The Windows Security Setup I Prefer: Defender, Malwarebytes, and Good Backups

Windows security and backups, in plain English · Updated October 3, 2026

When I worked as a shop tech, I dealt with viruses and learned how to remove them. That experience still shapes how I think about computer safety: use sensible protection, understand what is running, and keep a way to recover when something goes wrong.

My preferred setup is Windows’ built-in Microsoft Defender Antivirus, paid Malwarebytes as an additional layer where configured appropriately, and good backups. Here is how I think about those pieces on a personal Windows computer.

Start with the computer you already have

Before paying for another subscription, open Windows Security from Start and check for warnings. Confirm which antivirus provider is active. A computer with three security icons may still have a disabled feature or an expired subscription.

Keep Windows, your browser, and the apps you use updated. Finish restarts when updates require them. Microsoft’s home security guidance covers these basic habits.

Windows 10’s ordinary free support ended on October 14, 2025. If you still use it, check whether your computer has applicable extended security updates or plan a move to a supported system. An antivirus subscription does not replace operating-system security updates.

Why I like Malwarebytes

Malwarebytes is a product I like from my malware-removal background. I value having an additional tool available, but I would not tell someone that every household must buy it or that one brand catches everything.

Paid and free features differ. Before subscribing, check the exact plan, number of devices, renewal price, and whether the features you want work on your device. Our free versus paid guide explains that decision without relying on a promotional price.

Check the relationship between the two products

Installing both products does not prove both are providing real-time protection. Windows may change its active antivirus provider when another product registers with Windows Security. Malwarebytes has a Windows Security Center setting that affects that relationship.

If your goal is Defender plus Malwarebytes, use the configuration guide and verify the result. Do not turn everything off just to make a warning disappear.

Backups make the setup useful when protection fails

I want a copy of important files that I can get back after a mistake, a failed drive, or an infection. A backup plan should answer three questions: what is protected, when was the last successful copy, and can I restore it?

A family photo collection and an irreplaceable document deserve attention even if you rarely install software. Start with the 3-2-1 backup guide, then practice restoring one harmless file.

Account safety is its own part of the job

A scam can persuade you to hand over a password without installing a virus. Use different passwords for important accounts, enable an additional sign-in check where available, and keep recovery information current.

When a message pressures you to sign in or pay, pause and visit the service through a route you know. Our scam email guide walks through that habit.

A small checklist for today

• Check the active antivirus provider and resolve genuine protection warnings.
• Check for updates and finish any required restart.
• Confirm the latest backup completed and restore a test file.
• Review recovery access for your main email account.

You can do those checks before shopping. The goal is a setup you understand and maintain, with a recovery plan you have practiced.