Enabling a single security setting in Windows 10 and 11 could significantly reduce the risk of falling victim to ransomware. Consumer expert Tom Morgan from Which? has highlighted the importance of controlled folder access, a feature that is not always activated by default.
What Is Controlled Folder Access?
Controlled folder access is a built-in Windows security feature that prevents untrusted applications from making changes to files in protected folders. Ransomware, a type of malicious software that locks users out of their files or systems and demands payment for access, can be thwarted by this extra layer of protection.
How to Enable Controlled Folder Access
Tom Morgan advises Windows users to check their settings to ensure controlled folder access is turned on. The steps are:
- Open 'Settings'
- Go to 'Privacy & Security'
- Select 'Windows Security'
- Click on 'Virus & Threat Protection'
- Scroll down to 'Ransomware Protection' and select 'Manage Ransomware Protection'
- Toggle on 'Controlled Folder Access' and approve any prompts
Once enabled, the feature blocks untrusted apps from altering files in folders like Documents, Pictures, Videos, Music, and Desktop. Morgan stated: "Once enabled, Controlled folder access helps to protect files stored in folders such as Documents, Pictures, Videos, Music and Desktop by blocking untrusted apps from making changes to them."
Additional Security Recommendations
While controlled folder access adds robust protection, it is not foolproof. Morgan emphasizes combining it with good security habits: "This feature will not stop every cyber-attack, but it adds an extra layer of protection against ransomware by helping to prevent unauthorised changes to your files. Combined with good online security habits it is a simple and quick way to better protect your data."
Other recommended practices include keeping Windows up to date via automatic updates, regularly backing up important files, enabling two-factor authentication (2FA), and using strong, unique passwords. A Windows spokesperson also suggested using a secure browser like Microsoft Edge and storing important files on Microsoft OneDrive, which offers built-in ransomware detection and recovery. The spokesperson added: "Restart your computer periodically at least once a week - this helps ensure the applications and operating system are up-to-date and helps your system run better."
