Windows 11 BIOS UEFI Settings: How to Open Them Safely

Sooner or later most Windows users need the firmware setup screen: to boot from a USB stick, switch on Secure Boot or TPM for Windows 11, enable virtualization for WSL or Hyper-V, or check that a new drive is detected. This guide covers Windows 11 BIOS UEFI settings: how to open them from inside Windows (no key-mashing required), how to reach them when Windows will not start, what is safe to change, and why the UEFI option sometimes does not appear.

The Windows side of these steps is the same on Windows 11 version 24H2, 25H2 and 26H2. The firmware screens themselves are made by your PC or motherboard maker, so they look different on every brand.

BIOS or UEFI: what is the difference?

Modern PCs use UEFI firmware, the successor to the old BIOS. People still say “BIOS” for both, and many makers label the screen “BIOS setup” even though it is UEFI. Windows 11 requires UEFI with Secure Boot capability, so if your PC runs Windows 11 it almost certainly has UEFI firmware, even if it looks like an old blue BIOS screen.

The firmware runs before Windows loads. It checks the hardware, decides which drive to start from, and holds settings such as Secure Boot, the TPM and CPU virtualization.

Method 1: Open UEFI settings from Windows

This is the most reliable way on modern PCs, especially laptops with fast startup where there is barely time to press a key.

1. Open Settings > System > Recovery.
2. Next to Advanced startup, select Restart now. Save your work first; the PC restarts immediately after you confirm.
3. On the blue Choose an option screen, select Troubleshoot > Advanced options.
4. Select UEFI Firmware Settings, then Restart.

Microsoft describes this option as restarting the device into the UEFI firmware settings screen, where you can configure hardware settings such as boot order, Secure Boot and other system-level options.

Method 2: From the sign-in screen or when Windows will not start

• Sign-in screen: hold Shift and select Power > Restart. This opens the same Choose an option screen.
• Windows fails to start: Microsoft says Windows enters the recovery environment automatically after it fails to start correctly several times. From there, use Troubleshoot > Advanced options as above. Our guide to the Windows 11 boot loop covers what to do next.
• Recovery drive or installation USB: booting from a Windows 11 recovery drive takes you straight to the recovery environment; from installation media, choose Repair my PC.

If the PC is encrypted, Microsoft notes you will need the BitLocker recovery key for some recovery tools. Find it before you start: see BitLocker recovery key.

Method 3: The startup key

Every maker has a key to press immediately after power-on, one for firmware setup and often a different one for a one-time boot menu. Microsoft’s Windows 11 download page mentions keys such as F2, F12, Delete or Esc for the boot menu. The exact key depends on the brand and model, so check the PC’s manual or the maker’s support site rather than guessing.

Tips: shut down fully (not restart) first, then press the key repeatedly as soon as you press the power button. If fast startup makes this impossible, use Method 1, or turn off fast startup.

Before you change anything

A few minutes of preparation avoid most firmware mishaps:

1. Write down why you are going in, for example “turn on TPM” or “boot from USB once”, and change only that.
2. Find your BitLocker recovery key if the drive is encrypted, as security-related changes can trigger a key prompt.
3. Plug in laptops so the battery cannot run out mid-change.
4. Take a photo of each screen you change, so you can put values back exactly.

What is safe to change

Setting	Why you might change it	Safe?
Boot order / boot menu	Start from a USB installer or a new drive	Yes; change it back afterwards
Secure Boot	Required for Windows 11 and some games’ anti-cheat	Yes, if Windows is installed in UEFI mode; see enable Secure Boot
TPM (Intel PTT, AMD fTPM)	Required for Windows 11 and BitLocker	Yes; see enable TPM 2.0
Virtualization (Intel VT-x, AMD SVM)	Needed for WSL 2, Hyper-V, Windows Sandbox and Memory integrity	Yes
Date and time	Fix a reset clock after a battery change	Yes
CSM / legacy boot	Old operating systems only	Avoid; switching can stop Windows starting
Voltages, memory timings, overclocking	Performance tuning	Only if you know exactly what you are doing

Make one change at a time and note the old value, ideally with a phone photo of the screen. Then use the firmware’s Save and Exit option.

Why UEFI Firmware Settings is missing

If the Advanced options screen has no UEFI Firmware Settings entry:

• Windows is installed in legacy BIOS (CSM) mode. The option only appears on UEFI installs. Check in System Information (msinfo32): BIOS Mode should say UEFI. Converting a legacy install is a bigger job; our Secure Boot guide explains the risks before you try.
• The firmware does not support the shortcut. Some older boards do not. Use the startup key instead.
• A fast boot setting in the firmware is skipping input. Use the recovery route, or a one-time boot menu, to get in.

If something goes wrong after a change

• The PC will not start Windows: enter firmware setup again and undo your last change. Most firmware also has Load Setup Defaults or Load Optimized Defaults; loading defaults is the standard way back to a known state.
• Windows asks for a BitLocker recovery key: that is expected after Secure Boot or TPM changes on encrypted PCs. Enter the key, then Windows starts normally.
• The PC starts but runs oddly: check that the firmware is up to date. Firmware updates come only from your PC or motherboard maker’s website or support app; never use a file from anywhere else, and keep the PC on mains power during the update.

If a PC shows nothing at all on screen at power-on, the problem is before the firmware; start with Windows 11 won’t turn on.