19 items

PC Setup: From Unboxing to First Boot

Your new computer's factory state is a starting point, not a finished configuration. This checklist walks you through the exact sequence — security and recovery infrastructure before personal data, backup before file transfer — so your machine is protected from day one and not patched together six months later. For more background and examples, see the guidance below; for built-in tools and options, use the quick tools guide.

Author

Checklistify Editorial Team

Last Updated

Checklist Items

0 done•19 left•5 of 6 sections collapsed

Unbox and inspect all components — photograph any damage before powering on

Physical damage must be documented with photographs before the computer is powered on. Activating a visibly damaged unit can be interpreted as acceptance of its condition, which may invalidate a damage claim with the retailer or shipping carrier. Unbox on a clean, static-free surface. Verify the box contents against the included documentation: the main power adapter and cable (confirm the wattage matches what's listed for the model — some laptops ship with both a travel-size and a full charger), any included peripherals, documentation, warranty card, and recovery media if listed (uncommon on modern machines). Report missing accessories to the retailer before beginning setup.

Connect monitor, keyboard, mouse, and power — hold off on internet until the account creation screen is complete

On Windows 11 Home, Microsoft has progressively tightened the setup flow to steer users toward a Microsoft account. Staying offline during initial account creation is the most reliable method for reaching the local account option — without an internet connection, the OOBE cannot validate a Microsoft account and presents a local account path instead. Connect to Ethernet or Wi-Fi immediately after completing the account creation screen, before proceeding to anything else. On Mac, the Setup Assistant can create an Apple ID-linked or local account regardless of network state, but starting offline lets you defer iCloud configuration to a separate, less rushed step.

Complete the OS initial setup — Windows OOBE or macOS Setup Assistant

Windows OOBE decisions with lasting impact: account type (Microsoft account versus local account — a decision table with practical trade-offs is in the page content below); privacy and telemetry settings (Activity History, Advertising ID, and Diagnostic Data can each be disabled without affecting core functionality — review each setting rather than accepting all defaults); and Cortana setup (can be skipped). On Mac, Setup Assistant asks about iCloud, Screen Time, Siri, Location Services, and Analytics — each can be configured later in System Settings if you prefer to proceed quickly now and revisit settings once you understand what each controls.

Create a strong account password and enable biometric login

Your account password should be at least 12 characters. A passphrase built from three or four random unrelated words — such as 'staple-anchor-lamp-frost' — is significantly harder to brute-force than a short complex password and far easier to recall. Never reuse a password from any other account. After setting the account password, enable Windows Hello (Settings → Accounts → Sign-in options): PIN, fingerprint, or face recognition. Windows Hello is more secure than a typed password because your biometric data and PIN are stored in a dedicated hardware security chip (TPM) on the device — the credential never transmits over any network and cannot be captured by phishing. On Mac: set your login password during Setup Assistant, then enable Touch ID in System Settings → Touch ID & Password. Register at least two fingers (one from each hand) as a practical fallback if one hand is unavailable.

Enable two-factor authentication on your Microsoft Account or Apple ID

Your Microsoft Account or Apple ID is the master key to your device — it controls password resets, cloud data access, and device recovery features. If that account password is exposed in a data breach (check your email addresses at haveibeenpwned.com to see if they've appeared in known breaches), two-factor authentication ensures a stolen password alone cannot unlock the account. For Microsoft accounts: sign in at account.microsoft.com → Security → Advanced Security Options → Two-step verification. Use the Microsoft Authenticator app rather than SMS codes — app-based authentication cannot be bypassed via SIM-swapping attacks, where an attacker convinces your carrier to transfer your phone number to a SIM they control. For Apple ID: System Settings → [Your Name] → Password & Security → Two-Factor Authentication. Once active, any sign-in from a new device requires a 6-digit confirmation code sent to a trusted device or phone number.

Install all available system updates — expect multiple rounds and at least two restarts

New computers in retail inventory may have been manufactured six months or more before purchase. The gap between the factory OS image and the current update baseline can include dozens of security patches and driver fixes — running the initial update pass is not optional from a security standpoint. On Windows: Settings → Windows Update → Check for Updates. Install, restart, return to Windows Update, and check again — Windows releases updates in staged batches, so the first installed set unlocks a second wave that wasn't visible before. Repeat until the page confirms no updates are pending. For Windows PCs: after OS updates complete, visit the GPU manufacturer's site directly (NVIDIA: nvidia.com/drivers; AMD: amd.com/support) and install the current GPU driver — Windows Update provides a certified generic driver that is typically months behind the latest release, which matters for gaming performance and some creative applications. On Mac: System Settings → General → Software Update — allow the full process to complete before proceeding.

Check for firmware (BIOS/UEFI) updates for your PC model

Firmware updates patch low-level security vulnerabilities that operating system updates cannot address, because firmware runs below and independently of the OS layer. On Windows PCs, check the manufacturer's support site using your model name or serial number: Dell (dell.com/support), Lenovo (support.lenovo.com), HP (support.hp.com), ASUS (asus.com/support). Most manufacturers offer a dedicated update utility — Dell Update, Lenovo System Update, HP Support Assistant — that scans for firmware and driver updates automatically. For Surface devices, firmware arrives via Windows Update and requires no separate step. Critical: BIOS updates must be run with the laptop plugged into AC power and at least 50% battery charge — a power failure mid-update can render the motherboard non-functional. On Mac, firmware is bundled with macOS software updates and requires no separate action.

Create a system recovery drive on a 16GB+ USB drive immediately

A recovery drive created now — before any software or personal data is added — captures the system in its factory-clean, fully-updated state and can be used to boot and repair a computer that won't start normally. The time to make it is before you need it. On Windows: type 'Create a recovery drive' in the Start menu search; the wizard walks through the process, which takes 20–30 minutes and completely erases and formats the USB drive for this purpose. Label the drive clearly with the date and the machine it belongs to, and store it somewhere physically separate from the computer — a drive sitting next to a stolen or flooded laptop provides no protection. On Mac: macOS includes a built-in recovery partition (hold Command+R at startup on Intel Macs; hold the Power button on Apple Silicon) that works as long as the internal drive is functional. For an external equivalent, a second Mac can create a bootable installer using the 'createinstallmedia' Terminal command — full instructions are at Apple's support site (support.apple.com, search 'create a bootable installer').

Enable BitLocker (Windows) or FileVault (Mac) full-disk encryption

Full-disk encryption ensures that if the computer is lost or stolen, the data on the drive cannot be read without the account password — even by someone who removes the drive and connects it to another machine. This is the most important single protection for any laptop user. On Windows: search 'Manage BitLocker' in the Start menu. BitLocker is available on Windows 10 and 11 Pro and Enterprise editions. When enabling it, save the recovery key somewhere other than the computer itself — print it or save it to your Microsoft account at account.microsoft.com under Devices. Windows Home editions have 'Device Encryption' under Settings → Privacy & Security, which provides equivalent protection when signed in with a Microsoft account on a device with a TPM chip. On Mac: System Settings → Privacy & Security → FileVault — enable it and save the recovery key in a secure location outside the machine.

Verify Windows Defender or macOS security features are fully active

On Windows: open Windows Security → Virus & Threat Protection and confirm 'Protection is on' with current security intelligence. Three settings should all be enabled for the strongest Defender configuration: Real-Time Protection, Cloud-Delivered Protection, and Automatic Sample Submission. Also check Windows Security → Firewall & Network Protection to confirm the firewall is active on all three network profiles (Domain, Private, Public) — the firewall is on by default but can be silently disabled by some software installers. On Mac: System Settings → Privacy & Security → confirm Gatekeeper is set to 'App Store and identified developers' at minimum. For most home users, Windows Defender with real-time protection enabled plus safe browsing habits provides adequate protection without a paid antivirus subscription. The OEM trial antivirus products pre-installed on many PCs are not inherently better than Defender — they are present because antivirus vendors pay OEMs for placement. Removing trials and relying on Defender is a well-supported choice.

#10

Enable Find My Device (Windows) or Find My Mac

These features allow you to locate and, if necessary, remotely lock or wipe a lost or stolen computer — but only if enabled before the event. On Windows: Settings → Privacy & Security → Find My Device — toggle it on. This requires a Microsoft account to be signed in and location services to be active (Settings → Privacy & Security → Location). On Mac: System Settings → [Your Name] → iCloud → Find My Mac — enable both Find My Mac and Send Last Location (Send Last Location transmits the last known position when the battery reaches a critically low level, before the device powers off entirely). Important limitation: both features require the device to be powered on and connected to the internet to report a location or accept a remote wipe command. They complement disk encryption but do not replace it — encryption is the protection that guards data when the device is genuinely offline.

#11

Set up automated backups to an external drive — configure before transferring any personal files

The backup system only protects data that exists after it was configured. Set it up before any personal files are on the machine. The external backup drive should be at least twice the size of your internal drive to accommodate backup history and OS growth over time. On Windows: File History (Settings → System → Storage → Advanced Storage Settings → Backup Options) backs up files in your user folders continuously whenever the external drive is connected. Note that File History is a file-level backup — it protects your documents, photos, and downloads, but cannot restore the entire OS. For full-system backup on Windows, use Windows Backup (built into Windows 11) or Macrium Reflect (free version available at macrium.com) to create a full drive image. On Mac: Time Machine is a full-system backup — connect an external drive and macOS will offer to use it for Time Machine automatically. Time Machine can restore individual files, entire folders, or the complete operating system to a previous state. Set the minimum backup frequency to daily for any machine used regularly.

#12

Verify the backup by restoring a test file

A backup that has never been tested is a backup of unknown reliability. After the initial backup completes, run a restore test. On Windows File History: open 'Restore personal files' from the File History settings, confirm your Documents folder appears with recent files, restore one file to a test location, and verify it opens correctly. On Time Machine: use the Time Machine menu bar icon to enter Time Machine, navigate to the most recent backup, select one file, click Restore to a test location, and confirm it opens. This takes five minutes and eliminates the most common backup failure mode: discovering the restore process doesn't work at the moment you need it. If the restore fails, troubleshoot now — not during an active data loss event.

#13

Remove pre-installed bloatware before installing your own software

OEM Windows PCs from Dell, HP, Lenovo, ASUS, and others typically include trial software, manufacturer support utilities that duplicate Windows built-in functions, and promotional apps that consume resources and occasionally introduce security vulnerabilities. Categories to remove: trial antivirus subscriptions (McAfee, Norton, or Trend Micro trials — remove these and let Windows Defender take over), OEM support assistants that haven't received updates in years, game launchers you won't use, and any promotional app you don't recognize that isn't clearly a Windows system component. On Windows: Settings → Apps → Installed Apps — sort by Publisher to isolate OEM apps from Windows components. Two efficient tools for deeper cleanup: O&O AppBuster (free) targets both UWP Store apps and legacy installers in one interface; Bulk Crap Uninstaller (free, bcuninstaller.com) handles batch removal of traditional applications efficiently. On Mac, computers purchased directly from Apple include minimal third-party software. Refurbished or previously owned Macs may have software left in the Applications folder — review and remove anything not from Apple.

#14

Install a password manager as the first software application

A password manager is the single highest-return security tool after OS-level protections, and the right moment to install it is before setting up any other accounts or services — so every account created from this point gets a unique, randomly generated password stored in the vault from the start. Without a password manager, password reuse is nearly inevitable, and a single data breach at any service exposes every account sharing the same credential. Bitwarden is free, open-source, and independently audited — a strong default choice. 1Password and Dashlane are capable paid alternatives. After installing the desktop application, immediately install the browser extension — this is a separate component from the app and is what enables password autofill in web forms. Set up the mobile app on your phone in the same session so your vault syncs across devices.

#15

Configure your primary browser: sync, extensions, and privacy settings

Your browser is the most-used application on most computers and deserves deliberate configuration rather than accepting defaults. Start by signing into your browser account (Google Account for Chrome, Firefox Account for Firefox) to sync bookmarks, history, passwords, and extensions — this also creates a cloud backup of your browsing data. Install the password manager's browser extension immediately so autofill works in web forms across all sites. Privacy settings worth adjusting: in Firefox, go to Settings → Privacy & Security → Enhanced Tracking Protection and select Strict mode. In Chrome, Settings → Privacy and Security → Cookies → Block third-party cookies reduces cross-site tracking. Set your default search engine deliberately under browser settings — the pre-installed default may differ from your preference. Confirm the browser is set to update automatically; browser vulnerabilities are among the most consistently exploited attack vectors on consumer machines.

#16

Install core software — use batch install tools to save time on Windows

On Windows, Ninite (ninite.com) is the fastest legitimate approach: select your applications from the website — Chrome, Firefox, VLC, 7-Zip, LibreOffice, Zoom, and dozens of others — and it generates a single installer that runs all of them silently, without browser toolbar offers, bundled junk, or manual wizard-clicking. Ninite also functions as an updater — running the same Ninite installer later updates all selected apps to their current versions. On Mac, applications are typically installed from developer sites or the Mac App Store; Homebrew (brew.sh) is a terminal-based package manager for users comfortable with the command line and useful for both GUI apps and developer tools. Install in dependency order: browser first, then password manager browser extension, then cloud storage client, then productivity and communication apps.

#17

Adjust display scaling, power settings, and default application assignments

Display scaling: Windows defaults to 125% on high-DPI displays. If text or UI elements appear blurry in specific older applications, those apps haven't been updated for high-DPI displays — right-click the application executable, Properties → Compatibility → Change high DPI settings, and enable 'Override high DPI scaling behavior' set to 'Application'. This forces the app to handle its own scaling and typically resolves blurriness. Power settings on laptops: 'Balanced' mode throttles performance when on battery. If you primarily use the laptop plugged in, 'Best Performance' mode (Settings → System → Power & Battery → Power Mode) gives more consistent CPU and GPU output. For battery-focused use, 'Best Power Efficiency' extends runtime significantly. Default application assignments: Settings → Apps → Default Apps on Windows — explicitly set your preferred browser, email client, PDF viewer, and media player to prevent Windows from reverting to Edge and Mail after updates.

#18

Transfer personal files from your old computer using the fastest available method

File transfer method by practical speed: a USB 3.0 external drive copies at approximately 100–120 MB/s, making it the best option for large photo libraries, video files, or music collections. Copy your important source folders — Documents, Pictures, Music, Downloads, Desktop, and any project directories — to the external drive on the old machine, then copy from the drive to the new machine. For Windows-to-Windows: PCmover (paid, approximately $30) transfers files, settings, and compatible applications in one automated process. Manual file copy via an external drive is free and more transparent — you see exactly what transfers and can leave behind anything you don't want. For Mac-to-Mac: Migration Assistant (built into every Mac under Applications → Utilities) handles a complete transfer including applications, user accounts, and system settings over Wi-Fi or a direct Ethernet connection, typically in 1–4 hours depending on data volume. For cross-platform transfers between Windows and Mac: format the external drive as exFAT — this file system is read and written natively by both operating systems without additional software or conversion.

#19

📖 Why the sequence on this checklist is non-negotiable

The instinct when a new computer arrives is to get it working immediately: install your apps, sign into accounts, move your files over. That feels productive — but it is the wrong order. The cost of inverting the sequence does not appear immediately. It appears six months later when Windows won't boot and there is no recovery drive, or two years later when the drive fails and the backup was never configured.

This checklist is structured so the safety net goes in before anything else. A recovery drive made on a clean, freshly-updated system is more reliable than one made after six months of software accumulation. Disk encryption enabled before personal data arrives protects from day one. Bloatware removed before accounts are created means those accounts are never touched by software you're about to delete. The order is the product.

🧮 Local account vs. Microsoft account — the choice most people click through without reading

Windows 11 nudges users toward a Microsoft account during setup. Understanding the actual trade-offs before clicking takes two minutes and matters for years afterward.

Consideration	Local Account	Microsoft Account
Forgotten password recovery	No online reset path — reinstalling Windows is the only option	Reset from any browser via email or phone number
Microsoft Store app access	Some apps require a Microsoft account to install or run	Full access with no additional sign-in steps
Family Safety & parental controls	Not available	Full Microsoft Family Safety feature set
Can you switch later?	Yes — Settings → Accounts at any time	Yes — Settings → Accounts → Sign-in options

💡 The most practical reason to choose a Microsoft account: forgotten password recovery. A local account with a forgotten password has no reset mechanism — the only path forward is reinstalling Windows and losing any files not separately backed up. If you're configuring this machine for someone else (a parent, a child, a non-technical family member), the recovery options make the Microsoft account the more responsible default.

🗄️ The backup standard professionals follow — and why most home setups fall short

Total copies of your data

Your active working copy counts as one. Two independent backups protect against simultaneous failures — which happen more often than people expect.

Different storage media types

Internal SSD plus external drive, or internal plus cloud. Two different media so one failure mode cannot eliminate both copies at once.

Copy stored offsite

A fire, flood, or theft that destroys your computer also destroys the drive sitting on the same desk. Cloud backup (Backblaze: ~$9/month for unlimited storage) survives physical disasters entirely.

Most home setups reach 2-1: one external drive backup, nothing offsite. That is meaningfully better than no backup — but it does not survive a house fire or a theft where laptop and nearby drive are taken together. An offsite cloud backup is the cheapest gap to close before you need it, and the most commonly skipped step in home backup planning.

🔄 Before your old computer leaves your hands

Getting a new machine means retiring an old one. Simply deleting your files before selling, donating, or recycling is not sufficient — deleted files remain on the drive and are recoverable with widely available forensic tools until the sectors are overwritten. A full factory wipe with secure erase is the only safe approach.

Windows — full data wipe

Sign out of your Microsoft account in Settings → Accounts
Deauthorize license-limited software (Adobe CC, Office retail) before wiping
Settings → System → Recovery → Reset this PC → Remove everything
Tap Change settings and enable Clean the drive — this overwrites sectors and prevents data recovery. Takes 1–4 hours but is the only genuinely safe option.

Mac — full wipe (macOS Monterey 12.3+)

Deauthorize any Apple ID purchases in the Music app if applicable
System Settings → General → Transfer or Reset → Erase All Content and Settings
This single step signs out of Apple ID, disables Find My, and securely erases the drive in one operation
The Mac restarts into Setup Assistant, ready for the next owner with a clean system

📅 Thirty days after setup: four checks that take ten minutes total

The setup checklist is a one-time sprint. These four items are worth revisiting about a month in, once you've actually used the machine and the initial configuration has settled.

✅Confirm the backup ran. External drive backups only execute when the drive is physically connected. Check that your backup drive is plugged in and that the most recent backup timestamp is within 24 hours — if the drive was unplugged and never reconnected, the backup has been silently failing since setup day.
✅Audit startup programs. Software installed post-setup frequently adds itself to startup automatically. Windows: Task Manager → Startup tab. Mac: System Settings → General → Login Items. Disable anything that doesn't need to launch at every boot — each startup entry adds to login time and background resource use.
✅Uninstall software you haven't used. After a month you know what you actually use. Every unused installed application is a pending update, a potential vulnerability, and a small drag on system resources. Trim aggressively — it's easier to reinstall something you need than to clean up a bloated system later.
✅Run Windows Update once more. Some updates release in staged batches and weren't available during initial setup. A second check at 30 days catches anything that landed after your first full update round. Mac handles this automatically when Software Update is set to run automatically.

Master This Checklist Quickly

Every important button and option for this pre-made checklist, shown in a glance-friendly format.

Start Here

1
Click any item row to mark it complete.
2
Use the note row under each item for quick notes.
3
Use the tool row for undo, redo, reset, and check all.
4
Use Save Progress when you want to continue later.

Checklist Row Tools

UndoRedoResetCheck allCollapse/Expand sectionsShow/Hide detailsInline notes

Top Action Buttons

Open all sharing and export options in one menu.

Email DraftContinue on another devicePrint or Save as PDFPlain Text (.txt)Word (.docx)Excel (.xlsx)

Add & Ask

Open one menu for apps and AI guidance.

NotionTodoist CSVChatGPTClaude

Copy and customize

Create a new editable checklist pre-filled with your chosen content.

Save Progress

Adds this checklist to My Checklists and keeps your progress in this browser.

Most Natural Usage

Track over time

Check items -> Add notes where needed -> Save Progress

Send or export

Open Share -> Choose format -> Continue

Make your own version

Copy and customize -> Open create page -> Edit freely

PC Setup: From Unboxing to First Boot

Checklist Items

Physical Setup

First Boot and Account Setup

System Updates and Firmware

Security and Recovery — Complete Before Adding Personal Data

Software Setup

Data Migration

📖 Why the sequence on this checklist is non-negotiable

🧮 Local account vs. Microsoft account — the choice most people click through without reading

🗄️ The backup standard professionals follow — and why most home setups fall short

🔄 Before your old computer leaves your hands

📅 Thirty days after setup: four checks that take ten minutes total

Master This Checklist Quickly

Start Here

Checklist Row Tools

Top Action Buttons

Share

Add & Ask

Copy and customize

Save Progress

Most Natural Usage

Track over time

Send or export

Make your own version

Gaming PC Build

Operating System Fresh Install

Phone Factory Reset & Secure Wipe

Smartphone Upgrade & Backup

3D Printer Setup & First Print Calibration

Checklistify