Blog

Windows 11 includes built-in security features to protect your computer from threats. One of these features is Windows Security, which keeps a history of detected threats and actions taken.

Sometimes, this protection history can become cluttered or outdated, leading to confusion or issues with security notifications. Clearing the protection history can help you maintain a clean and updated security status.

This guide will walk you through the simple steps to clear your protection history in Windows 11. Following these steps can help resolve some common security issues and improve your PC’s overall performance.

Let’s get started with the easiest and safest methods first.

Quick Note Before You Begin

• Make sure you are logged in with an administrator account. Only admins can access and clear security history.
• Ensure Windows Security (also known as Windows Defender) is running without errors.
• Backing up important files is always a good idea before making system changes.
• Clearing protection history does not remove or affect real-time protection or quarantined files.

Step 1: Open Windows Security

The first step is to open the Windows Security app, which stores your protection history.

1. Click the Start button or press the Windows key on your keyboard.
2. Type Windows Security in the search bar.
3. Click on the Windows Security app from the search results to open it.

Opening Windows Security lets you access all the security settings and logs on your PC.

Step 2: Navigate to Virus & Threat Protection

Protection history is found under the Virus & Threat Protection section.

1. In the Windows Security window, look at the left-hand menu and select Virus & threat protection.
2. This section shows current and past security threats detected by Windows Defender.

Knowing where protection history is helps you review past threats and actions.

Step 3: Access Protection History

Now you need to view your protection history to clear it.

1. Within the Virus & threat protection page, scroll down until you find the Protection history link.
2. Click on Protection history to open a detailed list of security events.

This list shows detected threats, actions taken, and dates. It helps you understand what Windows Security has done recently.

Step 4: Clear Protection History

Windows 11 does not provide a direct “Clear All” button for protection history, but you can remove individual entries or clear quarantined threats. Here’s how:

Clear Quarantined Items

1. In the Protection history window, look for items marked as Quarantined or Allowed.
2. Click on a quarantined item to view more details.
3. If you confirm the item is safe or no longer needed, click Remove to delete it from quarantine.
4. Repeat for each quarantined item you want to remove.

Removing quarantined files helps free up space and prevents repeated alerts.

Remove History Using PowerShell (Advanced)

If you prefer to clear protection history completely, you can reset the Windows Defender event logs using PowerShell. This is recommended only for advanced users.

1. Press Windows key + X and select Windows Terminal (Admin) or PowerShell (Admin).
2. Type the following command and press Enter:

wevtutil cl Microsoft-Windows-Windows Defender/Operational

This command clears the Windows Defender event log, effectively removing all protection history records.

Note: This does not affect quarantined files or real-time protection.

Alternative Methods to Manage Protection History

• Use Third-Party Security Tools: Some antivirus programs provide their own history management options.
• Perform a System Cleanup: Tools like Disk Cleanup can remove temporary files that may include some security logs.
• Reset Windows Security Settings: If issues persist, resetting Windows Security can help restore default settings.

FAQs

Can I permanently delete all protection history in Windows 11?

Windows 11 doesn’t have a built-in option to delete all protection history at once via the GUI, but clearing event logs via PowerShell can achieve this.

Does clearing protection history remove quarantined files?

No, clearing history and removing quarantined files are separate actions. You must remove quarantined files manually if desired.

Will clearing protection history impact my PC’s security?

No, clearing history does not disable or affect real-time protection or virus scanning. It only clears past records.

Why should I clear protection history?

Clearing protection history can help resolve issues with repeated alerts, free up space, and keep your security dashboard organized.

Is it safe to use PowerShell commands for this?

Yes, but only if you run commands exactly as instructed and understand their impact. Always run PowerShell as an administrator.

When Nothing Works

If you encounter errors or cannot clear protection history, try the following:

• Restart your PC and try the steps again.
• Run the Windows Security Troubleshooter by going to Settings > System > Troubleshoot > Other troubleshooters.
• Check for Windows Updates to ensure your system is up to date.
• Visit the official Microsoft support page for Windows Security: Microsoft Security & Maintenance.

If problems persist, consider contacting Microsoft Support or a professional technician for further assistance.

Conclusion

Clearing your protection history in Windows 11 can help you maintain a clean and organized security environment. By following the steps above, you can safely remove outdated or unnecessary security logs and quarantined files.

Remember to use administrative privileges and proceed carefully, especially when using advanced methods like PowerShell. Keeping your protection history tidy not only improves system efficiency but also makes it easier to monitor your PC’s security status.

Regularly reviewing and managing your protection history is a simple but effective way to keep your Windows 11 device secure and running smoothly.