Microsoft Defender: Antivirus
Tools · Microsoft Corporation
Microsoft Defender: Antivirus screenshots
If you already pay for Microsoft 365 Personal or Family, Microsoft Defender is the app that tries to turn that subscription into something you can see and act on. It gathers device security, threat alerts and, for US users, identity and credit monitoring into one dashboard, so a household can check its overall posture without opening a separate tool for each concern. The app is free to download, has no ads, and offers in-app purchases, but the individual-focused features sit behind the Microsoft 365 subscription you sign in with.
That framing matters more than any single feature. This is not a standalone antivirus you install on a phone and forget; it is a companion to a subscription many people already have, and its value depends on whether you use the parts of that subscription it exposes. For a family that already shares a Microsoft 365 plan, the appeal is having one place to watch over several devices and, in the US, several identities.
I would expect it to suit parents who want visibility into what is happening across the household, and individuals who want identity monitoring bundled with software they already pay for. It is a reasonable fit for people who prefer a recognizable vendor and a single account over assembling several specialist apps. The install base of over 10 million and a 4.4 average from more than 82,000 ratings suggest plenty of people have found it useful, though ratings alone never tell you whether the fit is right for you.
Link scanning is the headline act
The feature the developer leads with is link protection. Defender uses accessibility services to check web pages before you open them, blocking malicious ones that arrive through SMS, messaging apps, browsers and email. That covers the most common way people get into trouble on a phone: tapping something they should not have. Rather than relying on you to recognize a bad URL, the app intervenes at the point of the tap.
The trade-off is the permission itself. Accessibility services are powerful, and granting one to a security app is a decision worth making deliberately rather than by reflex. If you are comfortable with that, the payoff is a layer of protection that runs in the background without asking you to change how you use your phone. If you are not, the rest of the app still works, but you lose the feature that gets top billing.
Alongside link blocking, Defender scans devices for threats and alerts you when malicious apps are found, then walks you through removing them. On iOS and Windows, the developer notes that this does not replace the malware protection already built into those systems, so it is a supplement rather than a substitute.
Identity and credit tools, with a US address
The second pillar is personal information. Defender monitors your identity and your family's, and in the US it also watches credit. The credit side uses a single-bureau VantageScore 3.0 from Experian, with a monthly report drawn from that same single bureau. Anyone under 18, or without a credit history, does not get a score, and a family organizer cannot onboard, view or receive alerts about another member's credit monitoring.
If something goes wrong, the app connects you to identity theft restoration specialists at any hour, and the subscription includes identity insurance of up to USD1 million toward restoration fees, with up to USD100,000 for recovering lost funds. American Bankers Insurance Company of Florida, part of Assurant, handles the underwriting and administration of that coverage, and the terms, conditions and exclusions sit in the actual policies. Coverage is not available in every jurisdiction, so the headline figure is a ceiling rather than a promise.
The geographic limits are the part I would weigh carefully. Identity monitoring, credit monitoring and the insurance benefits apply in the United States and US territories, and the credit report requires your device's primary display language to be English. For families spread across countries, that split is worth understanding before you build expectations around the identity tools.
Family alerts and the consent rules
Family management is where the app tries to be more than a personal utility. You can check the security status of the family's devices and identity, and receive threat alerts with recommended actions across those devices. Dark web threat alerts for children require a one-time verification that you are a parent or legal guardian. Creating or monitoring a child's identity does not need consent if the child is under 13, while consent is required for family members over 13.
Those rules are more than paperwork; they shape what a parent can actually see. If you are setting this up for a household, expect to complete that check once and then manage everyone from the organizer's account.
The multi-device view is the practical payoff. Instead of asking each family member how their phone is doing, you get a consolidated status and a nudge when something needs attention. It is a modest convenience, but it is the kind of thing that makes a subscription feel used rather than forgotten.
What it asks of you before it does anything
The requirements are straightforward but non-negotiable. The individual-focused version needs a Microsoft 365 Personal or Family subscription, and you sign in with a Microsoft account. The app is not available in certain regions where those subscriptions are sold, so availability can vary by where you live. If you are part of a business or organization, you sign in with a work or school email instead, and that organization must hold a valid license or subscription.
Cost therefore depends on your situation. If you are evaluating Defender as a cheap alternative to a paid security suite, the math is different: you are really evaluating whether the Microsoft 365 plan you pay for is worth more with this app attached.
What you get can also differ by device, language and region. That is a broad caveat, and it means two people on the same plan in different countries may not see the same screens. Checking what your region actually offers before relying on a specific tool is the sensible move.
Getting the most from it
The most useful thing you can do is decide early which parts of the app matter to you. If link protection is the draw, grant the accessibility permission and treat it as your main defense against bad links in messages and email. If identity monitoring is the draw, confirm you are in a covered region and that your device language is set to English before you count on the credit report.
For families, set up the organizer account first and complete the parental verification once, then add members. That avoids the awkward situation where alerts arrive but the details are locked behind a check you have not finished.
I would also treat the app as one layer rather than the whole story. The developer is explicit that on iOS and Windows it does not replace the malware protection those platforms already provide, and the insurance benefits are subject to policy terms. Used as a dashboard and an early-warning system on top of what you already have, it makes more sense than as a standalone shield.
A sensible add-on for Microsoft 365 households
Microsoft Defender is best understood as a companion app rather than a product you buy on its own merits. For a household already paying for Microsoft 365 Personal or Family, it adds link blocking, device scanning, family status alerts and, in the US, identity and credit monitoring with restoration support and insurance behind it. That is a meaningful amount of value layered onto a subscription many people already have.
The caveats are real but specific. The identity and credit tools are limited to the United States and US territories, the credit report needs an English device language, the insurance carries policy terms and jurisdictional limits, and the app is unavailable in some regions where Microsoft 365 is sold. Business users need a license through their organization rather than a personal plan.
If you fit the profile, install it and set it up properly. If you do not have a Microsoft 365 subscription and are not planning to get one, the app's core value is out of reach, and a dedicated security tool would serve you better. For everyone in between, it is a low-effort way to get more out of a plan you are already paying for.
The short verdict
A worthwhile companion for Microsoft 365 subscribers who want device, family and US identity protection in one dashboard.
App specs
- Version1.0.9309.0102
- UpdatedOctober 1, 2026
- Downloads10M+
- RequiresAndroid 11+
- PriceFree
- Age ratingEveryone
Microsoft Defender: Antivirus: frequently asked questions
Do I need a Microsoft 365 subscription to use Microsoft Defender?
The individual-focused version requires a Microsoft 365 Personal or Family subscription, and you sign in with a Microsoft account. If you belong to a business or organization, you sign in with a work or school email instead, and that organization needs a valid license or subscription. The app itself is free to download and shows no ads.
How does Microsoft Defender block malicious links?
Through accessibility services it blocks harmful pages reached from links in texts, chat apps, browsers and email.
Where is the identity and credit monitoring available?
Those features apply in the United States and US territories. The credit score is a single-bureau VantageScore 3.0 from Experian, with a monthly report using single-bureau data, and your device's primary display language must be English. No score is issued to people under 18 or with no credit history.
What does the identity insurance cover?
The subscription includes identity insurance of up to USD1 million toward restoration fees, with up to USD100,000 for recovering lost funds. Assurant's American Bankers Insurance Company of Florida handles the underwriting and administration. Terms, conditions and exclusions live in the policies themselves, and some jurisdictions may not offer coverage.
What is required to get dark web alerts for my children?
Before you can see dark web threat alerts about a child, you must verify once that you are the parent or legal guardian. Creating or monitoring a child's identity does not require consent if the child is under 13, while consent is required for family members over 13. Nor can family organizers add, see or get alerts about credit monitoring for another member.
Pros
- Free download with no ads
- Blocks malicious links via accessibility service
- Family device status and threat alerts
- US identity and credit monitoring included
- Restoration experts and identity insurance
Cons
- Needs Microsoft 365 Personal or Family
- Identity tools limited to US and territories
- Credit report requires English device language
- Not available in some Microsoft 365 regions
- In-app purchases offered
Download Microsoft Defender: Antivirus
by Microsoft Corporation
Free · In-app purchases · Official store listings