How to Check if Secure Boot is Enabled in Windows 11

Secure Boot is a critical security feature built into modern computer motherboards. It ensures that your PC only boots using software that is trusted by the original equipment manufacturer (OEM), preventing malicious software, such as rootkits, from loading before the Windows operating system starts. In fact, Microsoft made Secure Boot a mandatory hardware requirement for installing Windows 11.

If you are troubleshooting system issues, attempting to install a dual-boot Linux setup, or simply want to verify that your system is fully protected, you may need to check the status of Secure Boot. Here is how to easily verify if Secure Boot is enabled in Windows 11 without restarting your computer and entering the BIOS.

Method 1: Check Using System Information (msinfo32)

The most straightforward way to check your Secure Boot status is by using the classic System Information utility, which provides a comprehensive overview of your hardware and system environment.

1. Press the Windows Key + R on your keyboard to open the Run dialog box.
2. Type msinfo32 into the text box and press Enter (or click OK).
3. The System Information window will open. Ensure that System Summary is selected in the left-hand pane.
4. In the right-hand pane, scroll down the list until you find the item labeled Secure Boot State.

If the value next to Secure Boot State says On, the feature is successfully enabled and protecting your system. If it says Off, it is disabled. If it says Unsupported, your hardware does not support the feature, or your system is currently booting in Legacy BIOS mode rather than UEFI mode.

Method 2: Check Using the Windows Security App

You can also view your Secure Boot status through the modern Windows 11 Settings interface, specifically within the built-in Windows Security application.

1. Click the Start button and type Windows Security, then press Enter to open the app.
2. In the left-hand menu, click on Device security.
3. Under the Secure boot section, look for a green checkmark indicating that Secure boot is on.

If the feature is enabled, Windows will display a message stating that “Secure boot is on.” If your device is not capable of Secure Boot, this section may be missing entirely or will indicate that your device does not meet standard hardware security requirements.

Method 3: Verify Using PowerShell

If you prefer using command-line tools or need to check the status remotely, you can quickly query the Secure Boot state using a simple PowerShell command.

1. Right-click the Start button and select Terminal (Admin) or Windows PowerShell (Admin).
2. If prompted by User Account Control, click Yes to allow administrative privileges.
3. Type the following command and press Enter:
   Confirm-SecureBootUEFI

The command will instantly return a boolean value. If it returns True, Secure Boot is enabled. If it returns False, Secure Boot is disabled. If it returns an error stating that the cmdlet is not supported on this platform, your system is likely running in Legacy BIOS mode.