In a new blog post, Microsoft has announced that starting in October 2026, “Memory Integrity Protection” will become enabled on more eligible devices. The feature, which is already enabled by default on most modern Windows PCs, is a kernel-level security feature designed to protect PCs from “sophisticated attacks with little or no additional configuration.”
“Built on Virtualization-based Security (VBS), memory integrity helps protect critical parts of Windows from tampering,” Microsoft says. “It forms a foundation for modern security innovations such as hotpatch updates that improve user experience and productivity, as well as protection.“
The company says that memory integrity protection will begin being enabled by default on eligible PCs starting next month, enhancing security with no additional setup required. “Windows quality updates will begin enabling memory integrity protection on eligible devices. If not already enabled, these updates will also enable VBS, helping make additional security capabilities available”
Of course, users still have control over whether they want memory integrity protection enabled. Most Windows PCs today come with it enabled by default already, but the user is able to control whether it is turned on or off. If you’ve already manually disabled memory integrity protection, it won’t be automatically enabled next month.
“To help ensure a reliable device experience, Windows automatically evaluates readiness before enabling memory integrity.”
The automatic rollout will only really apply to older PCs that never had it enabled to begin with. For those users, this will be an invisible change that makes your PC more secure. “Memory integrity helps make this possible by allowing only trusted kernel-mode code and drivers to run.”
Microsoft has been working to make Windows 11 more secure while also reducing the frequency and annoyances of Windows Update. In recent months, the company has announced a complete overhaul to the Windows Update system, reducing how often it prompts users to restart to just once a month.
With features like hotpatch on commercial editions of Windows, Microsoft is now also able to update the OS on the fly without restarting the OS. While hotpatching isn’t yet available on Windows 11 Home or Pro, it’s something that we would love to see on consumer editions of Windows in the future too.
Join us on Reddit at r/WindowsCentral to share your insights and discuss our latest news, reviews, and more.
