Advanced Security MrBananaxx's Security Configuration 2022

Last updated
Oct 16, 2022
Use case
For personal use
Shared with
No one
Desktop OS
Windows 11
Windows OS SKU
Login Unlock
    • Passwordless PIN or Biometrics
with
Microsoft account
Primary user
Administrator rights - Full permissions that can perform harmful changes
OS updates
Allow security updates
Windows UAC
Always notify
Network firewall
Router with network security
Always-on protection
Microsoft Defender
Microsoft Defender Firewall (Windows 11 & 10)
Custom RT/Firewall security
Secure Boot
Bitlocker with TPM
PUA and Core Isolation enabled
ConfigureDefender set to High Preset
Malware testing
No malware samples
Periodic scanning
Microsoft Safety Scanner
Microsoft Defender
Secure DNS
Password manager
Bitwarden - Microsoft Authenticator for OTP
Browsers and Extensions
Edge - Duckduckgo - uBlock Origin
Utilities for Maintenance
Storage Sense scheduled to run monthly
BleachBit when needed
Files & Photos backup
Files & Photos backup routine
Emergency recovery plan
Windows Backup & Restore
Integrity of recovery plan
I have tried and tested this method once.
Tasks performed
    • Browsing the web
    • Receiving, sending and opening email attachments
    • Buying goods from online stores, entering card details and addresses
    • Logging into personal banking to check statements and payments
    • PC games, mods and cloud-based gaming
Computer specs
Notable changes
28/05/22 - Removed Edge, added Firefox, Quad 9 to Cloudflare.
16/10/22 - Updated to 22H2, did some cleanup
Feedback response

I am mostly satisfied. Minimal feedback is appreciated, for minor changes to patch any missed security / privacy issues.