PowerShell: Check Secure Boot Status
Need a quick yes/no check for whether Secure Boot is enabled - relevant for Windows 11 compatibility or general firmware security verification? This one-liner reads it straight from the system.
Prerequisites:
- Privileges: Run as Administrator
- Module: Built-in, no import needed
Quick Command:
Confirm-SecureBootUEFIExample Output:
True
📦
Want all of them at once?
Get every free one-liner from this blog in a single downloadable bundle organized by category, each with full comment-based help. No more copy-pasting one at a time.
Get every free one-liner from this blog in a single downloadable bundle organized by category, each with full comment-based help. No more copy-pasting one at a time.
How It Works:
- Confirm-SecureBootUEFI checks whether Secure Boot is currently enabled on the system's UEFI firmware - it returns a simple True or False.
- Secure Boot is a UEFI firmware feature that only allows digitally signed, trusted operating systems and bootloaders to start - it blocks malware (like bootkits) that tries to load before Windows itself starts.
- Windows 11 requires Secure Boot to be enabled, alongside TPM 2.0, as part of its official hardware requirements.