You are about to download a driver or click a link from an email, and you want to make sure your laptop stays clean. This page gives you ten concrete, quick-to-do steps that stop most malware before it installs.
In short: Most malware gets on your machine through unverified downloads and compromised website links. You reduce this risk by keeping your browser and operating system fully updated, verifying every file source, and turning on automated scanning. These ten steps cover that protection from the first click to the final backup.
Our pick
Tap to see today's price on Amazon
Adds real-time web filtering and identity alerts that run in the background so you do not miss a threat.
Harden your browser settings before you browse
Your browser is the main entry point for drive-by downloads. If it is left on default settings, it may not block a malicious site before it loads. The other half of this decision is top ways to prevent laptop theft.
Turn on the built-in security layers first. In Chrome, go to Settings, then on the right menu, select Privacy and security. Under Security, select Use enhanced protection.
In Microsoft Edge, the equivalent is Microsoft Defender SmartScreen. It scans the reputation of every website and download automatically.
- Chrome path: Settings > Privacy and security > Security > Use enhanced protection
- Edge path: Settings > Privacy, search, and services > SmartScreen: On
Check your site permissions next. A site that asked for camera or microphone access once should not keep it forever. Review these grants monthly.
Finally, consider using a secure DNS. Changing your network DNS to a filtering service like Cloudflare can block known bad domains before the browser even sees the address.
Pro tip: Site isolation and Application Guard keep a compromised website from touching your main system. Make sure these are enabled in advanced browser settings.
Verify where every download comes from
Many infections start with a fake installer from a third-party download portal. You think you are getting a free tool, but you are actually installing a trojan. For the detail, see our notes on configuring screen timeout preferences.
Before clicking, verify the source. Always get software from the developer’s official website or a trusted store like the Microsoft Store.
- If you are on Windows, use the Microsoft Store or the developer’s site.
- If you are on macOS, use the Mac App Store.
Check the file extension carefully. A file that is supposed to be a video but ends in .exe is a major red flag. Legitimate Windows installers usually use .msi or .exe from a trusted domain.
During installation, choose the custom or advanced option. This stops the setup from silently bundling extra toolbars or adware.
Safety first: Right-click any downloaded file and select Scan with your antivirus before you open it. A quick scan catches threats that slipped through.
Spot the red flags in phishing emails
Phishing is a social engineering trick that uses urgency to make you click a bad link. Your inbox is a primary target because it feels personal.
Look for the sender address, not just the display name. Hover over the link to see the true URL in the bottom corner of the browser window. It helps to understand boost laptop windows speed before going further.
- If the link says service@paypal-security.com instead of the official domain, it is fake.
- If the email says your account will close in 24 hours, it is using a threat to rush you.
Never click a link in an email to verify your account. Open a new tab, type the website address yourself, and log in from there.
Ignore unexpected attachments. If you did not ask for an invoice, do not open the .zip or .doc file.
Keep your system patched and up to date
Every software update includes a fix for a security hole that was just discovered. Ignoring it is like leaving your front door unlocked.
Enable automatic updates for your operating system. In Windows 10 and 11, go to Settings, then Windows Update, and turn on Receive updates automatically.
You must also update your applications. Browsers, PDF readers, and Java updates patch vulnerabilities that attackers use to exploit your machine.
Do not forget your router. An outdated router is a weak point in your entire home network.
- Log into your router’s admin panel, usually by typing 192.168.1.1 into a browser.
- Check for the latest firmware version in the administration section.
Install a reputable antivirus and keep it running
A robust security suite is your first line of automated defense. It monitors your computer in the background and blocks threats before they reach you.
Windows Defender is a solid built-in option for basic needs. For more robust features like web advisor and identity monitoring, a dedicated suite helps.
Make sure your firewall is also active. It monitors incoming and outgoing traffic and blocks unauthorized communication.
Integrate a password manager into this step. Tools like Bitwarden or 1Password generate complex, unique passwords for every site. This limits the damage if one site is breached.
A dedicated security suite gives you the layer of protection that prevents a single bad click from becoming a system-wide infection.
This provides automated threat detection and public Wi-Fi security so you can focus on your other safe-browsing habits.
- Stay one step ahead. Suspicious links, risky sites, viruses, and scams, caught
- Keep your personal info safer. Identity monitoring watches for your exposed info and
Protect yourself when you are on public Wi-Fi
Public networks are hunting grounds. You must assume that everyone else on that coffee shop Wi-Fi can see your unencrypted traffic.
The best defense is a Virtual Private Network, or VPN. A VPN encrypts all data between your device and the internet, making it unreadable to snoopers.
Turn off network discovery and file sharing in your OS settings when on untrusted networks. This stops other users from finding your computer on the local network.
- Stick to HTTPS: ensure the padlock icon is in the address bar.
- Do not conduct online banking or enter passwords on public Wi-Fi without a VPN.
Pro tip: If you see no padlock icon in the browser address bar, do not enter any personal information on that site.
Back up your data with a removable drive
If ransomware does get in, it will encrypt your files and lock you out. Your final defense layer is having a backup that the malware cannot reach.
A physical, removable hard drive is the safest option. Ransomware usually cannot touch a drive that is physically disconnected from your laptop.
Use an external drive to back up your important documents, photos, and projects regularly. Check that the backup software includes ransomware defense.
Keeping an external drive gives you a recovery path so that a successful malware attack does not mean losing your data permanently.
This external drive lets you store a safe, offline copy of your files that ransomware cannot reach while your laptop is infected.
- Slim durable design to help take your important files with you
- Back up smarter with included device management software[2] with defense against
The bottom line
Start by fixing your browser settings and verifying your downloads, as those are the two most common ways malware gets in. Then keep your antivirus and system updates running in the background. For most users, getting a dedicated security suite and an external backup drive covers the biggest risks.
- Stay one step ahead. Suspicious links, risky sites, viruses, and scams, caught
- Keep your personal info safer. Identity monitoring watches for your exposed info and
Frequently asked questions
How do I know if my laptop is already infected?
Look for sudden slowdowns, new toolbars in your browser, or unexplained pop-ups. Run a full scan with your antivirus software. If the scan finds a threat, let it quarantine the file before you use the computer for sensitive tasks.
Are browser extensions safe to use?
Most extensions from well-known developers are safe, but some can be hijacked to inject malware. Only install extensions from trusted publishers, and disable or remove any you are not actively using. This reduces the surface area where an attacker can exploit your browser.
Does using a VPN make me completely immune?
No. A VPN encrypts your traffic, but it does not stop you from clicking a malicious link. If you download a virus through an encrypted connection, it will still install on your computer. You must still follow the download and browser hygiene steps outlined above.
What should I do if I accidentally downloaded a suspicious file?
Do not open it. Delete the file from your download folder and empty the recycle bin. Then, run a full antivirus scan immediately. If your computer starts acting strangely, disconnect it from the internet to stop any data from being sent to an attacker.