Windows Defender Firewall is built into Windows 10 and Windows 11. It’s turned on by default, but many people don’t know this or accidentally disable it. If your firewall isn’t active, your computer is exposed to harmful network traffic and intrusions. This guide shows you exactly how to turn it on, check if it’s already running, and configure it properly for your needs.
The short answer: Go to Windows Security, select Firewall & Network Protection, and make sure it shows “On” for both Private and Public networks.
Understanding Windows Defender Firewall
What It Does
Windows Defender Firewall monitors incoming and outgoing network connections. It blocks suspicious traffic before it reaches your system. Think of it like a security guard checking everyone entering and leaving your house.
The firewall works in two modes. Private network mode applies when you’re on home or work networks you trust. Public network mode applies when you’re on open WiFi at coffee shops or airports. Having both active gives maximum protection.
Why It Matters
Without a firewall, your computer can be targeted by malware, ransomware, and unauthorized access attempts. Hackers scan the internet looking for unprotected devices. An active firewall makes your computer invisible to these scans. It’s one of the most important layers of defense Windows provides.

How to Check If Windows Defender Firewall Is Active
Method 1: Using Windows Security (Easiest)
- Click the Windows Start button (bottom left corner)
- Type “Windows Security” in the search box
- Press Enter or click the first result
- Click “Firewall & Network Protection” (shield icon)
- Look at the status next to “Domain Network,” “Private Network,” and “Public Network”
- Each should show a green checkmark and say “On”
If you see “Off” or a red X, the firewall needs to be activated.
Method 2: Using Settings
- Click Start and open Settings
- Go to Privacy & Security
- Scroll down and click “Windows Security”
- Select “Firewall & Network Protection”
- Review the status of all three network types
Method 3: Using Control Panel (Legacy Method)
- Click Start
- Type “Control Panel”
- Click “Windows Defender Firewall”
- Look for “Windows Defender Firewall is on”
All three methods show the same information. Use whichever feels most comfortable.
How to Turn On Windows Defender Firewall
Activating Through Windows Security
For Private Network:
- Open Windows Security
- Click “Firewall & Network Protection”
- Click “Private Network”
- Toggle the switch to “On” if it’s currently off
- Click “Yes” when prompted by User Account Control
For Public Network:
- Stay in Firewall & Network Protection
- Click “Public Network”
- Toggle the switch to “On”
- Confirm the change
Wait 5 seconds after toggling. The status updates automatically.
Activating Through Settings
- Press Windows key + I to open Settings
- Click “Privacy & Security”
- Select “Windows Security”
- Click “Firewall & Network Protection”
- Toggle Private Network to “On”
- Toggle Public Network to “On”
- Click “Yes” to confirm
The firewall starts protecting immediately after activation.
Activating Through Control Panel
- Open Control Panel
- Click “Windows Defender Firewall”
- Click “Turn Windows Defender Firewall On or Off”
- Click “Yes” if prompted by User Account Control
- Select “Turn On” for Private Network Settings
- Select “Turn On” for Public Network Settings
- Click “OK”
This method takes slightly longer but works on all Windows versions.
Troubleshooting Common Issues
Firewall Won’t Turn On
Sometimes the firewall service isn’t running. Here’s how to fix it:
- Press Windows key + R
- Type “services.msc” and press Enter
- Scroll down to “Windows Defender Firewall” in the list
- Right-click it
- Click “Start” or “Restart”
- Set “Startup Type” to “Automatic”
- Click “Apply” then “OK”
Close Services and check Windows Security again. The firewall should now be on.
Firewall Grayed Out or Unresponsive
Another security program might be blocking it. If you use third-party antivirus software:
- Open your antivirus program
- Look for firewall settings
- Disable the third-party firewall
- Return to Windows Security
- Activate Windows Defender Firewall
You don’t need two firewalls running. Use either Windows Defender Firewall or your antivirus’s firewall, not both.
Permission Denied Error
User Account Control is preventing changes. You need administrator access:
- Right-click the Settings or Control Panel icon
- Select “Run as Administrator“
- Click “Yes” when asked
- Try turning on the firewall again
If you don’t have admin access, contact your IT department or computer administrator.
Configuring Firewall Rules for Apps
Allowing Apps Through the Firewall
Some apps need permission to communicate over the network. The firewall might block them by default.
- Open Windows Security
- Click “Firewall & Network Protection”
- Scroll down and click “Allow an App Through Firewall”
- Click “Change Settings” (you may need to approve this)
- Click “Allow Another App”
- Browse to find your app and select it
- Check the boxes for Private and Public as needed
- Click “Add”
Only allow apps you recognize and trust.
Blocking Specific Apps
If an app shouldn’t access the network:
- Go to “Allow an App Through Firewall”
- Find the app in the list
- Uncheck the boxes next to it
- Click “OK”
The app can’t access the internet from that point forward.
Advanced Firewall Settings
Creating Inbound Rules
Inbound rules control what traffic can enter your computer.
- Open Windows Defender Firewall with Advanced Security
- Click “Inbound Rules” on the left
- Right-click empty space and select “New Rule”
- Choose rule type (Program, Port, or Custom)
- Specify what you want to block or allow
- Name the rule and click “Finish”
This is for advanced users who understand network protocols.
Monitoring Active Connections
To see what’s currently connecting:
- Open Windows Defender Firewall with Advanced Security
- Click “Monitoring” on the left
- Click “Firewall”
- See real-time statistics on blocked connections
This helps you understand what the firewall is doing.
Best Practices for Firewall Security
Keep It Always On
Never disable the firewall to make something “work faster.” It doesn’t slow your computer noticeably. If an app requires firewall exceptions, add the app through proper settings instead of disabling the firewall entirely.
Use Both Network Profiles
Keep both Private and Public networks enabled. Even if you mostly work from home, you may use public WiFi occasionally. Having both active means you’re always protected.
Review App Exceptions Regularly
Check allowed apps every 3 months. Remove permissions for apps you no longer use. This reduces your attack surface.
Update Windows Regularly
Windows updates patch firewall vulnerabilities. Set Windows Update to automatic. Restart when prompted to apply updates.
Combine With Other Security Measures
The firewall alone isn’t enough. Also use antivirus software, keep passwords strong, and enable Windows Defender Antivirus. Security works best in layers.
Quick Reference Table
| Task | Steps | Time Required |
|---|---|---|
| Check Firewall Status | Open Windows Security > Firewall & Network Protection | 30 seconds |
| Turn On Firewall | Toggle Private and Public switches to On | 1 minute |
| Allow an App | Firewall & Network Protection > Allow an App > Add app | 2 minutes |
| Block an App | Find app in allowed list > Uncheck boxes | 1 minute |
| Fix Service Issue | Open Services > Start Windows Defender Firewall | 3 minutes |
Summary
Windows Defender Firewall is your computer’s first defense against network attacks. It’s already installed on every Windows 10 and Windows 11 system. Most of the time, it’s already on. Spend 30 seconds checking the status in Windows Security to confirm.
If it’s off, turning it on takes less than a minute. If you run into problems, the troubleshooting steps above cover 95% of issues people encounter. Keep both private and public network protection active, let apps request firewall access rather than disabling the firewall, and you’ll have solid baseline protection.
Your firewall won’t stop all threats, but it stops many before they ever reach your computer. Combined with antivirus software, good passwords, and regular Windows updates, it forms a strong security foundation.
Frequently Asked Questions
Does Windows Defender Firewall slow down my internet?
No. Modern firewalls process traffic in hardware and don’t noticeably impact speed. If your internet feels slow, it’s not the firewall causing it.
Can I use Windows Defender Firewall with third-party antivirus?
Yes for antivirus, but not for firewalls. If your third-party antivirus has its own firewall, disable Windows Defender Firewall to avoid conflicts. You only need one firewall.
What if I accidentally blocked an app I need?
Open Firewall & Network Protection, click “Allow an App Through Firewall,” find the app, and check the boxes again. Changes take effect immediately.
Is Windows Defender Firewall enough for security?
It’s an important layer but not sufficient alone. Combine it with Windows Defender Antivirus, strong passwords, regular updates, and careful browsing habits for comprehensive protection.
Can I disable the firewall temporarily?
You can, but it’s not recommended. If an app specifically requires it, add that app as an exception instead of disabling the entire firewall. This keeps protection active for everything else.
- How to Uninstall Apps from the Start Menu in Windows 11/10 (2026 Guide) - April 2, 2026
- How to Fix Overscan on Windows 11/10: Stop Your Screen Getting Cut Off (2026) - April 1, 2026
- How to Disable Lock Screen on Windows 11/10 in 2026 - April 1, 2026
