Defender will not let me turn on web protection

Robert Newlin 0 Reputation points
2026-06-22T18:34:43.5233333+00:00

Microsoft Defender will not let me turn on web protection

Microsoft 365 and Office | Microsoft 365 Defender | For home | Windows
0 comments

2 answers

Sort by: Newest
Most helpful Newest Oldest
  1. John Jefferson Doyon 87,635 Reputation points Independent Advisor
    2026-06-22T19:13:24.7066667+00:00

    Hi, I'm John! I will help you with this.

    On Windows, Defender web protection usually depends on Microsoft Defender SmartScreen.

    In the meantime, if you haven’t already already:

    • Open Windows Security > App & browser control > Reputation-based protection settings.
    • Make sure these are turned on: Check apps and files, SmartScreen for Microsoft Edge, and Potentially unwanted app blocking
    • After that, restart the PC and open Microsoft Defender again.
    • Also check if you have another antivirus, VPN, or security app installed. Some of them can block or override Defender web protection.

    If issue persists, to narrow down the issue:

    1. May I ask, is the Web protection button greyed out, or does it show an error when you turn it on?
    2. Also, are you using Microsoft 365 Personal/Family, and is this a personal PC or a work/school-managed PC?

    Was this answer helpful?

    1 person found this answer helpful.

  2. AI answer

    2026-06-22T18:35:06.53+00:00

    On mobile devices, Microsoft Defender web protection can be blocked by system settings or management policies. The fix depends on whether this is a personal mobile device or a work-managed Android device.

    1. If using Microsoft Defender on Android (personal/home use)

    On some Android devices, web protection turns off or cannot stay on because battery optimization stops Defender and removes its accessibility permission.

    To keep web protection enabled:

    1. Open the device Settings app.
    2. Turn off battery optimizations for Defender:
      • Find Battery (or Battery & device care).
      • Turn off Power saving / Battery Saver / Adaptive Battery features that restrict apps.
      • If the device lets specific apps be excluded from optimization, set Microsoft Defender to Unrestricted or Don’t optimize.
    3. Allow Defender to run in the background:
      • In Settings > Apps > Microsoft Defender (or long-press Defender and choose App info).
      • Ensure options like App battery usage or Battery are set to Unrestricted / No restrictions.
      • Turn off options such as Pause activity if unused or Remove permissions if app is unused.
    4. Reopen the Microsoft Defender app and follow the prompt on the Device protection / web protection alert card to turn web protection on again.

    If web protection still turns off, check the device-specific guidance (Samsung, Pixel, OnePlus/Oppo, Xiaomi, Huawei, Motorola, Vivo, Lenovo, RealMe) in the referenced article and apply the matching steps for that brand.

    2. If using Microsoft Defender on iOS (home use)

    On iOS, Defender web protection relies on a local VPN and notifications:

    1. Ensure Microsoft Defender is installed and signed in with the Microsoft 365 account.
    2. When prompted in Defender, allow it to:
      • Set up a local VPN.
      • Show notifications.
    3. If web protection won’t turn on, open iOS Settings > VPN & Device Management (or VPN):
      • Make sure the Defender local VPN profile is present and allowed.
    4. If notifications were previously blocked, go to Settings > Notifications > Microsoft Defender and enable notifications.

    Defender will still block dangerous pages even if notifications are off, but there will be no on-screen explanation.

    3. If using a work-managed Android device (Intune / Defender for Endpoint)

    For Android Enterprise personally owned work profile devices managed by Intune, web protection can be centrally disabled:

    • An Intune app configuration profile for Defender for Endpoint may set the Anti-Phishing and VPN configuration keys to 0, which disables web protection.
    • If web protection cannot be turned on from the device, contact the organization’s IT admin and ask them to verify in the Intune admin center that:
      • Platform: Android Enterprise, Profile type: Personally-Owned Work Profile Only.
      • For the Defender app configuration, Anti-Phishing and VPN values are set to 1 (enabled) and match each other.

    If the organization has also configured Auto Setup of Always-on VPN, web protection cannot be disabled for that work profile.

    References:

    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.