Windows Hello PIN or biometric sign-in (face / fingerprint / Touch ID)
Security updates
Allow security updates and latest features
User Account Control (UAC)
Always notify
Smart App Control
Network firewall
Real-time protection
Bitdefender Total Security
Device firewall
Custom security settings
Bitdefender Total Security - currently using default settings other than not using the VPN or Password Manager due to using other options.
Windows - Hard_Configurator with "Basic_Recommended_Settings"
Periodic malware scanners
Hitman Pro, Emsisoft Emergency Kit
Malware sample testing
I do not participate in malware testing
Browsers and extensions
Microsoft Edge
Google search
uBlock Origin and Bitwarden Addons
Secure DNS
NextDNS
Desktop VPN
ProtonVPN free
Password and passkey manager
Bitwarden
Maintenance tools
SUMo for updates otherwise I just run the inbuilt disk cleaner once in a while to delete temp files etc
File and photo backups
OneDrive
System recovery
System image to external USB once a month, stored disconnected. Use "Windows 7 Backup and Restore Tool" (its included in Windows 11 and 10, has Windows 7 in the name)