According to the latest threat report from McAfee, there are an average of 419 new threats appearing every minute. Four hundred and ninteen. Every sixty seconds! That's almost seven per second.

Figures like these should be a wake-up call for anyone who thinks they don't need to worry about security software for their laptop or PC.

Of course, we're not just talking about protecting the computer (or Windows, to be more specific) we're talking about your precious files, photos and any other data that can't be replaced.

These days malware doesn't seek only to encrypt your files and demand a ransom. It's just as likely to sneakily install itself in the background and attempt to steal your login details, your name, address, age, gender and even your payment information.

Cybercriminals want your money, and they'll do just about anything to get it.

What this all means is that you simply can't afford not to have antivirus software running on every Windows device you own. Windows is still the biggest target (with Android the other major one).

But just as antivirus software is getting ever more efficient at stopping malware, the hackers are getting better at exploiting the weakest link in the chain: you.

Scams have increased this year like no other. Indeed, in just the last three months McAfee has totted up a 605% increase in COVID-19-themed attacks. You can read more in the November 2020 threat report.

Fortunately, modern security software is a lot more than plain antivirus and helps to warn you of email and social media scams, as well as flagging up any potentially dangerous websites in lists of search results.

Add to that extra tools such as password managers, ID theft monitoring and notifications when apps try to use your webcam or microphone without permission and you stand a much better chance at avoiding these threats.

Does Windows 10 come with antivirus software?

It does indeed: Windows Defender. Windows has had virus protection for a number of years, and the latest iteration found in Windows 10 is the strongest it’s ever been.

If your laptop or PC didn't come with any other antivirus software pre-installed then Windows Defender will already be protecting your system.

Given that Defender's protection is just as good as the best antivirus software, you can relax in the knowledge it's keeping your laptops and PCs safe. In AV-Test's most recent report covering July and August 2020, Defender stopped 100% of 'known' viruses and also 100% of zero-day (unknown) attacks. 

Microsoft’s offering should also have the advantage of being baked into the OS, but in fact it has a higher drag factor when it comes to system resources, causing apps to load more slowly than if you ran a paid-for security product such as Norton 360 Deluxe. It doesn't offer those extra features you get with the fully fledged security suites either, so you're not as well protected from dangerous websites, scams lurking in social media feeds and in phishing emails.

Of course, it still has advantages: it doesn't cost anything and you don't have to install it or configure it in the first place, which is also a bonus.

To check if Windows Defender is working correctly, launch the Windows Security app which will show you the status of antivirus and firewall.

Do I need antivirus

If there's something not right, you might like to read our How to turn on or off Windows Defender guide. In the screenshot above, you can see Norton 360 is installed, which means Defender is automatically disabled.

Why pay for antivirus software?

That, of course, is the obvious question. But if you've been paying attention to this point, you'll already know the answer.

We've already mentioned that Defender can slow down app loading times more than some rivals, but there are other advantages of dedicated anti-virus software. Namely, they usually provide a wider range of features in terms of how they protect your system, including cloud storage / backup, password managers to help you have different and secure passwords for each and every online service, parental controls, email and web-browser plug-ins which can warn you of dodgy email attachments and websites.

Ransomware protection is a key feature you'll find in many products, and this keeps your files safe from being encrypted should this type of malware manage to wreak havoc on your computer. 

Windows Defender does now have 'Exploit Guard' which helps to protect your files against ransomware, but only if you've updated to the Creators Update (or a later version of Windows 10).

You'll also need to have set up Controlled Folders (which are the folders that get protected from Ransomware attacks). It's no use just having the latest version of Windows: you still need to pick your protected folders in the Windows Security app.

Paid-for antivirus software often gets new features sooner, though, and many now employ machine learning for faster threat detection.

If you want to see which security suites we recommend, then check out our roundup of the best antivirus. Our top picks at the moment are Norton 360 and Bitdefender.

Bottom line: if you want the best protection, pay for security software. Often a single subscription will protect your whole family's devices including mobile phones.

What can I do to beef up Windows 10's security myself?

Don’t use an Administrator account

It's not a good idea to use a Windows account with Administrator privileges. This simple modification can eradicate many of the threats out there, as malware, spyware, and the like will not be able to install itself.

To do this you’ll need to create a new Administrator account (as you’ll want one on your system), then change your existing account to a Standard one.

This can be achieved in Settings > Accounts > Family & other people, where you add either a family member or a generic account. 

Set this as an Administrator, then log out of your existing account. Log in as the new one, click on your normal account and when the option to Change account type appears click on it. This opens a window where you can select to make that account either Standard or Administrator.

 do you need antivirus on new windows pc

With this up and running it should offer a fair amount of protection from accidental downloads with malware under the covers.

If you do find that certain programs you use regularly require the higher-level access, then you can always give that a special pass. Read How to run programs as Administrator in Window 10 for more details.

Be very careful what you click on

Many of the ways people are compromised these days comes through being fooled into clicking on links in emails, which then downloads malware, or clicking through to fake versions of websites which then ask you to log in, therefore stealing your account details.

A good rule of thumb is to always navigate to a site yourself. If you get an email saying your account password needs changing, or even that there’s a great sale on, then don’t click on the link. Instead, go to your browser and type in the address of the site. If the sale is real, then you’ll be able to find it.

Be very cautious about links in emails or social media messages too, as these can be just as perilous. Basically, treat every link or download as suspicious, and you can avoid a lot of problems.

Make regular backups

The last essential part of protecting yourself is to make regular offline backups. Yes, using online services is a good idea, and as you’ll see from our best cloud storage roundup there’s plenty of choice, but with Ransomware becoming more of a threat we’d also highly recommend creating your own local, offline backups too.

Follow our How to backup Windows 10 guide for more details on the software you can use, and how to set up a regular schedule for protecting your precious data.

Have a dedicated web browser for Flash or Java

Another common weak point on Windows comes from third party software. Flash and Java both are known to be the route many malware programs take to get onto your system, so it’s wise to limit their use.

In some cases, this is hard, as you might have specific websites that require them – banking sites were a prime example for a time - meaning you can’t disable the programs completely. 

Our advice is to download another browser - Chrome, Firefox, Opera, etc. - and have Java and Flash enabled on that one. Then whenever you need to use the website that requires them, you can open that browser, but for the rest of the time online you’ll be in a secure browser instead.

No antivirus software offers a cast-iron guarantee that it will stop all viruses and malware each and every day. That's why it's crucial to stay vigilant, and stay safe. 

Related articles for further reading