An integrated threat protection solution designed to detect, investigate, and respond to cyber threats across Microsoft 365 services.
On mobile devices, Microsoft Defender web protection can be blocked by system settings or management policies. The fix depends on whether this is a personal mobile device or a work-managed Android device.
1. If using Microsoft Defender on Android (personal/home use)
On some Android devices, web protection turns off or cannot stay on because battery optimization stops Defender and removes its accessibility permission.
To keep web protection enabled:
- Open the device Settings app.
- Turn off battery optimizations for Defender:
- Find Battery (or Battery & device care).
- Turn off Power saving / Battery Saver / Adaptive Battery features that restrict apps.
- If the device lets specific apps be excluded from optimization, set Microsoft Defender to Unrestricted or Don’t optimize.
- Allow Defender to run in the background:
- In Settings > Apps > Microsoft Defender (or long-press Defender and choose App info).
- Ensure options like App battery usage or Battery are set to Unrestricted / No restrictions.
- Turn off options such as Pause activity if unused or Remove permissions if app is unused.
- Reopen the Microsoft Defender app and follow the prompt on the Device protection / web protection alert card to turn web protection on again.
If web protection still turns off, check the device-specific guidance (Samsung, Pixel, OnePlus/Oppo, Xiaomi, Huawei, Motorola, Vivo, Lenovo, RealMe) in the referenced article and apply the matching steps for that brand.
2. If using Microsoft Defender on iOS (home use)
On iOS, Defender web protection relies on a local VPN and notifications:
- Ensure Microsoft Defender is installed and signed in with the Microsoft 365 account.
- When prompted in Defender, allow it to:
- Set up a local VPN.
- Show notifications.
- If web protection won’t turn on, open iOS Settings > VPN & Device Management (or VPN):
- Make sure the Defender local VPN profile is present and allowed.
- If notifications were previously blocked, go to Settings > Notifications > Microsoft Defender and enable notifications.
Defender will still block dangerous pages even if notifications are off, but there will be no on-screen explanation.
3. If using a work-managed Android device (Intune / Defender for Endpoint)
For Android Enterprise personally owned work profile devices managed by Intune, web protection can be centrally disabled:
- An Intune app configuration profile for Defender for Endpoint may set the Anti-Phishing and VPN configuration keys to
0, which disables web protection. - If web protection cannot be turned on from the device, contact the organization’s IT admin and ask them to verify in the Intune admin center that:
- Platform: Android Enterprise, Profile type: Personally-Owned Work Profile Only.
- For the Defender app configuration, Anti-Phishing and VPN values are set to
1(enabled) and match each other.
If the organization has also configured Auto Setup of Always-on VPN, web protection cannot be disabled for that work profile.
References: