New PC? Harden Its Security in 30 Minutes

It feels great to open a brand-new computer. It is fast, clean, and ready to go.

But “new” does not mean “secure.”

Most people assume their new laptop is safe the moment they take it out of the box. Unfortunately, this is rarely true. Manufacturers often care more about convenience and advertising than your privacy.

We set up new machines for clients every day here in Adelaide. We do not just turn them on. We make them tough against threats.

This guide shows you the exact security upgrades we recommend to every client. These steps will stop viruses and prevent data loss from the very first click.

1. Remove Unnecessary Software

New computers come with “bloatware”. These are pre-installed trial programs and games you did not ask for.

This is a security risk. Unused software is rarely updated, making it an easy target for hackers to exploit. The fewer apps you have, the safer you are.

How to remove it:

1. Go to Settings > Apps > Installed apps.
2. Look for programs you do not need, like antivirus trials (McAfee or Norton) or simple games.
3. Click the three dots next to the app and select Uninstall.

Remove anything you do not recognise or plan to use. A clean computer is a secure computer.

2. Turn On Hidden Protections in Windows Security

You do not need to buy expensive antivirus software immediately. The built-in Windows Security is excellent. However, some of its best protections are turned off by default.

You need to enable two specific features to block modern attacks.

I. Turn on Ransomware Protection

Ransomware is a virus that locks your files and demands money. Windows has a built-in shield for this called “Controlled folder access”.

• Go to Windows Security > Virus & threat protection.
• Scroll down to Ransomware protection and click Manage ransomware protection.
• Turn on Controlled folder access.

II. Enable Memory Integrity

This stops malicious code from hijacking high-security processes.

• Go to Windows Security > Device security > Core isolation.
• Make sure Memory integrity is switched On.

These two simple clicks make your computer much harder to hack.

3. Encrypt Your Data And Save the BitLocker Key

Most modern laptops encrypt your data automatically. This is good because if your laptop is stolen, the thief cannot access your files.

However, this creates a risk for you. If your computer malfunctions, your data is locked inside. You cannot get it back without a specific code called a “Recovery Key”.

We see clients lose precious photos and files because they did not have this key when their laptop died.

How to stay safe:

1. Click Start and type “Device encryption” or “BitLocker”.
2. Ensure it is switched On.
3. Click the option to “Back up your recovery key”.

Do not just rely on your Microsoft account. Take a clear photo of the key with your phone, print it out, or save it on a separate USB drive. Keep this record safe. It is the only way to recover your data if your computer breaks.

4. Set Up Face or Fingerprint Login

Typing a password every time you unlock your computer is slow. It is also a security risk. If you use your laptop in a cafe or office, someone can easily watch you type it in.

We recommend using Windows Hello.

This uses facial recognition or your fingerprint to unlock the PC, just like your phone. It is much faster and more secure because it requires you to be physically present.

How to set it up:

1. Go to Settings > Accounts > Sign-in options.
2. Select Facial recognition (Windows Hello) or Fingerprint recognition.
3. Follow the prompts to scan your face or finger.

Bonus Tip: Dynamic Lock

In the same menu, look for “Dynamic Lock”. You can pair your phone to your PC via Bluetooth. When you walk away from your desk with your phone, Windows senses you are gone and automatically locks the computer. It is a great “set and forget” security layer.

5. Install a Strong Ad-Blocker

Your web browser is the main door to the internet. It is also where most viruses try to get in.

A huge number of infections come from “Malvertising”. These are malicious adverts that look like legitimate “Download” or “Update” buttons. If you click them by mistake, they download a virus instead of the file you wanted.

Windows does not block these by default. You need an extra layer of protection.

The Fix:

Install a reputable ad-blocker on your browser.

• For Google Chrome or Microsoft Edge Users: We recommend uBlock Origin Lite. This is the newer version designed to work with the latest Chrome security rules.
• For Firefox Users: You can still use the classic uBlock Origin.

These free tools block the malicious scripts and fake buttons that trick people into downloading malware. It is one of the easiest ways to keep your browsing safe.

6. Stop Using Your Admin Account

When you first set up your PC, Windows makes you an “Administrator”. This is the account you use every day.

This is a huge security risk.

An Administrator account has full control over the computer. If you accidentally click a malicious link or download a bad file while using an Admin account, the virus also gets full control. It can do whatever it wants.

The Pro Tip:

The safest way to use your computer is with a “Standard User” account. This type of account can run programs but cannot make important system changes.

1. Create a new, separate “Administrator” account. Give it a strong password and save it somewhere safe. You will only use this account for installing software or making system changes.
2. Change your everyday account from “Administrator” to “Standard User”.

Now, if a virus tries to install itself, it will be blocked. Windows will pause and ask you for the Administrator password to continue. This simple step stops most malware infections in their tracks.

Your New PC Security Checklist

Taking thirty minutes to go through these security upgrades on your new computer is one of the best investments you can make.

These simple steps create strong layers of protection. They help prevent data loss, stop viruses before they start, and keep your personal information safe. It is far easier to set up a secure PC from day one than to try and clean up a mess later.

Feeling overwhelmed? Don’t risk your new computer’s security. Bring your new machine to Computer Expert Adelaide, and we will perform a full ‘New PC Setup & Security Hardening’ service for you. We ensure your data is safe, encrypted, and protected from day one.