> ## Content Index
> Fetch the complete content index at: https://www.myronhelgering.com/llms.txt
> Use this file to discover other available public pages before exploring further.

# Quick Guide: Enable Enhanced Phishing Protection
- URL: https://www.myronhelgering.com/quick-guide-enable-enhanced-phishing-protection/
- Published: 2024-06-27T12:09:47.000Z
- Updated: 2026-10-17T16:14:04.000Z
- Author: Myron Helgering
- Tags: Microsoft Defender, Quick Guides

Enhanced Phishing Protection is a device configuration for Microsoft Defender that many companies overlook. Arguably, it's not the most important one, but it will still notify our users whenever they type their password or reuse it in places they shouldn't.

Sadly, this is only applicable whenever users sign in with their actual password on their device. If users sign in with Hello for Business, for example, they will not be notified.

In this quick guide, I will guide you through the steps to configure enhanced phishing protection and show you the user experience.

## Enable Enhanced Phishing Protection

1. Navigate to the [Microsoft Intune admin center](https://intune.microsoft.com/) and go to **Devices**.
2. Go to the **Configuration page** in the **Manage devices** section.
3. Click on the **Create** and **+New policy** button.

![Create configuration policy](https://storage.ghost.io/c/50/f8/50f86270-efcb-4a24-a4c4-13c44e3209ab/content/images/2026/10/create-configuration-policy.png)

1. Select the "**Windows 10 and later**" platform.
2. Select the "**Settings catalog**" profile type and click the **Create** button.

![Create session catalog policy](https://storage.ghost.io/c/50/f8/50f86270-efcb-4a24-a4c4-13c44e3209ab/content/images/2026/10/create-session-catalog-policy.png)

1. On the Basics Page, give your policy a **Name,** and on the configuration settings page, click on the **+Add settings** button and add the **Smart Screen >** **Enhanced Phishing Protection** settings.
2. Enable the **Service Enabled** setting to enable the enhanced phishing protection feature.
3. Enable the **Notify Unsafe App** setting to enable notifications whenever users type their passwords into Word, Notepad, etc.
4. Enable the **Notify Password Reuse** setting to enable notifications whenever users reuse their password.
5. Enable the **Notify Malicious** setting to enable notifications whenever users type their password into a malicious website.

![Configure enhanced phishing protection settings](https://storage.ghost.io/c/50/f8/50f86270-efcb-4a24-a4c4-13c44e3209ab/content/images/2026/10/configure-enhanced-phishing-protection-settings.png)

1. On the Assignments page, **Assign** the policy to a group of users or devices.
2. On the Review + create page, verify your policy settings and click **Create**.

## User Experience

Once the configuration policy has been successfully deployed onto your devices, you will notice the changes after a new sign-in with your password.

Now, let's try to type or copy our password into the Notepad application.

![paste password in notepad](https://storage.ghost.io/c/50/f8/50f86270-efcb-4a24-a4c4-13c44e3209ab/content/images/2026/10/paste-password-in-notepad.png)

As you can see, we are notified that storing our password in this application is unsafe.

Next, let's create a new Gmail address and reuse our corporate password to create the account.

![Password reuse while creating gmail account](https://storage.ghost.io/c/50/f8/50f86270-efcb-4a24-a4c4-13c44e3209ab/content/images/2026/10/password-reuse.png)

As you can see, we'll be notified again that using our password again is a security risk and that we should change it. Besides the above situations, it will also notify us when we type/copy our password on malicious websites, but this is hard to reproduce as Microsoft Defender for Endpoint and SmartScreen will already block most of those websites anyway.

If you followed this quick guide, you have successfully enabled enhanced phishing protection to protect your users' passwords. Good job, stay safe, and have a great day!

# Quick Guide: Enable Enhanced Phishing Protection