/devices/recoverykey.
  4. Also write it down on paper and keep it somewhere safe, not next to the laptop.
  5. If the option doesn't appear, the device may not support automatic encryption.

Back up your files

Ransomware, a broken disk or accidental deletion can wipe out homework and photos.

  1. Open the Windows Backup app from Start.
  2. Turn on backup of your Desktop, Documents and Pictures folders to OneDrive.
  3. For a second copy, use an external drive: Control Panel → File History → Turn on.
  4. Disconnect the external drive after backing up – that way ransomware can't reach it.
  5. Try restoring a file once to make sure the backup works.

Check your programs and startup apps

Unnecessary or outdated programs give attackers a way in.

  1. Settings → Apps → Installed apps → uninstall programs you don't recognise or don't use.
  2. Settings → Apps → Startup → turn off unnecessary programs.
  3. Update the programs you use often (browser, Zoom/Teams, PDF reader) from within the program itself or from the Microsoft Store.
  4. Only download programs from the Microsoft Store or the manufacturer's official website.
  5. Don't install “optimisers”, “registry cleaners” or “speed boosters” – they're often unnecessary or harmful.

✅ Do / Don't

✅ Do this

  • Install Windows updates and restart your computer regularly.
  • Keep Windows Security switched on, with real-time protection.
  • Create a separate account for each family member; children as standard users.
  • Lock the screen with Windows + L when you walk away.
  • Back up to OneDrive and to an external drive.
  • Only download programs from the Microsoft Store or official websites.
  • Turn on device encryption or BitLocker on laptops.
  • Move to Windows 11 if your computer supports it.

❌ Don't do this

  • Don't download “cracked” games or programs, “keygens” or “activators” – they're the most common source of viruses.
  • Don't use the administrator account for everyday tasks.
  • Don't turn off the antivirus or firewall “to make the game work”.
  • Don't call numbers shown in “Your computer is infected” windows – they're scams.
  • Don't let anyone connect to your computer remotely (AnyDesk, TeamViewer, Quick Assist) unless you know them personally.
  • Don't plug in USB sticks you've found or don't recognise.
  • Don't open .exe, .scr, .zip or .iso attachments from unexpected emails.
  • Don't keep using Windows 10 indefinitely without security updates.

👨‍👩‍👧 Parental controls with Microsoft Family Safety

Microsoft Family Safety is free and works with Microsoft accounts. The controls apply on Windows, on Xbox and in the Microsoft Edge browser.

  1. The parent signs in at family.microsoft.com with their own Microsoft account and creates a family group.
  2. Add your child as a Member – with an existing or a new account. On the computer: Settings → Accounts → Family → Add someone.
  3. Your child signs in to Windows with their own Microsoft account (not the parent's).
  4. In your child's profile: Screen time – set a schedule and a daily limit for the device and for individual apps/games.
  5. Content filters: turn on Filter inappropriate websites and searches and SafeSearch; choose the age limit for apps and games.
  6. When web filtering is on, other browsers on Windows are usually blocked so that your child uses the filtered Edge.
  7. Spending: require a parent's approval for purchases in the Microsoft Store.
  8. Turn on activity reports to see weekly usage, and talk about them together.
Some Family Safety features have changed over the years and may change again; check the current options at family.microsoft.com.

⚠️ Warning signs

  • Windows pop up saying “your computer is infected – call this number”.
  • Files have strange extensions and won't open, or a message appears demanding payment (ransomware).
  • Your browser's home page or search engine has changed by itself.
  • Windows Security has been turned off and won't turn back on.
  • The computer is very slow and the fan runs loudly even when you're not doing anything.
  • Programs or browser extensions appear that you didn't install.
  • Friends get emails or messages from your accounts that you didn't send.

🆘 If you get hacked

  1. Step 1: Disconnect the computer from the internet (unplug the cable or turn off Wi-Fi) and tell an adult.
  2. Step 2: From another, safe device, change the passwords for your email, Microsoft account and social media, and turn on 2-step verification.
  3. Step 3: Open Windows Security → Virus & threat protection → Scan options → Microsoft Defender Offline scan → Scan now.
  4. Step 4: Uninstall unknown programs and browser extensions; reset your browser settings.
  5. Step 5: If it's ransomware, don't pay. Restore your files from the backup once the computer has been cleaned.
  6. Step 6: If the problem continues, reset Windows: Settings → System → Recovery → Reset this PC – ideally choosing Remove everything.
  7. Step 7: If money has been stolen, or there's blackmail or threats, keep the evidence and report it to Kosovo Police on 192.

More help: Help & Reporting

📱 Other devices

🤖 Android phone📱 iPhone and iPad🍏 Mac / macOS🌐 Web browser🎮 Game consoles📺 Smart TVs and smart devices📶 Home Wi-Fi and router
↑↓ to move · Enter to openEsc to close