A new Windows PC usually comes with plenty of things to set up, from wallpapers and themes to removing unwanted applications. But before getting too deep into customization, security deserves attention.
Several free and open-source tools can strengthen different parts of a Windows computer. They can help protect passwords, encrypt sensitive files, monitor network connections, remove unnecessary Windows components and make deleted data harder to recover.
Here are five tools worth knowing about when setting up a new Windows machine.
BITWARDEN: KEEP YOUR PASSWORDS PROTECTED
One of the first security improvements on a new computer should be better password management.
Bitwarden is an open-source password manager that stores passwords and other sensitive credentials inside an encrypted vault. It makes it easier to use strong, unique passwords instead of reusing the same password across multiple websites.
Bitwarden uses end-to-end encryption, with encryption and decryption designed to happen locally. This means the company's servers are not supposed to have access to the actual contents of a user's vault.
Its source code is publicly available, allowing security researchers and others to inspect the software. Bitwarden also publishes information about independent security assessments carried out on its products.
For users who want even more control, Vaultwarden is a lightweight community-developed server that can be self-hosted and used with compatible Bitwarden clients.
VERACRYPT: ADD AN EXTRA LAYER OF ENCRYPTION
A stolen laptop can become a serious privacy problem if sensitive files are left unprotected.
VeraCrypt is an open-source encryption program that can encrypt partitions, removable drives and other storage. It can also create encrypted virtual containers that appear like normal drives after they are unlocked.
The project began as a successor to TrueCrypt and introduced a number of security improvements. VeraCrypt supports modern password-based key-derivation options, including Argon2id for supported volumes.
Because its source code is publicly available, the software can be examined by security researchers and other members of the community.
It can be particularly useful for protecting sensitive documents stored locally. However, encryption does not protect a computer from every threat. Malware or an attacker who already has access to an unlocked system can still create serious security problems.
PORTMASTER: SEE WHAT YOUR APPS ARE CONNECTING TO
Windows includes its own firewall, but understanding which applications are communicating over the internet isn't always easy.
Portmaster provides more detailed network visibility and application-level controls. It can monitor network connections and allow users to create rules controlling which applications can communicate with particular destinations.
The open-source tool also provides privacy features such as tracker and malware blocking and supports encrypted DNS options, including DNS-over-TLS and DNS-over-HTTPS.
This can be useful when an application suddenly starts making connections in the background and the user wants more control over what is happening.
There is some learning involved, especially when applications require incoming connections. In those cases, additional rules may need to be created.
Portmaster should also be viewed as a network privacy and filtering tool rather than a replacement for dedicated antivirus protection.
WIN11DEBLOAT: CLEAN UP AN UNNECESSARY WINDOWS INSTALLATION
A fresh Windows installation can contain applications, recommendations, advertisements and other features that many users may never need.
Win11Debloat is an open-source PowerShell project designed to clean up Windows 10 and Windows 11 systems.
Depending on the options selected, it can remove unwanted pre-installed applications, reduce certain telemetry and tracking features, and clean up some advertisements, suggestions and interface elements.
Removing unnecessary applications and background activity can also reduce the amount of software running on the computer.
However, Win11Debloat is not an antivirus program or a firewall. It is primarily a Windows cleanup, customization and privacy tool. Because it changes system settings and can remove applications, users should review its options before applying them.
ERASER: MAKE SENSITIVE DELETIONS HARDER TO RECOVER
Deleting a file in Windows doesn't always mean that its underlying data immediately disappears from the storage device.
Eraser is an open-source Windows utility designed to make deleted information harder to recover by overwriting data using selected erasure methods.
It can be used with individual files and folders and can also be integrated into Windows' right-click menu. Scheduled erasure is another option for users who regularly need to remove sensitive information.
This can be useful when disposing of certain storage devices or removing sensitive files.
However, there is an important difference between traditional hard drives and modern SSDs. SSDs use technologies such as wear leveling, which means software-based overwriting cannot guarantee that every physical copy of old data has been destroyed.
FIVE TOOLS, FIVE DIFFERENT SECURITY JOBS
These applications don't all perform the same job, and they aren't replacements for Windows' built-in security features.
Bitwarden focuses on password security. VeraCrypt protects sensitive data through encryption. Portmaster provides greater control over network connections. Win11Debloat helps clean up unnecessary Windows components and privacy-related settings, while Eraser focuses on making deleted information harder to recover.
A strong Windows setup still requires regular security updates, strong unique passwords, appropriate account protection and reliable malware protection.
Used for what they are designed to do, these open-source tools can give a new Windows PC an additional layer of privacy, control and security without requiring a collection of expensive monthly subscriptions.
