Free security software for your laptop: what's already built in

MacWindowsUpdated

Most of the free security software a laptop needs is already on it. Macs come with XProtect, a firewall, FileVault and Find My. Windows laptops come with the Windows Security app, Device Encryption and Find my device. The UK's National Cyber Security Centre (NCSC) says antivirus is often included for free in the operating systems on Windows and Apple computers.

Quick answer

Before downloading anything, switch on what your laptop already has: built-in antivirus, the firewall, disk encryption and the device-finding service (Find My on a Mac, Find my device on Windows). Keep security updates automatic. Treat any pop-up offering a free scan as a scam, and download software only from official stores or the maker's own website.

What free security software is built into a laptop?

The same four types on both systems, under different names.

TypeMacWindows
AntivirusXProtect, updated automaticallyMicrosoft Defender Antivirus, in Windows Security
FirewallSystem Settings > Network > FirewallWindows Security > Firewall & network protection
Disk encryptionAutomatic on Apple silicon and T2 Macs; FileVault in Privacy & SecurityDevice Encryption, in Settings > Privacy & security
Find, lock or eraseFind My MacFind my device (find and lock)

Apple's Platform Security guide says macOS includes built-in antivirus technology called XProtect. Microsoft says the Windows Security app is built into Windows, so your device is protected from the moment you start it up. The NCSC says that making sure built-in antivirus is switched on makes you instantly safer.

How do I switch on the free antivirus and firewall?

On a Mac, XProtect needs no switching on, but it does need updates. In macOS Tahoe 26 or later:

  1. Choose Apple menu > System Settings > General > Software Update, click More Info next to Automatic Updates, and turn on "Install system data files and security updates". In Sequoia, Sonoma or Ventura the setting is called "Install Security Responses and system files".
  2. Go to Network > Firewall and turn on the firewall. Apple says it can protect your Mac from unwanted contact initiated by other computers.

On Windows:

  1. Search the Start menu for Windows Security and open it.
  2. Select Virus & threat protection > Manage settings and check Real-time protection is on.
  3. Select Firewall & network protection, choose your network profile, and switch Microsoft Defender Firewall to On.
  4. Select App & browser control > Reputation-based protection and turn on "Check apps and files", which uses Microsoft Defender SmartScreen to check apps and files you download.

Is there free anti-theft software for a laptop?

Yes, and it's built in, but it has to be on before the laptop goes missing. Apple says Find My can show a lost Mac's approximate location on a map, play a sound, and lock or erase it. Microsoft says Find my device needs to be turned on before you can use it.

On a Mac:

  1. Open System Settings, click your name at the top of the sidebar, then iCloud > See All > Find My Mac, and click Turn On.
  2. Click Allow when asked to let Find My Mac use your Mac's location.

Apple says Activation Lock turns on automatically when you add your Mac to Find My. It works on a Mac with Apple silicon or the T2 chip, with two-factor authentication on your Apple Account, and it's designed to prevent others from using your Mac if it's lost or stolen.

On Windows, Microsoft says Find my device needs a Microsoft personal account with Administrator rights, and works when location is turned on (Settings > Privacy & security > Location). You can then find and lock the laptop from account.microsoft.com/devices.

Does encryption matter on a laptop?

Yes. Apple says FileVault keeps someone from getting at your data without your login password, and that a Mac with Apple silicon or the T2 chip encrypts its data automatically.

Microsoft says Device Encryption turns on BitLocker automatically when you first sign in with a Microsoft account, and works on Windows Home. With a local account it isn't turned on automatically, so open Settings > Privacy & security > Device encryption and switch it on.

How do I tell a real free offer from a fake one?

Look at how the offer reached you. Apple says that if a pop-up while you're browsing warns of viruses on your device, don't believe it, and don't call the number or follow the links. Microsoft says its error and warning messages never include a phone number. The US Federal Trade Commission (FTC) says scammers use fake security warnings to get you to call, ask for remote access, then charge to remove a program they claim to have found.

If you do want extra software:

  • Download it from the right place. Apple says the App Store is the safest place to get Mac apps. Microsoft says to download only from official Microsoft partner websites or the Microsoft Store. The FTC says don't click on ads to download software; type the address yourself.
  • Run one antivirus, not two. The NCSC says the benefit is minimal and the products may conflict.
  • Check what happens after a trial. The NCSC says new computers often come with a trial antivirus, and that when it expires you'll have to pay or register to keep using it.
  • Keep it updated. The US Cybersecurity and Infrastructure Security Agency (CISA) says antivirus can only detect malware with known characteristics, so take automatic updates where offered.

Where Failshot fits

Your password is the first layer. Failshot is the second: second layer device security, for the moment someone sits down at your laptop and unlocks it.

On a Mac, while it's on, Failshot photographs whoever unlocks it, then, with Pro, records a 5-second video.

  • With the Mac's built-in camera, the green light comes on, and Failshot's window tells whoever unlocked the Mac that the unlock was photographed.
  • With Pro, turn on alerts and Failshot emails you about an unlock you don't confirm as yours, a wrong Failshot PIN or answer, or its camera access being switched off while it's on.
  • Switching it off, or quitting it from its menu, takes Touch ID or your Failshot PIN and answer, never your Mac password.

Failshot for Mac is out now at failshot.app, for macOS 14 or later. Free to download. It's free to use. Pro adds video, email alerts and the encrypted vault, and you can try Pro free for 7 days. Your card is taken at sign-up and charged on day 8 unless you cancel. Windows, iPhone and Android versions are coming soon.

More questions

What is the best free security software for a laptop?

Start with what's built in. Macs include XProtect, the firewall, FileVault and Find My; Windows includes Windows Security, Device Encryption and Find my device. The NCSC says built-in products will meet the needs of many organisations.

Is there free internet security for a laptop?

The firewall and download checks are built in. Apple says its firewall can protect your Mac from unwanted contact initiated by other computers, and Gatekeeper checks apps from outside the App Store. On Windows, Microsoft Defender Firewall filters network traffic and SmartScreen checks downloads.

Can free software find a stolen laptop?

Find My on a Mac can show its approximate location, lock it or erase it. Find my device on Windows can show it on a map and lock it. Both have to be switched on before the laptop goes missing.

Do I need to pay for antivirus when the laptop's trial ends?

Not to keep the built-in antivirus. The NCSC says built-in antivirus is often included for free, and that a separate product won't always work alongside it. If you keep the trial product, you'll have to pay or register.

What should I do if a pop-up says my laptop is infected?

Close the window or tab and don't call the number. Apple says not to believe browser pop-ups warning of viruses, and Microsoft says its warnings never include a phone number. If you've already paid, Microsoft says to call your credit card provider to contest the charges.

Sources