You’re setting up a new PC, installing Windows 11, or trying to launch a game like VALORANT, and suddenly you see a message mentioning Secure Boot. If you’ve never opened your computer’s firmware settings before, the term can sound technical and a little intimidating.
If you’ve searched what is Secure Boot, this guide explains what it is, how it works, when you may need it, and whether you should enable or disable it.
What Is Secure Boot?
Secure Boot is a security feature used by modern computers with UEFI firmware. It helps prevent unauthorized or malicious software from loading before the operating system starts.
When you turn on your computer, Secure Boot checks the digital signatures of the bootloader, operating system, and certain system drivers. Only software signed by a trusted manufacturer is allowed to run.
If Secure Boot detects an untrusted or modified file, it may block the startup process or display a warning. This protects the computer from bootkits, rootkits, and other malware that try to launch before standard antivirus software becomes active.
How Secure Boot Works
Secure Boot checks critical startup files before the operating system is allowed to load.
When you press the power button:
- The computer starts using UEFI firmware.
- UEFI checks whether Secure Boot is enabled.
- Secure Boot compares the digital signatures of the bootloader and other startup components with trusted security keys.
- Verified software loads normally.
- Untrusted, modified, or unsigned software is blocked before Windows starts.
This process creates a trusted chain from the firmware to the operating system, helping prevent malicious programs from taking control during startup.
UEFI, BIOS, and Secure Boot: What’s the Difference?
People often use BIOS and UEFI interchangeably, but they aren’t exactly the same. Understanding the relationship helps answer what is Secure Boot more clearly.
What is UEFI Secure Boot?
UEFI Secure Boot is the security feature within UEFI firmware that checks whether startup software is digitally signed and trusted.
Secure Boot is commonly used on modern Windows computers to prevent unauthorized bootloaders, drivers, or malware from running before the operating system starts.
Secure Boot in BIOS
People often search for what is Secure Boot in BIOS, but traditional Legacy BIOS does not support Secure Boot.
The confusion occurs because many manufacturers still call the firmware settings menu the “BIOS,” even when the computer actually uses UEFI. Therefore, enabling Secure Boot “in BIOS” usually means opening the UEFI settings menu.
Legacy BIOS vs. UEFI Feature
| Feature | Legacy BIOS | UEFI |
| Release era | Older systems | Modern systems |
| Secure Boot support | No | Yes |
| Boot speed | Slower | Faster |
| Large drive support | Limited | Supports drives over 2 TB |
| User interface | Text-based | Often graphical with mouse support |
In simple terms, UEFI replaces Legacy BIOS on most modern computers, while Secure Boot is one of the security features available through UEFI.
>>> Read more: How To Convert YouTube To MP3 Legally: 5+ Reliable Converters
When You May Need Secure Boot
Many people never think about Secure Boot until software specifically requires it.
- Installing Windows 11
Microsoft lists Secure Boot as one of the recommended security requirements for Windows 11 compatibility. Many PCs ship with Secure Boot already enabled, but older systems may require users to turn it on manually before installing Windows 11.
- Playing VALORANT
One of the most common gaming questions today is what is Secure Boot and why VALORANT requires it.
On Windows 11, Riot Games’ anti-cheat software (Vanguard) may require both TPM 2.0 and Secure Boot to be enabled before the game will launch. This requirement helps reduce cheating by making it more difficult for unauthorized software to load during startup.
- Enterprise security requirements
Businesses often require Secure Boot because it strengthens endpoint security. Combined with encryption and device management tools, it helps protect company computers from low-level malware and unauthorized operating systems.
- New PC setup
If you’re configuring a newly built computer, enabling Secure Boot early simplifies future Windows installations and improves baseline security. Unless you have a specific compatibility reason to disable it, most users benefit from leaving it enabled.
Should You Enable or Disable Secure Boot?
For most users, Secure Boot should remain enabled. It adds an extra layer of startup protection and is recommended for modern Windows systems.
| Enable Secure Boot If… | Consider Disabling If… |
| You use Windows normally. | You’re installing an operating system that doesn’t support Secure Boot. |
| You want stronger startup security. | You’re using certain legacy hardware or drivers. |
| Your PC already supports it. | You’re troubleshooting specific boot issues (temporarily). |
Disabling Secure Boot may allow unsupported software to load, but it also reduces protection against boot-level malware. Only turn it off when necessary, and re-enable it after troubleshooting or installation whenever possible.
How to Check Whether Secure Boot Is Enabled
If you’re wondering what is Secure Boot, checking your computer’s current configuration only takes a few minutes.
Using System Information in Windows
- Press Windows + R.Type msinfo32.
- Press Enter.
- Look for Secure Boot State.
Possible results include:
- On
- Off
- Unsupported
Checking from UEFI settings
You can also check directly through your motherboard firmware.
- Restart your computer.
- Enter UEFI Setup (commonly Delete, F2, F10, or Esc during startup).
- Open the Boot or Security menu.
- Locate the Secure Boot option.
Understanding common status messages
If you’re wondering what is secure boot, you’ll likely come across several different Secure Boot states.
- Enabled (On): Secure Boot is active.
- Disabled (Off): Secure Boot is available but turned off.
- Unsupported: The computer is using Legacy BIOS or hardware that doesn’t support Secure Boot.
>>> Read more: How To Use Google Authenticator Transfer: Backup & Restore 2FA Codes Fast
FAQs
Is Secure Boot should be enabled?
For most users, yes. Enabling Secure Boot improves startup security and supports modern operating systems like Windows 11. Unless you need compatibility with older operating systems or specialized software, leaving it enabled is generally recommended.
What does Secure Boot actually do?
Secure Boot verifies that trusted, digitally signed software loads during startup. If unauthorized or modified boot software is detected, Secure Boot blocks it from running, helping protect the system before the operating system loads.
Is Secure Boot worth turning on?
Yes. For most home users and businesses, the security benefits outweigh the limited compatibility issues. Modern hardware and software are generally designed to work with Secure Boot enabled.
Does Windows 11 still require Secure Boot?
Secure Boot is built into Windows 11’s security framework and is one of Microsoft’s hardware security requirements. Many compatible PCs already have it enabled by default, though the exact requirement can depend on your hardware configuration and installation method.
Final Thoughts
Understanding what is Secure Boot isn’t just about learning another computer term, it’s about understanding one of the first security checks your PC performs every time it starts.
By verifying that only trusted software loads during boot, Secure Boot helps defend against threats that traditional antivirus programs may never see because they activate later in the startup process.
