How to Allow an App Through Windows Firewall

Share this post

How to Allow an App Through Windows Firewall

Windows Firewall blocks network connections that programs haven't been given permission for. Most of the time you never notice it: the first time an app needs the network, Windows asks whether to allow it. But if you clicked Cancel on that prompt, or a game, printer tool or remote-access app suddenly can't connect, you may need to allow it by hand.

This guide works on Windows 11 and Windows 10. Only allow apps you recognise and trust.

Before You Start: Is the Firewall Really the Problem?

If the app can't connect at all, check your internet connection first - other apps and websites should work.
If you use a third-party antivirus with its own firewall (Norton, McAfee, Bitdefender and similar), that app may be doing the blocking, and Windows Firewall may be switched off in its favour. Allow the program in that security app's settings instead.
If the app only fails on one network, check whether the network is set to Private or Public (Settings > Network & internet > your connection > Network profile type).

Allow an App Through the Firewall

These are Microsoft's steps:

Open the Windows Security app (search for it in Start).
Select Firewall & network protection.
Select Allow an app through firewall.
Select Change settings. You may need an administrator password.
Find the app in the list and tick its box. Then tick the network types it should work on:
Private - your home or work network. This is usually all you need.
Public - cafes, hotels, airports. Only tick this if you truly need the app there.
If the app isn't listed, select Allow another app, then Browse, find the program's .exe file (usually under C:\Program Files or C:\Program Files (x86)), select Add, and set the network types.
Select OK.

Restart the app and try again.

Remove an App Later

Every allowed app is a small extra risk, so clean up what you no longer use:

Go back to Windows Security > Firewall & network protection > Allow an app through firewall.
Select Change settings.
Untick the app (or select it and choose Remove).
Select OK.

Why Not Just Open a Port or Turn the Firewall Off?

Microsoft explains that there are two ways to let traffic through, and both carry risk:

Allowing an app (above) is the less risky option, because the app only opens the ports it needs while it runs.
Opening a port keeps it open until you close it, whether anything is using it or not, which gives attackers and malware more chances to get in.

Turning the whole firewall off is riskier still. If a support article or a stranger tells you to switch it off, allow the specific app instead - and if someone who phoned you out of the blue is asking, it's likely a scam; see fake virus warning pop up in browser.

Never allow an app you don't recognise. If you find unknown programs in the allowed list, remove them and run a full scan in Windows Security.

Still Blocked?

Firewall settings won't open or Windows Security is blank: see Windows Security not opening or turned off.
Restore the default rules: in Windows Security > Firewall & network protection, select Restore firewalls to default. This removes every rule you or your apps added, so the apps will ask again the next time they connect.
Firewall service using lots of CPU: that's a separate issue covered in LocalServiceNoNetworkFirewall high CPU usage.
Work or school PC: your organisation's rules override yours. Ask your IT team to allow the app.
The app needs incoming connections from the internet (game servers, home cameras, remote desktop): that also involves your router, and exposing a PC to the internet is risky. Check the app maker's guide, and prefer their cloud or relay option where one exists. For remote access in particular, see how to use Remote Desktop in Windows 11.

Frequently Asked Questions (FAQ)

Should I just turn the firewall off instead?

No. Turning the firewall off exposes every program and service on the PC. Allowing one trusted app is much safer, and you can remove it again later.

What is the difference between Private and Public?

Private is for networks you trust, such as home or work. Public is for cafes, hotels and airports. Tick Private only, unless you really need the app on public Wi-Fi.

Is allowing an app the same as opening a port?

No. Microsoft says an allowed app only opens the ports it needs while it is running, while an opened port stays open until you close it. Allowing the app is the safer choice.

Why is Change settings greyed out?

You need administrator rights. Sign in with an administrator account, or on a work PC ask your IT team, since the firewall may be managed by your organisation.