Have you heard of the Virtualization Based Security (VBS) feature? It may be enabled by default on certain Windows 11 and Windows 10 configurations, but it can result in a performance decrease of about 5-20% for your software and games. However, you can easily disable this feature with a few straightforward steps.
Windows 11 and some versions of Windows 10 come with a default security setting called Virtualization-based security (VBS) that creates a secure memory enclave, isolated from unsafe code. Another feature, Hypervisor-Enforced Code Integrity (HVCI), uses VBS to prevent questionable software and unsigned drivers from entering memory, offering an additional layer of protection against malware.
However, enabling VBS and HVCI can significantly affect system performance, particularly in gaming, with as much as a 20% decrease in speed in our tests. Although VBS is not enabled by default when upgrading from Windows 10 to 11, recent updates have turned it on, so users should not assume it is disabled.
While the performance impact of VBS and HVCI is not noticeable in everyday tasks such as browsing or document editing, users who prioritize maximum performance can disable VBS following these steps.
How to Check if VBS is Enabled in Windows 11 or 10
Before considering disabling VBS, it is essential to determine whether it is currently enabled on your system.
📢 LIMITED OFFER: Only now, Windows 10/11 Pro at 5$
1. Open system information
2. Scroll to find “Virtualization-based security”
If the status reads as “running”, it means that VBS is currently enabled. On the other hand, if it shows “not enabled”, then there is no need to take any further action.
How to Disable VBS / HVCI in Windows 11 or 10
1. Type Core Isolation in the Search Bar and click on the first result.
2. Turn Memory Integrity to off,
3. Reboot your PC
4. Open Regedit. To open regedit, press the Windows + R keys, type “regedit” in the text box, and then click the “OK” button.
6. Navigate to HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\DeviceGuard.
Important : If you don’t have “EnableVirtualizationBasedSecurity” Right click → New → DWORD(32-Bits) Value. Then rename it “EnableVirtualizationBasedSecurity”
7. Click on EnableVirtualizationBasedSecurity and set it to 0.
8. Close regedit and reboot your PC.