Q: How to enable or disable TLS 1.3 in Windows 10?

2024-06-25

TLS 1.3 is the latest security protocol that improves upon TLS 1.2 in terms of security and performance. TLS 1.3 is still not widely used for all apps installed in Windows 10.

Click here to learn more about which TLS versions should be used when connecting to an ASUSTOR NAS.

Windows 11 has TLS 1.3 enabled by default, the settings are not required to change in Windows 11.

TLS 1.3 is not enabled in Windows 10 by default. If you are using network apps that require or support TLS 1.3, you should enable TLS 1.3 in Windows 10.

• In Windows 10, click [Search] on the [Taskbar].
• Enter [regedit] and then you will find [Registry Editor] here.
• Click on [Open].

Enable TLS 1.3:

• Find the following path in the left panel of the Registry Editor:
  [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.3\Client]
• Double-click on [Enabled].
• In the [Value data] field, change the value to [1] and click [OK].

Note: If you cannot find the above path in Windows 10, please right-click on the right panel according to this path, create [TLS 1.3] and [Client] key path in turn, and then create 2 DWORD (32-bit) values [DisabledByDefault] and [Enabled] with default value 0.

You can click here to download the Windows registration file to create the key path and default value, and then modify it. (MD5: b003f9e7fd0b825fafd02f915d7de0ca)

However, if some apps you are using in Windows 10 do not support TLS 1.3, the apps possibly do not work properly by TLS 1.3 is enabled, and you should disable TLS 1.3 in Windows 10.

Disable TLS 1.3:

• Find the following path in the left panel of the Registry Editor:
  [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.3\Client]
• Double-click on [Enabled].
• In the [Value data] field, change the value to [0] and click [OK].

Learn More