Enabling a single Windows security feature can significantly reduce the risk of ransomware attacks, according to consumer expert Tom Morgan from Which?. The feature, called controlled folder access, is available on Windows 10 and Windows 11 but is not always turned on by default.
What Is Controlled Folder Access?
Controlled folder access is a built-in security tool that prevents untrusted applications from making changes to files in protected folders such as Documents, Pictures, Videos, Music, and Desktop. It works by adding an extra layer of protection beyond standard antivirus software. Tom Morgan explains: "Once enabled, Controlled folder access helps to protect files stored in folders such as Documents, Pictures, Videos, Music and Desktop by blocking untrusted apps from making changes to them."
How to Enable the Setting
To turn on controlled folder access, users should navigate through Settings > Privacy & Security > Windows Security > Virus & Threat Protection. Then scroll down to the Ransomware protection section and select Manage ransomware protection. Toggle on Controlled folder access and approve any user account control prompts. This simple process can be completed in under a minute.
Why It Matters
Ransomware is a type of malicious software that locks users out of their files or systems and demands a ransom for access. While antivirus programs aim to detect and remove malware, controlled folder access protects files even if ransomware infiltrates the PC. Tom Morgan notes: "This feature will not stop every cyber-attack, but it adds an extra layer of protection against ransomware by helping to prevent unauthorised changes to your files. Combined with good online security habits it is a simple and quick way to better protect your data."
Additional Security Tips
Tom Morgan also recommends several other measures to secure data: keep Windows updated by enabling automatic updates, regularly back up important files, turn on two-factor authentication (2FA), and use strong, unique passwords. A Windows spokesperson adds: "Store important files on Microsoft OneDrive. OneDrive includes built in ransomware detection and recovery as well as file versioning so you can restore a previous version of a file. Use a secure, modern, browser such as Microsoft Edge. Restart your computer periodically at least once a week - this helps ensure the applications and operating system are up-to-date and helps your system run better."
