Configuring Default Antivirus Software in Windows 11/10

Windows 11 and Windows 10 include security features designed to protect your computer from viruses, malware, ransomware, spyware, and other online threats. For most users, Microsoft Defender Antivirus is the security program that Windows uses by default. It works with Windows Security and can provide real-time protection without requiring you to install another antivirus program.

However, you may want to check or configure which antivirus software Windows is using, especially if you have installed a third-party antivirus program. Windows can also change which security provider is active depending on the software installed and whether its real-time protection is enabled.

In this guide, you will learn how to configure the default antivirus software in Windows 11 and Windows 10, check your current protection provider, and make a third-party antivirus program the primary antivirus instead of the Windows Security tool.

Let’s learn everything!

Configuring Default Antivirus Software in Windows 11/10

Before changing anything, it is important to understand that Windows does not normally provide a simple “Set as Default Antivirus” button as it does for a web browser or PDF reader. 

Instead, Windows Security detects registered antivirus providers and determines which antivirus is actively providing real-time protection.

The following steps will help you check and configure these settings safely.

Step 1: Open Windows Security

The first step is to open Windows Security, where Windows displays information about your antivirus and other security features.

On Windows 11, click the Start button and type Windows Security. Select the Windows Security app from the search results.

On Windows 10, click Start, type Windows Security, and open the application.

You can also press Windows + S, type Windows Security, and select it from the results.

Once Windows Security opens, you will see several security areas, including Virus & threat protection, Account protection, Firewall & network protection, and App & browser control.

Step 2: Open Virus & Threat Protection

In the Windows Security window, select Virus & threat protection.

This section provides information about antivirus protection on your computer. If Microsoft Defender Antivirus is currently active, you may see information about its protection status, scans, updates, and other security settings.

If a compatible third-party antivirus program is installed and actively managing antivirus protection, Windows Security may show that antivirus provider instead.

This screen is the easiest place for a beginner to determine whether Microsoft Defender Antivirus or another antivirus program is currently handling real-time protection.

Step 3: Check Your Current Antivirus Provider

Look for the section showing the Virus & threat protection providers or similar provider information.

Depending on your Windows version and installed security software, the wording can vary slightly.

If Microsoft Defender Antivirus is active, Windows is using Defender for real-time antivirus protection. If another antivirus program is registered with Windows and provides real-time protection, its name should appear as the active provider.

This distinction is important because installing a second antivirus program does not necessarily mean that both programs will actively scan your computer at the same time.

Windows is designed to avoid conflicts between multiple real-time antivirus engines. When a compatible third-party antivirus takes over real-time protection, Microsoft Defender Antivirus may automatically enter a reduced or passive state.

Step 4: Open Manage Providers

If the Virus & threat protection page shows an option such as Manage providers, select it.

This area allows you to see the security products that Windows recognizes as providers for antivirus and other security functions.

Under the Antivirus section, check which program is listed as providing protection.

For example, you might see Microsoft Defender Antivirus or the name of your installed third-party security application.

If your third-party antivirus does not appear here, Windows may not recognize it as an active antivirus provider. In that situation, check whether the program is installed correctly and whether its real-time protection feature is enabled.

Step 5: Check Microsoft Defender Settings

If Microsoft Defender is your active antivirus, return to Virus & threat protection and look for Virus & threat protection settings.

Select Manage settings.

Here, you can review settings such as Real-time protection, Cloud-delivered protection, Automatic sample submission, and Tamper Protection, depending on your Windows version.

For normal users, it is generally best to keep these security features enabled. Turning off real-time protection unnecessarily can leave your computer exposed to malware.

If you temporarily disable a protection feature for troubleshooting, remember to turn it back on afterward.

Step 6: Make Sure Your Antivirus Is Updated

An antivirus program is only useful when its virus definitions and security components are up to date.

For Microsoft Defender, Windows normally handles security intelligence updates automatically through Windows Update.

Open Windows Security, select Virus & threat protection, and look for the Protection updates area. Select Check for updates if the option is available.

If you are using a third-party antivirus, open that program and check its update section. The exact location depends on the antivirus application.

Keeping the antivirus updated helps it recognize newer malware and other security threats.

Step 7: Run a Test Scan

After configuring your antivirus, it is a good idea to confirm that it is working properly.

In Windows Security, open Virus & threat protection and select Quick scan.

A quick scan checks common locations where malware may be found. You can also use the available scan options if you want to perform a more comprehensive scan.

If you are using third-party antivirus software as your active provider, use its scanning feature instead.

Do not install or download suspicious files simply to test an antivirus program. Use the security software’s normal diagnostic and scanning features instead.

How to Make a Third-Party Antivirus the Default Instead of the Built-In Tool?

If you prefer another antivirus program over Microsoft Defender Antivirus, you normally do not need to manually change a Windows registry setting or delete Defender.

Instead, install a reputable, Windows-compatible third-party antivirus application from its official source.

During installation, the antivirus may ask whether you want it to provide real-time protection. Allowing this option generally registers the program with Windows Security.

After installation, restart your computer if the antivirus recommends doing so. Then open Windows Security and go to Virus & threat protection.

Check Manage providers and look under the antivirus provider section. Your third-party antivirus should be listed as the active provider if it has successfully taken over real-time protection.

At this point, Windows may automatically reduce or disable Microsoft Defender’s real-time antivirus scanning to prevent two antivirus engines from conflicting.

You should not manually disable Microsoft Defender through random registry modifications or unsupported system tweaks simply to force another antivirus to become the default. These changes can interfere with Windows security features and may cause unexpected behavior.

If the third-party antivirus does not become active, open its settings and make sure real-time protection is enabled. Also, make sure the antivirus subscription, license, or trial has not expired.

FAQs

Can I have two antivirus programs active at the same time?

It is generally not recommended to run two full antivirus products with real-time protection simultaneously. They can interfere with each other and may consume additional system resources.

You can have security-related applications installed alongside an antivirus, but avoid running multiple full-time antivirus engines unless the software specifically supports that configuration.

Is Microsoft Defender Antivirus enough for Windows 11 and Windows 10?

For many users, Microsoft Defender Antivirus provides sufficient everyday antivirus protection when Windows, Defender security intelligence, browsers, and applications are kept updated.

Your security needs may be different if you manage business systems, handle sensitive data, or require specialized security features.

Can I turn off Microsoft Defender permanently?

Windows manages Defender’s availability based on the active security provider and system security settings. Permanently forcing it off through unsupported methods is not recommended.

If you install a compatible third-party antivirus, Windows can automatically adjust Defender’s real-time protection behavior.

Why does Windows keep switching my antivirus?

Windows may change the active protection provider when an antivirus program is installed, removed, updated, expires, or has its real-time protection disabled.

If your preferred antivirus keeps losing active status, open its settings and check its subscription status, real-time protection, and Windows integration.

How do I know which antivirus is active?

Open Windows Security, select Virus & threat protection, and check the listed antivirus provider. This tells you which security product Windows currently recognizes as providing antivirus protection.

Summary

Configuring the default antivirus in Windows 11 and Windows 10 is different from changing a normal default application. Windows Security automatically manages registered antivirus providers and normally allows only one primary real-time antivirus engine to provide active protection.

For most users, Microsoft Defender Antivirus can remain the active security solution without additional configuration. If you prefer a third-party antivirus, install a compatible product, enable its real-time protection, and then verify it under Windows Security > Virus & threat protection > Manage providers.

Most importantly, keep your chosen antivirus updated and active, and avoid manually modifying Windows security components just to force a particular antivirus to run.