How to secure Windows 7 after End of Support 2025

Windows 7 support will officially end on January 14, 2020, and this popular operating system will no longer receive updates. Microsoft will not deploy any security or feature updates to the ten-year-old operating system. Microsoft has asked Windows 7 users to upgrade. But if you want to continue using Windows 7, this message is for you. There can be many reasons why you want to stay, which also means that the operating system is now open to any security vulnerability. The persistent threat on an old unprotected operating system is now even greater today, especially with Ransomware in the picture. In this article, we will suggest the steps you can take to protect and Windows 7 secure after the end of the support.

How many users are still using Windows 7?

Windows 7 users still account for around 30%, and that a lot of users! It will be almost impossible for them to stay safe if they continue to connect to the Internet. This figure tells us why Microsoft deployed Windows 7 Extended Security Updates because they don't want the company to say unattended.

Secure Windows 7 after support ends

While we recommend upgrading to Windows 10, some home or business users may not want to invest in purchasing a new license, as doing so could result in a hardware upgrade. For many, this is also a software upgrade problem. It won't be easy, but one day you will have to update. Here are some steps a Windows 7 user could take to minimize the risks and mitigate their potential security concerns.

Use a standard user account
Subscribe to extended security updates
Use good Total Internet Security software
Switch to another web browser
Use alternative software instead of built-in software
Keep your installed software up to date
Use additional antivirus on demand
Make Windows 7 more secure by changing it
Take backups regularly religiously
Use strong passwords
Beware of what you download from the Internet and by email
Enable Show file extension
Activate BitLocker
Prescan before connecting a USB drive
Use secure DNS
Take Windows 7 offline.

Let's examine this in detail.

1) Use a standard user account

Never use an administrator account. You must create and use a standard user account for your daily use. In this scenario, malware may not be able to modify a system file, it will be much safer. If you need to change anything, go to the administrator account and make the changes. If you want to continue using the Admin account, increase the UAC bar to the maximum. You can choose to "Always notify" for maximum security.

2) Subscribe to security updates

Microsoft offers paid subscriptions for Windows 7 Enterprise users. Its called Windows 7 Extended Security Updates, where Microsoft will continue to fix security bugs for the next three years. The company will have to buy the package every year because it will keep getting expensive. However, if you are finally moving to Windows 10 and want to spend the next three years testing and educating your employees, this is a great way to get going.

Windows 7 Enterprise: it will cost you $ 25 per user for the first, $ 50 for the second and $ 100 for the third year
Windows 7 Pro: the cost is double compared to Windows 7 Enterprise, $ 50, $ 100 and $ 200

The program is open to all users, not just companies.

Another option suitable for Windows 7 users is to opt for Windows Virtual Desktop. Since you will need to upgrade your hardware in the future, you can upgrade to the cloud version. You will have to pay per user, but this will also include free extended security updates for Windows 7.

3) Use good Total Internet Security software

Unlike Windows XP, Microsoft has promised to continue to update virus signatures for Microsoft Security Essentials. It is a free antivirus solution from Microsoft. However, this may not be enough, so I recommend that you purchase a total security solution that still offers support for Windows 7 users.

A firewall can block threats that your antivirus may be missing. Not only that, it can prevent hackers from entering your computer! Since Microsoft will stop updating Windows XP components, its firewall will also remain uncorrected. It will therefore be imperative that you also install a good firewall, apart from the antivirus software. While you can still use free antivirus software and free firewall software, I recommend that you install a free but fully integrated Internet security suite, which could offer multi-layered protection. Kaspersky, BitDefender, Malwarebytes are some of the good paid options.

4) Use additional antivirus on demand

There may be moments of doubt, where you may want a second opinion. At these times, you can use these antivirus scanners on demand. In fact, make sure to use it at least once a week.

5) Strengthen Windows 7 security by modifying it

You can also use our free portable UWT for Windows 7 to tighten security settings.

XP-AntiSpy is a small utility that lets you disable certain built-in features and make Windows 7 more secure.

XPY is another such tool. Check them out and use one to easily disable features like Remote Desktop, etc. They work on Windows 7.

6) Switch to another web browser

You should consider using another browser like Firefox or Chrome. This will be difficult as most browsers will stop supporting their browser for Windows 7. You can download the browser, and it might work, but don't be surprised if the updates stop someday.

7) Use alternative software instead of integrated software

Since Microsoft will not be rolling out software updates, it's a good idea to start looking for an alternative. We already have a list for:

Here is a full list of free Windows software that you can check out.

8) Keep your installed software up to date

A software update checker will scan your computer for installed software. This will protect you from the vulnerabilities of this software. Run their scans regularly and make sure all of your installed software is up to date.

9) Take regular religious backups

If you are connected to the Internet, prepare to be locked by a ransomware or a virus, which takes all your data. You have to back up all the computer data and you have to do it every day. There are tons of backup software available that can take backup and restore for free. Windows 7 also offers a built-in backup and restore tool, using which you can schedule a daily return to external storage.

I also recommend that you back up any drivers installed on Windows. OEMs will soon begin removing all Windows 7 drivers from their websites.

10) use strong passwords

Again, if you are a single user, you can deactivate your user account password to save time. However, it can help others connect when you are not watching and steal your data. To secure a Windows PC, strong passwords are essential – be it the user account or when connecting to the Internet. Remember to lock the computer when you plan to leave it for a while. Press Windows key + L to lock your computer.

11) Be wary of what you download from the Internet and by email

This is a general warning and something that you should always pay attention to. Do not click on the download of attachments or on a file that you are asked to download without worry.

Although you can surely download attachments, you expect your friends, relatives and associates, but be very careful with the mail you can receive even from your friends. A little rule to remember in such scenarios: if in doubt – DON'T!

12) Enable Show file extension

We said that when Windows XP support ended, and we think so now too. It is always a good idea to keep the option to show activated file extensions. When the extensions are visible, you will quickly notice if it is not a regular format like .doc, .pdf, .txt, etc. This will help you see the real file extensions and thus make malware a little more difficult to disguise and gain access to your computer.

13) Activate BitLocker

If you've never used it before, it's time to use it now. Bitlocker can encrypt drive partitions or the entire drive, including the boot drive. It will generate a key which you will need to unlock data. So make sure it is noted somewhere.

14) Prescan before connecting a USB drive

An infected USB drive can infect the computer. It is a good idea to tighten or restrict what USB sticks can do when connected. I recommend that you always scan it first with your antivirus software to make sure it is free from the latest threats and then access the files there.

15) use a secure DNS

It is a great idea to use OpenDNS or CloudFlare to prevent your computer from visiting bad malicious websites. You can easily change the DNS or block adult websites. These DNS will also automatically block sites that can serve as spam and viruses.

16) Take Windows 7 offline

If you want to continue operating the system and you do not intend to connect to the Internet, keep it offline. Do not connect to the Internet. If you want to update anything, download it from another computer, scan it, and then log into Windows 7 to install it.

We hope these tips will help you to secure Windows 7 after the end of support. If you do something else, please share it here for the benefit of others.