How to Enable Secure Boot Windows 11 (Step-by-Step Tutorial)

Want to enable Secure Boot on your Windows 11 PC? In this step-by-step guide, I’ll show you exactly how to check your Secure Boot status and turn it on—no tech degree required. You'll learn how to access the BIOS, navigate to the Secure Boot setting, and ensure your PC is using UEFI mode. Whether you're troubleshooting compatibility or tightening up security, this guide has you covered.

Host: Kevin Stratvert

⌚ TIMESTAMPS
0:00 - Introduction
0:08 - Check if Secure Boot is enabled
1:00 - Restart into BIOS
1:44 - Enable Secure Boot setting in BIOS
2:36 - Confirm Secure Boot is now enabled
2:43 - Wrap-up and final tip

🔄 How to Switch from Legacy BIOS to UEFI in Windows 10/11
Want to enable Secure Boot but your BIOS is set to Legacy? Here’s how to safely convert your system from Legacy BIOS to UEFI without reinstalling Windows:

🛑 Before You Begin
• Back up your files just in case
• Make sure your PC supports UEFI (most systems from 2012 or later do)

✅ Step-by-Step Instructions
1. Check Your BIOS Mode and Disk Type
• Press Windows + R, type msinfo32, and press Enter
• Look for BIOS Mode — if it says Legacy, continue
• Open Disk Management by right-clicking the Start button
• Right-click your system disk (usually Disk 0), select Properties, then go to the Volumes tab
• Check Partition Style — if it says MBR, you're ready to convert

2. Convert MBR to GPT (No Data Loss)
• Open Command Prompt as Administrator
• Run this command to validate:
mbr2gpt /validate /allowFullOS
• If validation is successful, run this to convert:
mbr2gpt /convert /allowFullOS
• You should see a message like:
"Before the new system can boot properly, you need to switch the firmware to boot to UEFI mode"

3. Reboot and Switch to UEFI in BIOS
• Hold the Shift key and click Restart from the Start menu power options
• On the blue screen, go to Troubleshoot
• Select Advanced Options
• Choose UEFI Firmware Settings, then click Restart
• Once in BIOS, look for Boot Mode
• Change it from Legacy to UEFI
• Save and exit (usually by pressing the F10 key)

4. Confirm the Change
• Once back in Windows, open msinfo32 again
• BIOS Mode should now show UEFI

Still can't enable Secure Boot?
Check your BIOS for a setting called CSM and disable it first.

📺 RELATED VIDEOS

📩 NEWSLETTER

🔽 CONNECT WITH ME

🎁 TOOLS AND DISCOUNTS

🎒 MY COURSES

🙏 REQUEST VIDEOS

🔔 SUBSCRIBE ON YOUTUBE

🙌 SUPPORT THE CHANNEL
- Hit the THANKS button in any video!

⚖ DISCLOSURE
Some links are affiliate links. Purchasing through these links gives me a small commission to support videos on this channel. The price to you is the same.

#stratvert #secureboot

[VerbaVolantVV]

Secure Boot is a security feature built into modern computer systems that ensures only trusted, digitally signed software is allowed to run during the boot process. Its primary purpose is to prevent malicious software, such as rootkits and bootkits, from loading before the operating system starts, thereby protecting the integrity of the system from the very beginning

[SkillUpShow]

As someone who's just getting started with system security settings, this video was extremely helpful! I had no idea how crucial Secure Boot was for enhancing the security of my Windows 11 PC, and the step-by-step guide made it really easy to follow.

The tip about checking the "Secure Boot State" in System Information was a great starting point. It was easy to see that mine was off, and then following the steps to enable it in the BIOS was super clear. The fact that you showed how to enter the BIOS using the Windows Recovery Environment by holding Shift while restarting made it feel like less of a daunting process.

I also liked the explanation about how the BIOS layout might vary depending on the motherboard—very useful to know since my setup looked a bit different. And the reminder to disable CSM (Compatibility Support Module) if Secure Boot isn’t showing up was a helpful troubleshooting tip.

[robcanada]

Clear instructions but lacking on details. I have to say vey disappointing for a Kevin video. What is secure boot. Why do I want it on? What is the pros and cons? What is UEFI? What are the impacts if i change from Legacy. Same with CSM. What is the potential impacts if I disable it. Also, should you take a recovery back-up before making changes in case there are issues or can you ensure making these changes will have no impact to the person's computer? Does this increase boot time?

[fnjay]

Can someone help me, when I go on the bios settings thingy, I go to the stuff he said and it said secure boot is enabled but then I check system info after and it says it’s off

[AdelusiDankunle]

Thank you so much, your guidance have helped me creat my first workflow and four more workflows personally. I would love to share them with you.
I'm a big fan of yourself❤

[mackjay]

I just did this exactly the same way and it works. Thanks!

[ArizonaPheonix]

Mine says standard or custom. It’s on custom, should I put it on standard

[cee]

What is secure boot and why would I want it?

[Rafa_the_goat]

Thanks you helped me so much in this video!!!👌💯

[DesolatorGaming]

Ayyy it worked after I converted it from MBR :)

[Jonah-sr]

at my bios it says user instead of disabled what should i do

[frankiberlin]

What is it for?
No explanation.

I can read the comments here.
But it should be part of your video!

[jellebigge]

What is secure boot? And what does it it do when you enable it?

[EskeJensen]

so i cant change it but it says its already enabled but in my system inofrmations thing it says it isnt pls help kevin

[kaiyoung]

I did all of this in BIOS Settings Enabled it but it still says its not on, but in BIOS Settings say that its enabled. What do I do?

[JakobArh]

can you do a tutorial how to turn of ssm

[-RizonGaming-]

uh mine is saying its enabled yet in msinfo32 it says its not wtf?

[Zehnnn]

what if i dont have either boot or security in my i need help asap

[edgecase]

Questions are being asked what is 'Secure Boot in Windows 11'. Here is the explanation as per Chat GPT:
🔐 What is Secure Boot?
Secure Boot is a security feature built into modern PCs (UEFI-based systems) that prevents malicious software from loading during the boot process—before Windows even starts.

🧠 How it works:
When your PC powers on, Secure Boot checks the digital signatures of boot software (like Windows bootloader).
If the signatures are valid and trusted, the boot process continues.
If something's fishy (like a rootkit or an unapproved OS loader), the system blocks the boot to protect your PC.

[zegoddy]

I dont have that option mine is disbaled in gret and directly jumping to glear all aecurit boot keys