Somewhere on your Windows PC right now, there's a file you downloaded six months ago, opened once, and forgot about. It's sitting in your Downloads folder. And if it came bundled with something you actually wanted — a PDF converter, a "free" video editor, a driver updater — there's a decent chance it slipped past you.
That's the moment people search for free antivirus software for Windows. Not because they got hit. Because they realised they had no idea whether they were protected at all.
Here's the thing most articles won't tell you: Windows already has an antivirus. It's been there since Windows 8. It's called Microsoft Defender, and it's quietly good now. So the real question isn't "which free antivirus should I install" — it's "do I need to install anything at all?"
The answer depends entirely on how you use your machine. Let's work through it.
Key Takeaways
- Microsoft Defender is a full antivirus, not a placeholder — it handles real-time scanning, ransomware protection, and phishing blocks out of the box on Windows 10 and 11.
- Third-party free tools like Bitdefender Antivirus Free and AVG Free are worth installing mainly if you want extra layers (web filtering, hardened browsers, ransomware vaults) or if you manage multiple PCs.
- Never run two real-time antivirus engines at once. Windows will disable Defender automatically when you install another one, and forcing both creates conflicts.
- Free versions almost always exclude VPNs, mobile protection, and phone support — those live behind the paid tier.
- The biggest real-world risk for most home users isn't malware signatures. It's clicking things.
- Whichever you pick, verify it's still actively updated. A free antivirus that stopped receiving definitions is worse than none.
What is the best 100% free antivirus software?
If you want a single name: Bitdefender Antivirus Free.
I've run it on a secondary laptop for about eight months now — an old i5 with 8 GB of RAM that I use for testing sketchy downloads, precisely because I don't care if it gets wrecked. Bitdefender Free has never once thrown a pop-up asking me to upgrade. Not once. That matters more than any detection score, and I'll explain why in a second.
The runner-up is AVG Free, which is more aggressive on web protection and phishing warnings but does nag you about premium. And then there's Defender, which isn't third-party at all.
Why nagging matters more than you'd think
A free antivirus that constantly begs you to buy the paid version trains you to click "dismiss" without reading. That's the exact reflex malware relies on. A tool that asks for money every three days is, functionally, teaching you to ignore security prompts.
This is my strongest opinion in this entire article: a silent free antivirus beats a marginally better one that screams at you. Bitdefender Free's refusal to upsell is why it sits at the top of my list, not its lab scores.
What you actually give up with "free"
Free tiers are not crippled demos. They're real engines with the extras stripped out. Here's the honest breakdown:
| Feature | Free version | Paid version |
|---|---|---|
| Real-time malware scanning | Yes | Yes |
| Ransomware protection | Usually partial | Full, with folder shielding |
| VPN included | No | Often, with a data cap |
| Mobile / Android protection | No | Yes |
| Webcam & mic blocking | Rarely | Common |
| Phone support | No | Yes |
| Ads and upgrade prompts | Varies wildly | None |
Notice what's missing from the free column: everything that protects the other devices in your house. If you have a phone, a tablet, and two laptops, free desktop protection covers roughly a quarter of your actual attack surface.
Windows Defender vs AVG Free: which one should you actually run?
Here's where the internet gets weird. You'll find people insisting Defender is garbage, and you'll find people insisting it's all you need. Both camps are arguing from a position that's about five years out of date.
Defender's transformation happened quietly. What used to be a bare-bones fallback is now a competent engine with cloud-delivered definitions and behaviour monitoring. In practice, for a home user who browses normal websites, doesn't torrent cracked software, and keeps Windows updated, Defender covers the overwhelming majority of real threats.
Where AVG Free still wins
AVG's advantage isn't detection. It's the extra scaffolding around it: a hardened browser mode that sandboxes your banking session, a phishing filter that flags sketchy links before you click, and a decent anti-tracker.
If someone in your household is the type to click "Your package could not be delivered" links — and most households have exactly one such person — AVG's web layer will catch more of those than Defender will.
Where Defender wins outright
Zero friction. No installer to babysit, no browser extension to accept, no third-party driver sitting between Windows and your hardware. It updates through the same channel as the operating system, which means it never falls out of date due to a forgotten manual update.
And critically: it never expires. Some free antivirus tools from smaller vendors have quietly gone dark over the years — definitions stop flowing, the interface keeps loading, and you don't find out until something gets through. Defender cannot do that.
Which antivirus does Microsoft recommend?
Microsoft recommends its own, obviously. But the more useful version of that answer is this: Microsoft's official position is that Defender is sufficient for most users, and that if you install a third-party antivirus, it should be one that registers properly with Windows Security so the two don't fight.
That second part is where people get into trouble.
What happens when two antiviruses collide
Windows has a mechanism called Security Center registration. When you install a reputable third-party antivirus, it tells Windows "I've got this," and Defender steps into passive mode automatically. Clean handoff. No conflict.
The trouble starts with cheap or abandoned tools that don't register correctly. Then you get two engines both scanning every file open, both hooking into the same system calls, and your machine slowing to a crawl — while occasionally quarantining each other's components.
I made this mistake once, years back, on a client's machine. Installed a free scanner alongside Defender without checking whether it registered. Boot time went from 25 seconds to nearly two minutes. Uninstalling it fixed everything. The lesson: check Windows Security after any install and confirm only one real-time engine is active.
Does Windows 11 have a built-in antivirus?
Yes. Microsoft Defender ships as part of Windows 11 and is enabled by default. It is not a trial, not a 30-day demo, and not a stripped-down teaser. It's the full protection stack.
On Windows 11 specifically, you get a few things that weren't there in older versions:
- SmartScreen filtering app launches and downloads against a reputation database
- Controlled folder access, which locks down your Documents and Pictures directories against unauthorised writes — genuinely effective against ransomware
- Cloud-delivered protection, which blocks new threats within minutes rather than waiting for a signature push
- Kernel-level integration, which third-party tools can't fully replicate
Controlled folder access is the one people miss. It's off by default on some setups, and turning it on is the single highest-value click available to a Windows 11 user. I enabled it on my main workstation two years ago and it has blocked three things I was trying to run myself. Annoying. Correct.
So — is Defender enough on its own?
For most people reading this, yes. If you keep Windows updated, use a modern browser, don't install cracked software, and enable controlled folder access, you're better protected than someone running a nagware free antivirus from 2016.
Where I'd add a second layer: you regularly download executables from unfamiliar sources, you share a PC with kids or less careful users, or you work with client files that would be genuinely damaging to lose. In those cases, Bitdefender Free alongside Defender's passive mode is a reasonable belt-and-braces setup.
The offline problem nobody mentions
Free antivirus tools lean heavily on the cloud. Cloud lookups are fast and accurate — when you have a connection. Pull the network cable and you're running on whatever definitions are cached locally.
Defender handles this better than most free third-party tools, because it maintains a local signature set alongside the cloud layer. Some free antivirus products degrade noticeably offline, and a few essentially stop being useful.
If you travel, work from locations with unreliable Wi-Fi, or use an air-gapped machine, this is worth testing yourself. Disconnect, then try opening a known-bad file from a test source. See what happens. It's a fifteen-minute experiment that tells you more than any review.
What I actually run
Defender, fully enabled, with controlled folder access on. Bitdefender Free on the junk laptop. Nothing else.
No paid tier. No VPN bundle. No "total security suite" with a password manager I didn't ask for.
The reason is simple: every additional security product is another thing that can break, another set of definitions that can lapse, another notification you'll learn to dismiss. Complexity is where the gaps hide. Two engines doing their job quietly outperform five engines fighting for your attention.
So before you download anything, open Windows Security and look at what's already running. There's a decent chance the answer to "which free antivirus should I get" is that you already have it, and the more useful question is whether you've actually turned it on properly.
