Update Windows Security Signatures Manually Windows

Windows Security normally keeps its virus and threat definitions — officially called “security intelligence,” and still commonly known as signatures — up to date on its own. But if your PC has been offline for a while, Windows Update is stuck, or you just want to confirm your protection is current before a sensitive task, forcing a manual update takes less than a minute.

Quick answer: The fastest way to manually update Windows Security signatures is to open Windows Security > Virus & threat protection > Protection updates > Check for updates. If that doesn’t work, open PowerShell as administrator and run Update-MpSignature, which forces an immediate signature update directly from Microsoft’s servers.

Below are five ways to do this, from the simplest one-click method to offline installation for PCs without internet access.

What Are Windows Security Signatures?

Signatures — also called virus definitions or security intelligence updates — are the files Microsoft Defender Antivirus (built into Windows as Windows Security) uses to recognize known malware, viruses, and other threats. Microsoft releases these updates multiple times a day, and Windows normally downloads and installs them automatically in the background, separately from full Windows feature updates.

A manual update is worth doing when:

• Windows Security shows your protection as out of date
• Your PC has been offline or in storage for an extended period
• You’ve just restored your system from a backup or reinstalled Windows
• Automatic Windows Update isn’t working correctly for other reasons
• You’re preparing to open a file or connect a device you’re unsure about, and want the most current protection first

Check Your Current Signature Version First

Before updating, it’s worth confirming what version you’re currently running so you can tell whether the update actually changed anything.

1. Open Start, search for Windows Security, and open it
2. Select Virus & threat protection
3. Under Virus & threat protection updates, note the Security intelligence version and the date of the last update

Method Comparison

Method 1: Update Through the Windows Security App

This is the simplest method and the right starting point for most people.

1. Press the Windows key, type “Windows Security”, and press Enter
2. Select Virus & threat protection
3. Scroll down to Virus & threat protection updates and select Protection updates
4. Select Check for updates
5. Wait for Windows to download and install any available update — this usually takes well under a minute on a normal internet connection

Method 2: Update Using PowerShell

This method is faster to trigger than opening the full Windows Security app, and it’s useful if you’re already working in a terminal window.

1. Press Start, search for PowerShell (or Terminal), right-click it, and select Run as administrator
2. Approve the User Account Control prompt if it appears
3. Run the following command:

Update-MpSignature

4. Let the command finish completely before closing the window

If you specifically want to force the update to come from Microsoft’s update servers rather than another configured source (relevant mainly on managed or business networks), you can specify the source directly:

Update-MpSignature -UpdateSource MicrosoftUpdateServer

To confirm the update applied, run Get-MpComputerStatus afterward and check the antivirus signature version and last updated timestamp in the results.

Method 3: Update Using Command Prompt (When the App Won’t Open)

If Windows Security itself is unresponsive or won’t launch, this method updates signatures directly without needing the app’s interface at all.

1. Open Command Prompt as administrator
2. Navigate to the Windows Defender folder by running:

cd "%ProgramFiles%\Windows Defender"

On newer Windows 11 builds, the platform files may instead be located under:

cd "%ProgramData%\Microsoft\Windows Defender\Platform\*"

3. Run the update command:

MpCmdRun.exe -SignatureUpdate

4. Watch the terminal for progress and confirmation that the update completed

This same command can also be run directly from the Run dialog (Windows key + R) by typing the full path and command in one line, which is a fast shortcut if you don’t need a full Command Prompt window open.

Method 4: Download and Install Signatures Manually (Best for Offline PCs)

This method is specifically designed for air-gapped or offline systems that can’t reach Microsoft’s servers directly — a common situation for secure business environments or PCs being set up before their first internet connection.

1. On a separate device that does have internet access, go to Microsoft’s official Defender updates page (search “Microsoft Defender updates” to find the current official link, since it’s occasionally reorganized)
2. Select the antimalware platform matching your system — typically “Microsoft Defender Antivirus for Windows 11, Windows 10, Windows 8.1, and Windows Server”
3. Choose the correct architecture (32-bit or 64-bit) matching your target PC
4. Download the installer file and transfer it to the offline PC using a USB drive
5. On the offline PC, run the downloaded file and wait for installation to complete

Method 5: Update Through Windows Update

Since security intelligence updates for Microsoft Defender are sometimes bundled alongside other Windows Update packages, checking Windows Update directly can pick up a signature update along with anything else pending.

Windows 11:

1. Open Settings > Windows Update
2. Select Check for updates
3. Install any listed Security Intelligence Update for Microsoft Defender Antivirus, along with any other available updates

Windows 10:

1. Open Settings > Update & Security > Windows Update
2. Select Check for updates
3. Install any Defender security intelligence update shown in the list

If Windows Update itself is stuck or failing entirely, that’s worth resolving on its own, since a broken Windows Update component can block both system patches and antivirus signature updates at the same time.

Common Problems and How to Fix Them

“Check for Updates” Button Does Nothing

1. Confirm you have an active internet connection
2. Try the PowerShell method instead, since it sometimes succeeds even when the app’s own update button appears unresponsive
3. Restart your PC and try again — a stuck background service is a common, simple cause

Signatures Still Show as Out of Date After Updating

1. Recheck the Security intelligence version shown in Windows Security against Microsoft’s published current version to confirm whether the update actually failed or simply hasn’t refreshed the displayed date yet
2. Run Get-MpComputerStatus in PowerShell for a more detailed and reliable status check than the app’s summary view
3. If it’s still outdated, try Method 3 (Command Prompt) or Method 4 (offline installer) as more direct alternatives

Windows Security Won’t Open at All

If the app itself is unresponsive, Methods 2 and 3 (PowerShell and Command Prompt) don’t require the app’s interface and will still work in most cases. If neither works either, this may point to a deeper system file issue worth investigating separately, rather than a signatures problem specifically.

Frequently Asked Questions

How often should I manually update Windows Security signatures? There’s no need to do this on a fixed schedule if automatic updates are working normally, since Microsoft releases updates multiple times a day and Windows installs them in the background. Manual updates are most useful before security-sensitive tasks, after restoring from a backup, or when a PC has been offline for a while.

What is the PowerShell command to update Windows Security signatures? The command is Update-MpSignature, run from PowerShell opened as administrator. It connects directly to Microsoft’s servers and installs the latest available definitions immediately.

Can I update Windows Security signatures without an internet connection? Yes. Download the offline installer from Microsoft’s official Defender updates page on a separate device with internet access, transfer it to the offline PC using a USB drive, and run it there. This is the standard method for air-gapped or newly set up systems.

Why does Windows Security still show outdated protection after I updated? This can happen if the update didn’t fully complete, or if the displayed date hasn’t refreshed yet. Running Get-MpComputerStatus in PowerShell gives a more precise, up-to-date status than relying on the app’s summary screen alone.

Is manually updating signatures different from a regular Windows Update? Yes. Signature updates are specific to Microsoft Defender’s threat detection files and are released far more frequently than full Windows feature or security updates. They can be triggered independently through Windows Security or PowerShell, without needing to install a broader Windows Update package.

Do I need administrator access to update signatures manually? Yes, for the PowerShell and Command Prompt methods specifically, since they require running as administrator. Updating through the Windows Security app’s own interface typically doesn’t require any extra permission beyond your normal account.

Will updating signatures manually slow down my PC? No. Signature updates are small files and install quickly in the background, typically taking well under a minute and causing no noticeable impact on performance, even while other tasks are running.

Keeping your security definitions current is one part of a well-maintained Windows PC — driver and firmware updates matter too. If a device stopped working after a system change, our guide on reinstalling your Bluetooth driver in Windows covers a similar update-related troubleshooting process. And if you’re due for a firmware update as well, see our guide on how to update your BIOS safely.