Windows Security (formerly Windows Defender) automatically downloads the latest security intelligence updates to protect your computer against viruses, malware, ransomware, spyware, and other security threats. These updates, also known as security signatures or definitions, enable Microsoft Defender Antivirus to detect newly discovered threats and provide real-time protection.
Although Windows usually updates security signatures through Windows Update several times a day, there are situations where you may need to update them manually. For example, your device may not have an internet connection, Windows Update may not be working correctly, the antivirus definitions may be outdated, or you may simply want to ensure your system has the latest protection before running a scan.
Fortunately, Windows 11 provides several ways to manually update Microsoft Defender security signatures. You can update them directly from the Windows Security app, use PowerShell or Command Prompt commands, install definition updates through Windows Update, or download the latest security intelligence package from Microsoft.
This guide explains the best methods to manually update Windows Security signatures in Windows 11.
Why Manually Update Windows Security Signatures?
There are several reasons why you might want to manually update Microsoft Defender security intelligence.
Common reasons include:
- Windows Update isn’t working properly.
- Microsoft Defender definitions are outdated.
- You want the latest malware protection immediately.
- The computer was offline for an extended period.
- Windows Security reports old security intelligence.
- Antivirus scans aren’t detecting recent threats.
- You’re troubleshooting Windows Security issues.
- You want to update an offline computer.
Updating the latest signatures ensures Microsoft Defender can recognize newly discovered malware and security threats.
Method 1: Update Signatures from Windows Security
The easiest method is to manually check for updates from the Windows Security application.
Steps
- Open Start.
- Search for Windows Security and open it.
- Select Virus & threat protection.
- Under Virus & threat protection updates, click Protection updates.
- Click Check for updates.
- Wait while Windows downloads the latest security intelligence.
- Once completed, verify that the Security intelligence version and update date have changed.
If updates are available, Windows installs them immediately without requiring a restart.
Method 2: Update Security Signatures Using PowerShell
PowerShell includes a built-in Microsoft Defender command that checks for the latest security intelligence updates.
Steps
- Right-click the Start button.
- Select Terminal (Admin) or Windows PowerShell (Admin).
- Run the following command:
Update-MpSignature
- Wait for the process to complete.
- Close PowerShell.
If newer definitions are available, Microsoft Defender downloads and installs them automatically.
Method 3: Update Signatures Using Command Prompt
You can also trigger a manual definition update using the Microsoft Defender command-line utility.
Steps
- Open Command Prompt as Administrator.
- Run the following command:
"%ProgramFiles%\Windows Defender\MpCmdRun.exe" -SignatureUpdate
- Wait until the update finishes.
- Restart Windows if prompted.
The tool connects to Microsoft’s update servers and downloads the latest available security intelligence.
Method 4: Update Windows Through Windows Update
Security intelligence updates are also delivered through Windows Update.
Steps
- Open Settings.
- Select Windows Update.
- Click Check for updates.
- Install any available updates.
- Restart your computer if required.
This method also installs cumulative updates and other Microsoft security fixes along with Defender definitions.
Method 5: Download Security Intelligence Updates Manually
If your computer cannot access Windows Update, Microsoft provides standalone security intelligence packages that can be installed manually.
Steps
- Download the latest Microsoft Defender Security Intelligence package that matches your system architecture (64-bit or 32-bit).
- Save the file to your computer.
- Double-click the downloaded installer.
- Follow the on-screen instructions.
- Restart Windows if prompted.
This method is particularly useful for offline computers or systems with Windows Update issues.
Method 6: Verify the Installed Security Intelligence Version
After updating, it’s a good idea to confirm that Microsoft Defender is using the latest signatures.
Steps
- Open Windows Security.
- Go to Virus & threat protection.
- Click Protection updates.
- Review the following information:
- Security intelligence version
- Engine version
- Platform version
- Last update date and time
If the update date is recent, your system is using the latest available security intelligence.
Method 7: Force Microsoft Defender to Redownload Signatures
If updates repeatedly fail or the installed definitions appear corrupted, you can remove the existing signatures and force Microsoft Defender to download fresh copies.
Steps
- Open Command Prompt as Administrator.
- Run the following command to remove the current definitions:
"%ProgramFiles%\Windows Defender\MpCmdRun.exe" -RemoveDefinitions -All
- After the process finishes, run:
"%ProgramFiles%\Windows Defender\MpCmdRun.exe" -SignatureUpdate
- Wait for the new security intelligence files to download.
- Restart your computer.
This method is useful when definition updates become corrupted or fail repeatedly.
Method 8: Check Microsoft Defender Service Status
Microsoft Defender services must be running for signature updates to work properly.
Steps
- Press Windows + R.
- Type services.msc and press Enter.
- Locate Microsoft Defender Antivirus Service.
- Ensure the service status is Running.
- If it isn’t running, right-click it and select Start.
- Close the Services window and try updating again.
Method 9: Run Microsoft Defender Antivirus Scan After Updating
Once you’ve installed the latest security intelligence, it’s a good practice to perform a full system scan to detect any newly recognized threats.
Steps
- Open Windows Security.
- Click Virus & threat protection.
- Select Scan options.
- Choose Full scan.
- Click Scan now.
- Wait for the scan to complete.
Running a scan immediately after updating ensures your computer is checked using the latest malware definitions.
Conclusion
Keeping Microsoft Defender security signatures up to date is essential for protecting your Windows 11 computer against the latest malware, ransomware, viruses, and other emerging threats. While Windows normally updates these definitions automatically, manual updates are useful when Windows Update isn’t functioning correctly, your device has been offline, or you want immediate access to the latest security intelligence.
Whether you choose to update through Windows Security, PowerShell, Command Prompt, Windows Update, or by installing Microsoft’s standalone definition package, each method ensures Microsoft Defender has the most recent threat information. Regularly updating your security intelligence and performing periodic system scans helps maintain the highest level of protection for your PC.
Frequently Asked Questions
What are Windows Security signatures?
Windows Security signatures, also called security intelligence or virus definitions, are files that allow Microsoft Defender Antivirus to identify and block the latest malware and security threats.
How often does Microsoft Defender update its signatures?
Microsoft Defender typically receives security intelligence updates multiple times each day through Windows Update and Microsoft security services.
Can I update Microsoft Defender without Windows Update?
Yes. You can manually update Microsoft Defender using Windows Security, PowerShell, Command Prompt, or by downloading Microsoft’s standalone security intelligence package.
Do I need to restart my PC after updating security signatures?
Usually, no restart is required. However, if Windows installs additional security components or platform updates alongside the definitions, restarting your computer may be recommended.



