Ransomware is nasty stuff. This type of malware encrypts files on your computer so you can't access them — unless you pay the attacker to unlock the data. In other words, your files are held hostage until you demand a ransom, unless you are able to. Avoid ransomware attacks using other means.

CBS News just ran one Caution section on the Scattered Spider ransomware groupIdentifying just how much damage ransomware can cause — so it pays to be prepared. Hackers shut down a Las Vegas casino, costing millions. Your personal computer is short on target, but why test faith?

The best defense against ransomware is to avoid sites and downloads riddled with it, but you can take other precautions as well. Modern antivirus software often restricts which apps can change files in folders commonly targeted by ransomware. Microsoft Defender, built into Windows, can also do this. (Microsoft changed the name from Windows Defender several years ago, but it's the same program.) Some antivirus suites also run automatic backups, in case you need to restore your files.

The catch? Unlike third-party antivirus software, these are additional security measures. no Microsoft Defender is turned on by default. You have to enable them yourself.

Further reading: PCWorld's Top Picks for Best Antivirus Software 2024

How to Turn on Ransomware Protection in Windows

Step 1: Open Windows Security.

Open the Windows Security app on your computer. You can access it in one of several ways:

• Press Alt + Spacebar on your keyboard, type Windows Securitythen press Enter.
• Open your Start menu and type Windows Securitythen press Enter.
• Open your Settings app, then select Windows Security In the left pane

Step 2: Find your ransomware settings.

In the Windows Security app, click . Virus and threat protection. Then click. Manage ransomware protection. At the bottom of the screen.

Next, turn it on Controlled folder access. This setting limits the app's access to your computer's default OneDrive, Documents, Photos, Videos, Music, and Favorites folders. You can also manually add other folders to the list.

Not all apps in Windows will be blocked from these areas—Microsoft Office programs are allowed to open and convert files automatically. But if it's not on Microsoft's internal list of trusted apps, a program can't see anything in those folders unless explicitly allowed in Windows Security.

Related: 10 Things I'd Never Do as an IT Pro

Step 3: Make sure you're signed in to OneDrive.

Restricting access to files and folders will not fully protect them. Another important defense is to keep good backups, which Windows automatically does if you log in to OneDrive. (You can either link a Microsoft account to your entire Windows PC, or specifically to just the OneDrive app.)

To verify that this protection is turned on, you can see Ransomware Protection > Ransomware Data Recovery.

Of course, for the purpose of avoiding the worst effects of ransomware, the safest backup of your files is the one you keep offline. You should create one in addition to anything you store in the cloud — if you only have one copy of your data, you're not properly backed up.

Should you turn on ransomware protection in Windows?

Security and convenience live on opposite ends of the spectrum, and the same is true here. Controlling folder access in Windows can keep attackers away from your important folders, but it can also be a bit of a pain. Gamers, for example, may find that access to save files may be blocked by default, as they are often stored in your Documents folder.

You can fix this problem with minimal work — add the app to the access list. Or save the game files to another folder on your PC that it doesn't have controlled access to. (You only need to use third-party software to set up a schedule for regular backups.)

Protect your Windows PC from other online threats as well.

For more information about Windows Security (and its various components), you can check out Our video review on YouTube. If you prefer more sophisticated software, as well as additional protections, you can also consider upgrading. Your antivirus software. For example, Norton 360 Deluxe, our current top pick for antivirus, bundles strong malware protection with a VPN, password manager, dark web monitoring for your personal data, and more. This can help make it easier to stay safe online.

Finally, if you're interested in learning more about ransomware protection, check out our separate guide How to Prevent (or Survive) a Ransomware Attack.

Editor's note: This article was updated to include links to our guide on how to prevent and recover from ransomware attacks.