How to Update Windows Security Signatures Manually in Windows 11/10

by

Windows Security (formerly Windows Defender) is the built-in antivirus and anti-malware protection included in Windows 11 and Windows 10. It protects your PC against viruses, ransomware, spyware, trojans, and emerging cyber threats in real time.

Normally, Microsoft automatically updates Security Intelligence (virus definitions) through Windows Update several times per day. However, there are situations when automatic updates fail or are delayed, such as:

  • No internet connection

  • Corporate or school networks blocking updates

  • Windows Update errors

  • Slow or unstable internet

  • Offline PCs or air-gapped systems

  • You want the latest definitions immediately

In these cases, you can manually update Windows Security signatures to ensure your PC stays protected with the newest threat database.

This detailed guide explains all working methods to manually update Windows Defender signatures in Windows 11 and Windows 10.

What Are Windows Security Signatures?

Security signatures (also called Security Intelligence Updates) are small database files that tell Windows Defender how to detect new malware and threats.

They include:

  • Virus signatures

  • Spyware detection rules

  • Ransomware definitions

  • Cloud threat intelligence

  • Behavioral detection rules

Microsoft releases updates multiple times daily, so keeping them updated is critical.

Method 1 — Update Signatures Using Windows Security App (Easiest Method)

This is the simplest manual update method.

Step-by-Step:

  1. Press Start Menu

  2. Search and open Windows Security

  3. Click Virus & threat protection

  4. Scroll down and click Protection updates

  5. Click Check for updates

  6. Wait for the update to download and install

You’ll see:
✔ Security intelligence updated successfully
✔ Latest update date and version number

💡 Tip: This method works even if Windows Update is partially broken.

Method 2 — Update Signatures Using PowerShell (Fast & Powerful)

PowerShell lets you instantly force Windows Defender to download the newest definitions.

Steps:

  1. Press Start

  2. Search PowerShell

  3. Right-click → Run as Administrator

  4. Run the command below:

Update-MpSignature

  1. Press Enter

Windows Defender will:

  • Connect to Microsoft servers

  • Download latest definitions

  • Install updates immediately

Check update status:

Run:

Get-MpComputerStatus

Look for:

AntivirusSignatureLastUpdated

This method is perfect for:
✔ IT admins
✔ Troubleshooting update failures
✔ Quick updates

Method 3 — Update Signatures Using Command Prompt (CMD)

You can also update Defender using the command line tool MpCmdRun.exe.

Steps:

  1. Open Command Prompt as Administrator

  2. Run this command:

For Windows 11:

cd %ProgramFiles%\Windows Defender
MpCmdRun.exe -SignatureUpdate

For newer builds:

cd %ProgramData%\Microsoft\Windows Defender\Platform\*
MpCmdRun.exe -SignatureUpdate

  1. Press Enter

You’ll see the update progress in the terminal.

Method 4 — Download Security Signatures Manually (Offline Update)

This method is essential for offline PCs or restricted networks.

Step 1 — Download Microsoft Defender Updates

Go to Microsoft Security Intelligence page:
https://www.microsoft.com/en-us/wdsi/defenderupdates

Download the correct version:

System Type File
64-bit Windows mpam-fe.exe
32-bit Windows mpam-fe.exe (x86)
ARM devices ARM package

Step 2 — Install the Update

  1. Copy the downloaded file to the target PC

  2. Double-click mpam-fe.exe

  3. Wait for installation to finish

That’s it — Defender signatures are updated offline.

💡 This is the best method for air-gapped systems.

Method 5 — Update Using Windows Update Manually

Even if auto updates fail, you can manually trigger Windows Update.

Steps:

  1. Open Settings

  2. Go to Windows Update

  3. Click Check for updates

  4. Install Security Intelligence Update for Microsoft Defender

This method also updates:

  • Windows patches

  • Security fixes

  • Defender engine updates

Method 6 — Force Update Using Run Command

Quick shortcut method.

Steps:

  1. Press Win + R

  2. Enter:

"%ProgramFiles%\Windows Defender\MpCmdRun.exe" -SignatureUpdate

  1. Press Enter

Instant manual update starts.

Method 7 — Update Defender via Group Policy Refresh (Enterprise PCs)

For work/school computers where policies block updates.

Steps:

  1. Open Command Prompt as Admin

  2. Run:

gpupdate /force

  1. Then run:

Update-MpSignature

This refreshes policies and forces the update.

How to Verify Defender Is Updated

Open Windows Security → Virus & threat protection → Protection updates

Check:

  • Security intelligence version

  • Last updated date/time

Or run PowerShell:

Get-MpComputerStatus | Select AntivirusSignatureVersion

Why Defender Signatures Fail to Update

Common causes:

  • Windows Update service stopped

  • Proxy or firewall blocking servers

  • Corrupted update cache

  • Metered connection enabled

  • Outdated Defender engine

Manual updates fix most of these issues.

Best Practice: How Often Should You Update?

Recommended:

  • Automatic updates: Multiple times daily

  • Manual update: When troubleshooting or offline use

  • Always update before running a full scan

Conclusion

Keeping Windows Security signatures updated is essential for protecting your PC against the latest threats. While Windows normally updates automatically, knowing how to manually update Defender ensures you stay protected even when updates fail or your PC is offline.

Use the Windows Security app for simplicity, PowerShell for speed, and offline installer for restricted networks.

Stay updated = Stay secure 🔒