Protect your AndroidiPhoneMacand Windows devices from threats by installing Microsoft Defender. Download Microsoft Defender on your devices either by:
We encourage you to install Microsoft Defender on at least five devices per person.
Open https://aka.ms/AndroidDefender (or scan the QR code below) on your Android device to go to Microsoft Defender in the Google Play Store.
Note
If your device has both a Personal Profile and a Work Profilethen you need to install the app in the Personal Profile.
Follow the installation steps on the Play Store page.
After installingsign in with the personal Microsoft account (such as @outlook.com@hotmail.comor @live.com) that is associated with your Microsoft 365 subscription.
When you first sign into Microsoft Defender on Androidwe'll walk you through a few easy steps that start with setting up web protection. During this processwe'll ask you to give Defender permission to do two things: run in the background and use the Accessibility Service.
Run in the background
A security tool that only works sometimes isn't nearly as effective. You want Microsoft Defender to always watch your backprotecting you from the malicious sites you weren't expecting. In order to do thatDefender needs permission to run in the background.
Accessibility service
In order to make sure the site you're going to isn't known to be dangerousDefender needs to be able to see the address. To do that on Androidwe use the Accessibility Service to readalmost literallythe address from your browser.
Important
Only one app at a time can have permission to use the Accessibility Service. If you give that permission to a different appweb protection in Defender will be turned off.
After setting up web protectionwe'll set up anti-malware protection. To do this we need to ask for a couple more permissions.
Access device storage
Microsoft Defender scans apps and files on your device to watch for possible threats. To do thatit needs to be able to access those files. We only use that permission to look for malicious appsa process that happens entirely on your device. No information about your apps or files is sent to Microsoft.
Send notifications
If you want Microsoft Defender to tell you if we find a threatyou'll need to allow us to send you notifications on your device.
Run in the background
Note
If you already allowed Microsoft Defender to run in the background for web protectionyou won't be asked for this permission again.
Protecting your device is a full-time jobbut you probably want to use your device for other thingslike textinggamingworkand entertainment. By allowing Microsoft Defender to run in the backgroundyou allow us to help keep you safer all the time.
Let's finish with a scan
FinallyMicrosoft Defender will run an initial scan of your device to see if there are threats already on it. This scan usually only takes a minute or two.
If that initial scan finds any threats Microsoft Defender will notify you and help you remove them.
- Open https://aka.ms/iosDefender (or scan the QR code below) on your iOS device to go to Microsoft Defender in the Apple App Store and follow the installation steps.
- After installingsign in with the personal Microsoft account (such as @outlook.com@hotmail.comor @live.com) that is associated with your Microsoft 365 subscription.
When you first sign into Microsoft Defender on iOSwe'll walk you through a few easy steps that to set up web protection. During this processwe'll ask you to give Defender permission to do two things: set up a local virtual private network (VPN) and allow notifications.
A local VPN?
Due to the built-in security settings in iOSother apps aren't able to see the address (URL) an app is trying to openincluding those being opened in the web browser. To make sure the site you're going to isn't known to be dangerousDefender needs to be able to see the address.
To do thatwe set up a local VPN. It's called a local VPN because it never leaves your device—it's just a connection between your browser and Microsoft Defender running on your device.
When you click on a linkthe browser sends the address you're going to through that local VPN to Defender. Defender checks the address and then (assuming it's good)lets the browser open that site. The whole thing happens so quickly you won't even notice.
Allow notifications
If the site is found to be malicious that's where notifications come in. We block access to the sitebut iOS won't let us notify you of the problem in the browserso instead we send you a notification telling you that the site you're trying to go to is dangerous. From that notification you can close the browser tab and stay safe. Orif you're completely sure that the site is safe, you can choose to continue to the site anyway.
Important
You can choose not to allow notifications and web protection will still workbut you won't get the notification that it was Defender who blocked the site you were trying to go to.
When you install the Microsoft 365 apps on your Windows devicethe Microsoft Defender app will automatically be installed for you along with the other apps. If you installed the Microsoft 365 apps before Defender was releasedand you still have an active Microsoft 365 Family or Personal subscriptionthen the Defender app was automatically added to your Windows device as part of an update.
Important
Even if it's installedMicrosoft Defender isn't activated until you sign into the app.
Just launch it from the Start menu (or click the button below) and sign in with the personal Microsoft account you use for Microsoft 365.
If your Windows device is setup for single sign-on (SSO)the Microsoft Defender app signs you in without requiring you to type in your username and passwordeach time you use the app. The Microsoft Defender app also signs you in without requiring you to launch itif Microsoft Defender Antivirus is your primary antivirus. Learn more about how the Microsoft account or work or school account you use to sign-in to Windows can be used to sign in to other apps on your device at aka.ms/sso-info. To prevent SSOsign-out or uninstall the Microsoft Defender app.
If you don't have an active Microsoft 365 subscription right now
- Open https://aka.ms/WindowsDefender to go to Microsoft Defender in the Microsoft Store and select Install.
- After installingsign in with the personal Microsoft account (such as @outlook.com@hotmail.comor @live.com).
To uninstall Defender
Find Microsoft Defender on your Start menuright-click it and select Uninstall.
If you uninstall the app it will not be automatically reinstalled. You can reinstall it manually by going to https://aka.ms/WindowsDefender and selecting Install.
Note
Microsoft Defender on Mac requires macOS 10.14 or later.
- Open https://aka.ms/MacDefender on your device to download the WDAV.PKG installation file.
- Open the WDAV package file on your Mac and follow the installation steps.
- After installingsign in with the personal Microsoft account (such as @outlook.com@hotmail.comor @live.com) that is associated with your Microsoft 365 subscription.
When you first sign into Microsoft Defender on Macwe'll will walk you through a few easy steps to set up anti-malware protection on your device.
During this processwe need you to give Microsoft Defender a couple of permissions so that it can protect you.
System access
To start withwe'll have you open the Security settingsthen follow these steps:
1. Select the padlock at the bottom left so you can make changes. You'll be prompted to enter your password or other authentication.
2. You should see a prompt that says that Some system software requires your attention before it can be used. Select the Details button.
3. If you see a dialog asking you to select Microsoft Defender and Microsoft Defender Extensionselect both and then OK.
Note
If you're using macOS Catalina (10.15) you may simply see an Allow buttonrather than Details.
Once that's doneselect the padlock again to prevent further changes.
Access files
Nextwe'll need permission to access your files. Microsoft Defender scans apps and files looking for threats and it can only do that if it has permission to access the files. We'll ask you to select Open Privacy Settingsthen follow these steps:
1. Select Full Disk Access.
2. Select Microsoft Defender and (if you see it) Microsoft Defender Extension.
Let's finish with a scan
FinallyMicrosoft Defender will run an initial scan of your device to see if there are any threats already on it. That scan may take a while—depending on the speed of your device and how many apps you have—but you can keep using your computer while the scan runs in the background.
If that initial scan finds any threats Microsoft Defender will notify you and help you remove them.
Tip
If Microsoft Defender is successfully installed and runningyou'll see its icon on the title bar near the clock at the top right.
If you're part of a Microsoft 365 Family subscription the last step is to decide if you'd like to share your security status with your family organizers. The family organizer is the person who established the Microsoft 365 Family subscriptionand any other family members that person has selected to be family organizers.
By sharing your security statusyou make it easier for the family organizers to help keep your devices and identity safe. This only shares security and identity threat monitoring information from Defendernot any other information about your device or any of your personal files. For more information see Protect the whole family with Microsoft Defender.
Once that process is donewe'll take you to your Microsoft Defender dashboard and then you're all set.