You can disable Secure Boot in Windows 11 from your PC’s UEFI firmware settings, but it is a security change rather than a normal personalization setting. Secure Boot helps prevent untrusted boot software from loading before Windows, so leave it enabled unless you have a specific compatibility or troubleshooting reason to turn it off.
Before changing Secure Boot, make sure you can access your BitLocker or device-encryption recovery key. A security or hardware change can cause Windows to request that key at startup.
Check Your Current Secure Boot Status
- Press Windows + R.
- Type msinfo32 and press Enter.
- Find Secure Boot State.
If it already says Off, you do not need to disable it. Also note the BIOS Mode shown in System Information before changing firmware settings.
How to Disable Secure Boot
- Open Settings.
- Select System > Recovery.
- Next to Advanced startup, select Restart now.
- In Windows Recovery, choose Troubleshoot > Advanced options > UEFI Firmware Settings.
- Select Restart.
- In the UEFI utility, locate Secure Boot. The setting may be under Boot, Security, Authentication, or a similar section.
- Set Secure Boot to Disabled.
- Save the firmware changes and exit.
- After Windows starts, open System Information again to verify the Secure Boot state.
Why You Might Be Asked for a BitLocker Recovery Key
BitLocker uses information about the trusted boot environment when protecting an encrypted system drive. Significant firmware or security changes can cause Windows to require the 48-digit recovery key before unlocking the drive. Confirm that you have the correct recovery key before changing Secure Boot; Microsoft cannot recreate a lost BitLocker recovery key.
Do You Need to Change UEFI to Legacy or CSM Mode?
No. Disabling Secure Boot and changing the computer from UEFI to Legacy/CSM boot are different actions. Do not switch boot modes just because you want Secure Boot off. An unnecessary boot-mode change can prevent an existing Windows installation from starting.
When Might Secure Boot Need to Be Disabled?
Some specialized operating systems, older boot media, hardware tools, or troubleshooting procedures may require Secure Boot to be temporarily disabled. Follow the current documentation for the software or hardware that actually requires the change rather than disabling it as a general performance tweak.
Does Disabling Secure Boot Make Windows Faster?
Secure Boot is not a normal Windows performance setting. Turning it off is unlikely to provide a meaningful everyday speed improvement, while it removes a protection designed to stop untrusted code from participating in the startup process.
How to Turn Secure Boot Back On
- Return to the UEFI firmware settings.
- Locate Secure Boot.
- Set it to Enabled.
- Save the changes and restart.
- Open msinfo32 and verify that Secure Boot State says On.
If Secure Boot cannot be re-enabled, consult the PC or motherboard manufacturer’s instructions. Firmware implementations differ, and some systems require the factory Secure Boot keys to be present.
Summary
To disable Secure Boot in Windows 11, enter UEFI firmware settings through Advanced startup, turn Secure Boot off, save, and verify the result in System Information. Keep your BitLocker recovery key available and do not change UEFI/Legacy boot mode unless your specific task actually requires it.