This article explains how to disable Secure Boot on your computer. This security feature, enabled by default and included in Unified Extensible Firmware Interface (UEFI), is designed to protect your PC from threats.

How Do I Disable Secure Boot?

Follow these steps to boot into UEFI and disable Secure Boot:

1. Restart your computer. If it’s already off, press its power button to switch it on.

2. Press the UEFI entry key. This varies between computers, but it’s typically Delete, Escape, F1, F2, F10, or F12. Check your computer’s manual or website for the specifics if those keys don’t give you access.

   Still can’t get in? Try this instead: Boot into Windows normally and open the Start menu. Locate the option to reboot, but hold the Shift key while you select Restart. From there, go to Troubleshoot > Advanced Options: UEFI Firmware Settings.

3. Find a section related to Security, and, within that, an area that mentions Secure Boot.

4. Toggle it to Disabled.

   According to Microsoft, you might need to restore your computer to its factory default settings to re-enable Secure Boot, should you choose to do so later.

5. Press F10 to save your settings and restart the computer.

6. Wait for it to boot up. Secure Boot should now be disabled.

What Is Secure Boot?

Ratified as part of the UEFI 2.3.1 Errata 3 specification, Secure Boot is a protocol that protects the computer’s boot process by preventing drivers or operating systems from loading if they’re not signed with an acceptable digital signature.

What does that mean? In practical terms, Secure Boot makes sure that the operating system is legitimate and not one that’s masquerading as the real thing.

How Does Secure Boot Work?

Secure Boot works like a bouncer, checking identification before allowing entry. The operating system and driver code that attempts to launch during the boot process must present Secure Boot with a valid key that can be checked against a database of platform keys.

If the right key is presented, the code can run. If the wrong key is presented, or no key at all, the code is blocked before it can (potentially) do any damage. This is the essence of its benefits—if something malicious tries to launch during the startup procedure, Secure Boot blocks it before Windows even starts.

Should You Disable Secure Boot?

Secure Boot is an important tool in protecting your computer. If you leave it disabled, it’s possible that malware code could be executed before other protective measures can catch it, leaving your computer vulnerable.

That said, there are valid reasons you may want to disable it, at least temporarily:

• Some operating systems don’t support Secure Boot.
• You might need to troubleshoot issues with the boot process.
• You’re using older, unsigned drivers.

If in doubt, however, we recommend that you leave Secure Boot enabled.