How to Disable Secure Boot on Your PC or Laptop

Secure Boot is one of those settings that most users never think about — until they suddenly need to turn it off. Whether you're installing Linux, running an older operating system, or troubleshooting a boot error, disabling Secure Boot is a common task that lives inside your system's firmware settings. Here's what it actually is, why you might need to disable it, and how the process works across different setups.

What Is Secure Boot and What Does It Actually Do?

Secure Boot is a security standard built into the UEFI firmware (the modern replacement for BIOS) on most PCs and laptops made after 2012. Its job is to verify that only software with a trusted digital signature is allowed to run during the boot process.

When your computer starts, Secure Boot checks the bootloader — the small program that loads your operating system — against a database of approved signatures. If the signature matches, the system boots normally. If it doesn't, the system blocks the boot and throws an error.

This protects against a specific category of threat: bootkits and rootkits, which are malware that embed themselves at the firmware level before your OS even loads. Secure Boot makes it significantly harder for malicious software to hijack your machine at startup.

The tradeoff is that Secure Boot is picky. It only trusts what it's been configured to trust — typically Microsoft-signed bootloaders and a handful of other certified software. Anything outside that list gets blocked, even if it's completely legitimate.

Why Would You Need to Disable It? 🤔

There are several legitimate reasons to turn Secure Boot off:

• Installing Linux distributions that don't have Secure Boot signatures (many do now, but not all)
• Running older operating systems like Windows 7 or earlier versions of Windows 10
• Using certain virtualization tools that require low-level hardware access
• Resolving boot errors caused by unsigned drivers or firmware conflicts
• Installing custom bootloaders for dual-boot setups or recovery environments
• Using specific hardware peripherals with unsigned firmware

It's worth noting that Windows 11 requires Secure Boot to be enabled as part of its hardware compatibility requirements. If you disable it on a Windows 11 machine, you can still run the OS — it won't stop working — but you may lose eligibility for certain updates or features depending on how your system is configured.

Where to Find the Secure Boot Setting

Secure Boot lives in your UEFI firmware settings, commonly still called the BIOS by most people. You won't find it in Windows Settings or the Control Panel — you need to access it before Windows loads.

How to get there:

The most common method on Windows 10/11 is through Advanced Startup:

1. Open Settings → System → Recovery
2. Click Restart now under "Advanced startup"
3. When the blue menu appears, go to Troubleshoot → Advanced Options → UEFI Firmware Settings
4. Click Restart — your system will boot directly into UEFI

Alternatively, you can access UEFI by pressing a key immediately after powering on your machine. The key varies by manufacturer:

Timing matters here — you usually have less than two seconds to press the key before the OS starts loading.

How to Disable Secure Boot Once You're in UEFI ⚙️

Once inside the UEFI interface, the exact layout depends entirely on your motherboard manufacturer. There's no single universal menu structure. That said, Secure Boot is almost always found in one of these sections:

• Boot tab
• Security tab
• Authentication tab
• Advanced settings

Look for an option labeled "Secure Boot" with a toggle or dropdown set to Enabled. Change it to Disabled.

Some systems require an additional step: clearing Secure Boot keys or switching the system from "Standard" to "Custom" mode before the option becomes available to toggle. If your Secure Boot option is grayed out, this is usually why.

After making the change:

Save your settings (typically F10, or look for a "Save & Exit" option) and reboot. Your system will now boot without Secure Boot enforcement.

The Variables That Change How This Works

Not every machine behaves the same way, and a few factors significantly affect your experience:

Firmware version and interface design — Older UEFI versions may label things differently or bury settings deeper in menus. Newer firmware on gaming motherboards often has a graphical interface with a dedicated Security tab front and center.

OEM vs. custom-built systems — Laptops and pre-built desktops from manufacturers like Dell, HP, and Lenovo sometimes lock down UEFI settings with an administrator password. If you don't know that password, you may not be able to access the Secure Boot toggle at all without a reset process.

Windows 11 requirements — Disabling Secure Boot on a Windows 11 machine can affect TPM-dependent features, BitLocker encryption behavior, and potentially your machine's Windows Update eligibility. The impact depends on how your specific system is configured and whether BitLocker is active.

Linux compatibility — Many major Linux distributions (Ubuntu, Fedora, Linux Mint) now support Secure Boot natively through Microsoft's signing program, meaning you may not need to disable it at all. Smaller or more specialized distros often still require it to be off. 🐧

Re-enabling it — Turning Secure Boot back on after using an unsigned bootloader isn't always seamless. You may need to manually restore default Secure Boot keys through the UEFI settings if the process cleared them.

The Part That Depends on Your Setup

The steps above give you the general map — but the actual path through your UEFI, the consequences for your specific OS, and whether disabling Secure Boot even solves your problem all hinge on details specific to your machine. A gaming desktop with a custom motherboard behaves very differently from a corporate-managed laptop or a consumer notebook from a major OEM. What your firmware looks like, what operating systems you're running, and whether BitLocker or other security tools are in play shapes what "disabling Secure Boot" actually means for your situation.