Security setup

PC setupWindows 11

TairikuOkami's PC Security Config

TairikuOkami · Oct 1, 2026

Layout

Imported from an earlier discussion · awaiting owner confirmation

Suggestions on the main improvementsRevision 2What changed

Staff assessment Not reviewed by staff

Setup changed since the last review. The earlier assessment remains in history.

Device & operating system2

Operating system: Windows 11
OS version and support details: Windows 11 Insider Experimental (Future Platforms)

Protection & updates13

Real-time protection: No Realtime AV running (Microsoft Defender disabled)
NextDNS as AV - Windows via DoT & Browsers via DoH
Device firewall: Microsoft Defender Firewall with Advanced Security
On-device encryption: Encryption not enabled
Device sign-in security: Windows Hello PIN or biometric sign-in (face / fingerprint / Touch ID)
Security updates: Allow security updates and latest features
Update channels: Allow beta system updates
User Account Control (UAC): Always notify
Smart App Control: Off
Network firewall: Enabled
Router and network details: ISP Controlled Router - 500/100 Mbps via RouterOS
FlexCore USB-C 3.2 Gen 1 to LAN via Flat Braided Cat8
Custom security settings: Disabled IPv6, PowerShell, WSH, some services and tasks
Blocked TCP ports 1-65535 except email and steam related
Blocked UDP ports 1-1024, including 53, except 123 and 443
Blocked a few lolbins via IFEO, SecureBoot and TPM Enabled

IP Info & TCP UDP Watch used to check connections
Startup entries and policies are reset at shutdown
Browser cache and cookies are cleared at close
Apps updated via Winget and Softpedia mail
Periodic malware scanners: Autoruns
Dr.Web CureIt!
HitmanPro
System Informer (Hybrid-Analysis+VirusTotal)
Malware sample testing: I do not participate in malware testing

Browser & privacy5

Browsers and extensions: No extensions installed, Edge locked down via policies
Edge for browsing, TCP 443 allowed, the rest is blocked
LibreWolf for Facebook, the rest of the internet is blocked
Brave for Google/YouTube, the rest of the internet is blocked
Secure DNS: NextDNS DoT/DoH - Blocked virtually all TLDs, all security features enabled
AdguardDNS used as a backup and to access webpages blocked by NextDNS
Desktop VPN: TOR - Installed and removed ASAP
Password and passkey manager: Proton Pass - for common passwords
Triple encrypted file - for critical services
Two-factor authentication: Offline - 2fast - two factor authenticator supporting TOTP Online - Microsoft Authenticator

Backup & recovery2

File and photo backups: USB (monthly)
Google (monthly)
IceDrive (monthly)
OneDrive (nonstop)
System recovery: Hasleo Backup Suite (PreOS)
Full backup after every update

Device & usage6

Main use of this computer: For home and private use
Maintenance tools: Driver Store Explorer
HiBit Uninstaller Portable
PortableApps as Start
System Informer Canary
Windows Cleanup.bat
Winget (App Installer)
Wise Disk Cleaner
Wise Registry Cleaner
Subscriptions: Microsoft OneDrive 100GB
Usage and exposure: Visiting familiar websites, Visiting unknown or untrusted websites, Online shopping and card payments, Logging into my bank account, Downloading software and files from reputable sites, Downloading files from unknown or untrusted sources, Gaming
Computer specs: https://malwaretips.com/threads/tairikuokamis-pc-built-in-202x.132626
Feedback preference: Suggestions on the main improvements

How members rate the shared configuration. This is community feedback, not a security test.

5.0 / 5

1 member rating

Rating distribution

Shared by the member. This is a configuration record, not a device scan.

Comments and feedback belong in the forum discussion. Open it to join the conversation.