Microsoft designed Windows 11 with strict hardware requirements, including Secure Boot and TPM 2.0. These features improve security, but they also block many older PCs and laptops from installing Windows 11.
But here’s the good news: it’s absolutely possible to install Windows 11 on a computer without Secure Boot — you just need to tweak a few things first.
In this step-by-step guide, we’ll explain:
-
What Secure Boot is and why Microsoft requires it.
-
Risks and benefits of bypassing Secure Boot.
-
Proven methods to install Windows 11 without Secure Boot.
-
Troubleshooting tips in case something goes wrong.
By the end, you’ll know exactly how to upgrade or clean install Windows 11 even if your PC doesn’t meet the official requirements.
Key Takeaways
-
Secure Boot is a UEFI feature that helps prevent malware from loading during startup.
-
Windows 11 requires Secure Boot by default — but you can bypass this requirement.
-
You can install Windows 11 without Secure Boot by:
-
Editing the Windows registry.
-
Modifying installation media (bootable USB).
-
Using official Microsoft registry bypass keys.
-
-
Installing without Secure Boot carries security risks, so always back up your data first.
What Is Secure Boot and Why Does Windows 11 Require It?
Secure Boot is a UEFI firmware feature that ensures your computer only boots using trusted software from your device manufacturer. It prevents rootkits and low-level malware from loading before the operating system.
Microsoft requires Secure Boot for Windows 11 to:
-
Increase overall system security.
-
Reduce firmware attacks.
-
Ensure better compatibility with modern hardware.
However, many older PCs and custom-built desktops lack Secure Boot — which means Windows 11 refuses to install unless you bypass the check.
Should You Install Windows 11 Without Secure Boot?
Before we dive into the steps, let’s weigh the pros and cons.
✅ Pros
-
Lets you install Windows 11 on unsupported PCs.
-
Extends the life of older hardware.
-
Unlocks access to new features and updates.
⚠️ Cons
-
Reduced protection against boot-level malware.
-
Possible instability if hardware isn’t fully supported.
-
Future updates from Microsoft could limit unsupported installations.
👉 Bottom line: It’s safe for personal use if you maintain good antivirus protection and don’t store highly sensitive data.
How to Check if Secure Boot Is Enabled on Your PC
Before bypassing, confirm your Secure Boot status:
-
Press Win + R → type
msinfo32
→ hit Enter. -
Look for Secure Boot State in the System Summary.
-
On = Secure Boot enabled.
-
Off = Secure Boot available but disabled.
-
Unsupported = Your PC doesn’t support Secure Boot at all.
-
How to Install Windows 11 Without Secure Boot (Step-by-Step)
Now let’s walk through the exact methods you can use.
Method 1: Use the Registry Bypass (Microsoft-Approved)
Microsoft itself provided a way to bypass TPM and Secure Boot checks for advanced users.
-
Boot into Windows 10 (or your existing OS).
-
Press Win + R, type
regedit
, and press Enter. -
Navigate to:
-
If MoSetup doesn’t exist, right-click Setup → New → Key → name it
MoSetup
. -
Inside
MoSetup
, right-click → New → DWORD (32-bit) Value. -
Name it:
-
Set the value to 1.
-
Close the Registry Editor and restart.
👉 Now you can run the Windows 11 setup and bypass the Secure Boot requirement.
Method 2: Modify Windows 11 Installation Media (Bootable USB)
If you’re performing a clean install:
-
Download the Windows 11 ISO from Microsoft’s website.
-
Use Rufus or the Media Creation Tool to create a bootable USB drive.
-
Open the USB in File Explorer → go to sources folder.
-
Delete the file:
-
Boot from the USB and install Windows 11 normally.
This disables hardware checks (Secure Boot, TPM, CPU).
Method 3: Use Rufus Bypass Options (Easiest Way)
Rufus (a free USB tool) now includes built-in bypass features:
-
Download and launch Rufus.
-
Insert your USB drive.
-
Select the Windows 11 ISO.
-
When prompted, enable these options:
-
Remove requirement for 4GB+ RAM, Secure Boot, and TPM 2.0
-
Remove requirement for Microsoft Account (optional).
-
-
Click Start to create the modified USB.
-
Boot from it and install Windows 11.
👉 This is the easiest method for most users.
Troubleshooting Installation Issues
If Windows 11 still refuses to install:
-
BIOS Settings: Make sure UEFI mode is enabled (not Legacy/CSM).
-
Partition Style: Convert drives to GPT if needed (
mbr2gpt
tool can help). -
Error Messages: If setup stops, recheck registry keys or rebuild the USB.
Alternative: Use Windows 11 Lite or Modified Builds
If none of the above works, you can consider Windows 11 Lite or third-party modified ISOs. These versions strip out hardware checks entirely.
⚠️ Warning: Only download from trusted sources — unofficial builds can contain malware.
Security Tips After Installing Without Secure Boot
Since you’re skipping a key protection feature, take extra precautions:
-
Use a reliable antivirus (Microsoft Defender is good).
-
Keep Windows updated with security patches.
-
Enable BitLocker encryption if available.
-
Avoid suspicious downloads and external USB drives.
Conclusion
Now you know exactly how to install Windows 11 without Secure Boot. Whether you use the registry hack, Rufus bypass, or modified installation media, these methods let you upgrade or clean install Windows 11 on unsupported PCs.
Just remember: while you gain access to Windows 11, you lose some security safeguards. Balance convenience with caution, and always keep backups of your data.
FAQs
1. Can I install Windows 11 without Secure Boot and TPM?
Yes. Using registry hacks or tools like Rufus, you can bypass both requirements.
2. Will I still receive Windows Updates after bypassing?
Generally yes, but Microsoft may block future updates on unsupported devices.
3. Is it legal to bypass Secure Boot for Windows 11?
Yes. Microsoft allows it, but you’ll see a warning that your device is unsupported.
4. Do I need UEFI to install Windows 11 without Secure Boot?
Yes, Windows 11 requires UEFI mode (not Legacy BIOS). Secure Boot itself can be bypassed.
5. What’s the easiest method for beginners?
Using Rufus with bypass options is the simplest and safest method.