Microsoft is working on a major security overhaul for Windows 11 that gives users tighter control over what software can access on their computers. The goal is to make Windows safer out of the box, with clearer permissions and stricter rules about what programs are allowed to run.
One of the biggest changes is something called Baseline Security Mode. When enabled, Windows will only allow apps, services, and drivers that have a valid digital signature from a verified publisher. This helps confirm the software’s origin and ensures it hasn’t been altered. The feature is designed to block malicious or unknown programs before they can even start. Still, Microsoft says users and IT administrators will be able to create exceptions if they need to run trusted tools that aren’t signed, something developers and organizations often rely on.
The second change focuses on app permissions, simirarly like smartphones handle privacy. Instead of apps quietly accessing hardware or data in the background, Windows will now show clear prompts when a program wants to use things like the camera, microphone, location, or local files.
Each request will explain why the app needs access, letting users approve or deny it. Permissions can also be reviewed and revoked later through a central dashboard in the system settings, making it easier to track what apps are doing. The push for stronger security follows criticism of Microsoft’s internal security practices in 2023, when U.S. government officials described the company’s security culture as inadequate.
Microsoft hasn’t shared a timeline for when these changes will fully arrive, but says they’re part of a broader effort to make Windows more resilient and transparent.