How to allow or block programs with the Windows Firewall

If you're not sure whether to allow a program through your firewall, follow our handy guide to help you make the right decision
Tom MorganSenior content writer

The Windows firewall works like a filter between your PC and the internet, blocking or allowing connections depending on whether or not they’re safe.

Firewalls will block or allow a lot of traffic automatically, but sometimes you will see a message asking you if you want to allow a program to connect to the internet. This usually happens when you use a new program for the first time. There could also be situations where you need to allow a program through your firewall that has been blocked incorrectly.

graphic of computer screen, mobile phone and magazine

Tech Support

If you're a Tech Support member, use our one-to-one support service

Submit a request

Below, our tech experts explain how to use Windows Firewall.

How do I allow a program through the Windows Firewall?

To manage the 'allow' list for Windows Firewall, select Start, type Allow an app or feature through Windows Firewall, then click it.

On the next screen, choose Change settings, then tick or untick the box next to an item to allow or block it.

Windows Defender Firewall settings

Alternatively, you can tick or untick the box in either the Private or Public columns. This is for if you wanted to allow a program internet access when you’re connected to your home network (Private), but blocked when you’re connected to a public one, such as a wi-fi hotspot.

Windows Defender Firewall settings

News, deals and stuff the manuals don't tell you. Sign up for our Tech newsletter, it's free monthly


Block all incoming programs

There are occasions where it’s much safer to block all incoming data connections to your computer, including all of the programs on your ‘allow’ list.

For example, you may wish to do this if you’re using an unsecured wi-fi connection that you don't trust.

To disallow all incoming data connections with the Windows Firewall, select Start, type firewall and choose Windows Firewall > Change notification settings.

Windows Defender Firewall settings

Under Public network settings, untick Notify me when Windows Defender Firewall blocks a new app, select Block all incoming connections, including those in the list of allowed programs, then OK.

Windows Defender Firewall settings

With this setting enabled, you’ll still be able to send and receive email and browse the web, but other connections will be blocked automatically. 

Just make sure you remember to undo the changes when you return home.

Join Which? Tech Support

Which? Tech Support can help you keep you on top of your tech. Our experts explain things clearly so that you can resolve issues and feel more confident using your devices.

Get unlimited 1-2-1 expert support:

  • By phone Clear guidance in choosing, setting up, using and resolving issues with your home tech devices.
  • By email Outline the issue and we’ll email you our answer.
  • By remote fix We connect securely from our office to your home computer and resolve issues while you watch.
  • In print Which? Tech magazine, six issues a year delivered to your door.

You can join Which? Tech Support for £4.99 a month or £49 for a year.