Windows 11 comes with Windows Security (Microsoft Defender Antivirus) built in. One of its key features is Real-Time Protection, which actively monitors your computer for viruses, malware, and suspicious activities. While it’s generally a good idea to keep this feature on, there are times when you may need to turn it off temporarily.
In this article, we’ll explain what Real-Time Protection is, why you might want to disable it, and multiple ways to turn it off step by step.
What is Real-Time Protection in Windows 11?
Think of Real-Time Protection as a security guard that never sleeps. It continuously scans files and apps as you open them. If it detects something harmful, it blocks it immediately.
Why Would You Want to Turn It Off?
Although it’s highly recommended to keep Real-Time Protection on, there are a few situations where disabling it makes sense:
-
Installing Certain Software – Some apps (especially advanced tools or mods) may be flagged as threats even if they’re safe.
-
Improving Performance – On low-end PCs, constant scanning may slow things down.
-
Running Troubleshooting Tasks – IT professionals sometimes disable it temporarily for testing.
-
Using Third-Party Antivirus – If you already installed another antivirus, you may not want Defender interfering.
⚠️ Important: Turning off Real-Time Protection leaves your PC vulnerable. Always re-enable it after completing your task.
Precautions Before Disabling Real-Time Protection
-
Ensure the file/app you’re installing is safe by scanning it first.
-
Don’t browse suspicious websites while protection is off.
-
Have another antivirus ready if you plan to disable it for longer periods.
Method 1: Disable Real-Time Protection via Windows Security App
This is the easiest and most common method.
Steps:
-
Press Windows + I to open Settings.
-
Go to Privacy & Security > Windows Security.
-
Click Virus & Threat Protection.
-
Under Virus & Threat Protection settings, click Manage settings.
-
Toggle off Real-Time Protection.
You’ll see a warning that your device is vulnerable—don’t worry, it’s expected.
Method 2: Turn Off Real-Time Protection Using Group Policy (Pro Editions Only)
If you’re on Windows 11 Pro, Enterprise, or Education, you can use Group Policy.
Steps:
-
Press Windows + R, type
gpedit.msc, and press Enter. -
Navigate to:
-
Double-click Turn off real-time protection.
-
Select Enabled, then click Apply > OK.
This will permanently disable it unless you change the setting back.
Method 3: Disable Real-Time Protection via Registry Editor
⚠️ Be careful—editing the registry incorrectly can cause system issues.
Steps:
-
Press Windows + R, type
regedit, and press Enter. -
Navigate to:
-
If the key doesn’t exist, create it.
-
Right-click the right pane > New > DWORD (32-bit) Value.
-
Name it DisableRealtimeMonitoring and set the value to 1.
-
Restart your PC.
Method 4: Temporarily Stop Microsoft Defender Service
Advanced users can disable the Defender service.
Steps:
-
Press Windows + R, type
services.msc, and hit Enter. -
Scroll down to Microsoft Defender Antivirus Service.
-
Right-click > Stop.
Note: Windows often restarts this service automatically, so it’s not a permanent solution.
Method 5: Use Command Prompt (CMD) to Disable Protection
If you prefer commands, here’s how:
Steps:
-
Open Command Prompt as Administrator.
-
Type the following and press Enter:
-
To disable permanently via registry using CMD:
Method 6: Use PowerShell
Another command-line method is with PowerShell.
Steps:
-
Open PowerShell (Admin).
-
Enter:
-
To re-enable:
Method 7: Use a Third-Party Antivirus (Automatic Disable)
When you install a third-party antivirus (like Norton, Kaspersky, or Bitdefender), Windows Defender automatically disables itself, including Real-Time Protection.
This is a safe way to replace Defender without leaving your PC unprotected.
How to Re-Enable Real-Time Protection
Once your task is done, always turn it back on:
Steps:
-
Go to Windows Security > Virus & Threat Protection.
-
Under Manage settings, toggle Real-Time Protection back on.
What Happens If You Keep It Off?
-
Your PC is more vulnerable to malware.
-
Dangerous files won’t be blocked.
-
You may accidentally install harmful software.
-
Windows will frequently warn you about your security being compromised.
Best Practices While Real-Time Protection is Off
-
Stay offline if possible.
-
Download files only from trusted sources.
-
Scan files manually with another antivirus before opening.
-
Turn it back on ASAP.
Pros and Cons of Disabling Real-Time Protection
Pros
-
Allows installation of blocked apps.
-
May improve performance on older PCs.
-
Useful for IT troubleshooting.
Cons
-
Leaves your PC vulnerable.
-
Risk of malware infection.
-
Some apps may exploit the unprotected system.
Frequently Asked Questions (FAQs)
Q1. Is it safe to turn off Real-Time Protection?
It’s safe only if you do it temporarily and know the files you’re handling are trustworthy.
Q2. Can I turn it off permanently?
Yes, using Group Policy or Registry Editor, but it’s not recommended.
Q3. Does disabling Real-Time Protection speed up my PC?
On low-end PCs, yes—it reduces background scanning.
Q4. What happens if I install another antivirus?
Windows Defender automatically disables Real-Time Protection.
Q5. How do I know if it’s off?
Windows Security will show a yellow warning saying your device is vulnerable.
Conclusion
Turning off Real-Time Protection in Windows 11 can be useful when installing certain software, troubleshooting, or switching to another antivirus. You can do it through Windows Security settings, Group Policy, Registry, CMD, or PowerShell.
Just remember: disabling it leaves your PC unprotected. The safest approach is to turn it off temporarily and enable it again as soon as you’re done. Think of it like leaving your house door unlocked—you can do it briefly, but you wouldn’t leave it that way forever.