How to Configure Windows Defender Ransomware Protection Settings to Keep Your Files Safe

Share

Windows Defender ransomware protection secures your files by blocking unauthorized programs from encrypting or deleting them. You can access these settings in the Windows Security app and enable features like controlled folder access to guard important folders. Managing allowed apps and folders lets you balance security with usability, making sure trusted software works without interruption.

Where do I find ransomware protection settings in Windows Defender?

To access ransomware protection settings, open the Windows Security app by clicking the Start menu and typing "Windows Security." Launch the app, then select "Virus & threat protection" from the dashboard. Scroll down to the "Ransomware protection" section, where you’ll find options to enable and configure protections such as controlled folder access.

How do I turn on controlled folder access to protect my files?

Controlled folder access prevents unauthorized apps from changing files in protected folders. To enable it:

  1. In the "Ransomware protection" section, click "Manage ransomware protection."
  2. Toggle "Controlled folder access" to "On." This activates protection for key folders.

By default, Windows Defender protects common folders like Documents, Pictures, Videos, and Desktop. You can add more folders if you want extra coverage. When controlled folder access is on, only trusted apps can modify files in these folders, reducing the risk of ransomware encrypting or deleting your data.

How do I add apps or folders to the allowed list to avoid disruptions?

Sometimes legitimate apps get blocked by controlled folder access. To prevent this:

  1. To add trusted apps, go to "Controlled folder access" settings and select "Allow an app through controlled folder access."
  2. Click "Add an allowed app," then browse to and select the app’s executable file.

To add folders to protect:

  1. In ransomware protection settings, find "Protected folders" and click "Add a protected folder."
  2. Choose the folder you want to protect from unauthorized changes.

Adding trusted apps avoids unnecessary blocks, and adding folders extends protection beyond the default list.

What should I do if Windows Defender blocks an app I trust?

If Windows Defender blocks an app you trust, you’ll get a notification or see the block reported under "Virus & threat protection" notifications.

To review and restore access:

  1. Open Windows Security and go to "Virus & threat protection."
  2. Scroll down and click "Protection history."
  3. Find entries marked as blocked or prevented by controlled folder access.
  4. Select the blocked app and choose "Allow on device" or "Restore" to grant it access.

This lets you fix false positives without turning off ransomware protection, keeping your system secure while letting trusted apps work as needed.

Conclusion

Keep your ransomware protection effective by regularly reviewing your settings. Leave controlled folder access enabled, add new trusted apps when necessary, and promptly handle any blocked app notifications. This approach helps protect your files from ransomware while minimizing interruptions to your daily work.

Frequently Asked Questions

Can I protect custom folders with Windows Defender ransomware protection?

Yes, you can add any folder to the protected folders list in ransomware protection settings, extending security beyond the default system folders.

Will controlled folder access block all apps by default?

No, it only blocks apps that aren’t on the trusted list from modifying protected folders. Common Windows apps and well-known software are usually allowed automatically.

How do I know if controlled folder access is blocking an app?

You’ll receive a notification from Windows Security or see the blocked app listed in Protection history under Virus & threat protection.

Is it safe to disable controlled folder access if it causes problems?

Disabling controlled folder access reduces your protection against ransomware. Instead, add trusted apps to the allowed list to avoid problems while keeping protection active.

Read more