To disable Secure Boot on Windows 10, open your PC’s UEFI firmware settings: go to Settings > Update & Security > Recovery, click Restart now under Advanced startup, then choose Troubleshoot > Advanced options > UEFI Firmware Settings > Restart. Find Secure Boot on the Boot, Security, or Authentication tab, set it to Disabled, and press F10 to save and exit.
Secure Boot protects your PC from malware that loads before Windows, so only turn it off if you need to, such as to boot an older operating system or certain hardware. Here’s how to do it safely and turn it back on later.
Before you disable Secure Boot
- Save your BitLocker recovery key. Changing firmware settings can trigger BitLocker recovery. Find the key at account.microsoft.com/devices/recoverykey.
- Check your reason. Most Linux distributions and modern hardware work with Secure Boot on. Some games and anti-cheat tools require it to stay on.
- Know your PC’s BIOS key in case you need to enter firmware at startup, such as F2, F10, F12, or Delete.
How to disable Secure Boot
- Press Windows key + I and go to Update & Security > Recovery.
- Under Advanced startup, click Restart now.
- Choose Troubleshoot > Advanced options > UEFI Firmware Settings, then click Restart.
- In the firmware menu, open the Boot or Security tab. On some PCs, switch to Advanced Mode first (often F7).
- Select Secure Boot and change it to Disabled. Some PCs require you to set a supervisor password before this option can be changed.
- Press F10 (or choose Save & Exit) and confirm.
Where to find Secure Boot by brand
- Dell: Boot Configuration or Secure Boot > Secure Boot Enable
- HP: Advanced or Security > Secure Boot Configuration
- Lenovo: Security > Secure Boot
- ASUS: Boot > Secure Boot > OS Type set to Other OS
- MSI: Settings > Security > Secure Boot
Check that Secure Boot is off
After Windows starts, press Windows key + R, type msinfo32, and look at Secure Boot State. It should say Off.
How to turn Secure Boot back on
Return to the same firmware setting and set Secure Boot to Enabled. If Windows won’t start afterward, make sure Boot Mode is UEFI, not Legacy or CSM. See how to turn on Secure Boot for more help.
Frequently asked questions
Is it safe to disable Secure Boot?
Your PC keeps working, but it’s less protected from boot-level malware. Turn it back on when you no longer need it off.
Why is the Secure Boot option grayed out?
Many PCs require a supervisor or administrator password in the firmware before you can change it. Set one on the Security tab first.
Will disabling Secure Boot delete anything?
No. It only changes a startup setting.
Can I disable Secure Boot from Windows?
No. It’s a firmware setting, so you must change it in UEFI.
Kermit Matthews is a freelance writer based in Philadelphia, Pennsylvania with more than a decade of experience writing technology guides. He has a Bachelor’s and Master’s degree in Computer Science and has spent much of his professional career in IT management.
He specializes in writing content about iPhones, Android devices, Microsoft Office, and many other popular applications and devices.