Turn Off Real-Time Protection in Windows Security: Guide
To turn off real-time protection in Windows Security (formerly Windows Defender), open Windows Security, go to Virus & threat protection, click “Manage settings” under Virus & threat protection settings, and toggle “Real-time protection” to Off. This is a temporary setting—Windows will automatically turn it back on after a short period to keep your device safe.
What Is Real-Time Protection?
Real-time protection is a core feature of Microsoft Defender Antivirus, the built-in security solution in Windows 10 and Windows 11. It continuously scans files, downloads, apps, and processes as they are accessed or executed, aiming to detect and block malware before it can cause harm. Unlike a manual scan that runs on demand, real-time protection works in the background, checking every file that enters your system—whether via email, web browsing, USB drives, or software installation.
When real-time protection is enabled, Windows Security also includes several related features: cloud-delivered protection (which uses Microsoft’s cloud to identify new threats), automatic sample submission, and tamper protection (which prevents malware from disabling security settings). Disabling real-time protection turns off these layers too, leaving your PC more exposed.
Why Would You Turn It Off?
Most users never need to disable real-time protection. However, there are a few legitimate scenarios:
- Software compatibility: Some older or specialized applications (e.g., certain drivers, game cheats, or enterprise tools) may be flagged as false positives, causing them to crash or fail to install.
- Performance testing: In rare cases, real-time scanning can slow down CPU-intensive tasks like video editing or large file transfers, though modern versions are optimized.
- Troubleshooting: If you suspect Defender is interfering with another security tool, you might temporarily disable it to test.
- Running a different antivirus: If you install a third-party antivirus, Windows automatically disables real-time protection to avoid conflicts—you don’t need to do it manually.
Important: Disabling real-time protection for any reason increases your risk of malware infection. Only do it temporarily and re-enable as soon as possible.
How to Turn Off Real-Time Protection (Step-by-Step)
- Click the Start button and type “Windows Security” (or open it from the system tray shield icon).
- Select Virus & threat protection from the left sidebar.
- Under the “Virus & threat protection settings” section, click Manage settings.
- Locate the Real-time protection toggle and switch it to Off.
- If prompted by User Account Control (UAC), click Yes to confirm.
Windows will show a warning that your device may be vulnerable. After a few minutes, the toggle will automatically turn back on—this is by design to prevent users from leaving their system unprotected indefinitely.
What Happens When You Turn It Off?
When real-time protection is off, Defender stops scanning files and processes in real time. You can still run manual scans (e.g., Quick scan or Full scan) by clicking the “Scan options” button. However, without real-time protection, new threats that arrive on your system won’t be detected until you manually scan—which could be too late if the malware has already executed.
Additionally, other security features may be affected:
- Cloud-delivered protection is also turned off automatically.
- Automatic sample submission is disabled.
- Tamper protection may remain on, but it won’t block changes to real-time protection settings—it only protects other security settings.
Windows will display a yellow warning banner in Windows Security, and you may see a notification in the Action Center reminding you to turn it back on.
How to Re-Enable It
To turn real-time protection back on, simply repeat the steps above and toggle the switch to On. If the toggle is grayed out, it’s likely because:
- You have a third-party antivirus installed (Windows automatically disables Defender).
- Tamper protection is blocking changes—you may need to disable tamper protection first (not recommended).
- Group Policy or registry settings are enforced by your organization.
If you can’t re-enable it, try restarting your PC, or run the “Reset” option in Windows Security settings (under “Virus & threat protection settings” > “Manage settings” > “Reset”).
Common Misconceptions
Misconception 1: “Turning off real-time protection makes my PC faster.” In most cases, the performance impact is negligible. Modern Defender is optimized to minimize CPU usage, and the risk of malware far outweighs any tiny speed gain.
Misconception 2: “I have another antivirus, so I don’t need Defender.” If you have a third-party antivirus, Windows automatically disables real-time protection. You don’t need to manually turn it off—and doing so could cause conflicts.
Misconception 3: “Real-time protection is the same as a firewall.” No. Real-time protection scans files and processes for malware, while Windows Defender Firewall monitors network traffic. They are separate features.
Frequently Asked Questions
Will Windows automatically turn real-time protection back on?
Yes. Windows automatically re-enables real-time protection after a short period (typically a few minutes) to ensure your device remains protected. This is a deliberate security feature, not a bug.
Can I permanently disable real-time protection?
It’s not recommended, but you can via Group Policy or registry edits (e.g., setting DisableRealtimeMonitoring to 1 in the registry). However, this leaves your system vulnerable and may trigger tamper protection warnings. For most users, the temporary toggle is sufficient.
Why is the real-time protection toggle grayed out?
This usually happens when tamper protection is enabled (which is on by default) or when a third-party antivirus is installed. Tamper protection prevents malware from disabling security features. To change the toggle, you’d need to disable tamper protection first, but that’s not advised unless you have a specific reason.
Does disabling real-time protection stop Windows Defender from updating?
No. Security intelligence updates (virus definitions) will still download and install. However, without real-time protection, those updates won’t be used to actively scan files until you run a manual scan or re-enable real-time protection.
Is it safe to turn off real-time protection to install a specific program?
If the program is flagged as a false positive, you can temporarily disable real-time protection, install the program, and then re-enable it immediately. However, only do this if you trust the software source. Alternatively, you can add an exclusion for that specific file or folder in Windows Security, which is a safer approach.
Related
Method: the standard formula for this calculation, rounded as each result states. See how the calculators work or report an error.