Used Surface Book Security: A Checklist

TL;DR

You’ve bought a used Surface Book – great! But it could have hidden software or security risks. This guide walks you through checking for malware, resetting the device, updating everything, and securing your accounts.

1. Initial Inspection & External Checks

1. Physical Damage: Check for any obvious physical damage (screen cracks, port issues). While not a security issue directly, it can indicate how well the previous owner cared for the device.
2. Original Packaging/Receipts: If possible, ask the seller if they have the original packaging or receipts. This isn’t essential but adds to trust.
3. Serial Number Verification: Verify the serial number against Microsoft’s database to ensure it hasn’t been reported stolen. You can do this on the Microsoft Support page.

2. Booting into a Safe Environment

Before doing anything else, boot the Surface Book from a USB recovery drive or use the built-in reset options. This helps ensure you’re starting with a clean slate.

1. Create Recovery Media (if needed): If you don’t have one already, download the Surface Recovery Image from Microsoft. You’ll need a USB drive (at least 8GB).
2. Boot from USB: Turn off the Surface Book. Insert the USB recovery drive and press and hold the Volume Up button while pressing the Power button. Release when you see the Surface logo. Follow the on-screen instructions to recover or reset your PC.

3. Resetting Windows

A full reset is the most effective way to remove potentially unwanted software.

1. Choose ‘Remove everything’: During the reset process, select the option to “Remove everything” and fully clean the drive.
2. Cloud Download (Recommended): If possible, choose to download Windows from the cloud during the reset. This ensures you get the latest version.

4. Update Everything

Outdated software is a major security risk.

1. Windows Updates: After resetting, immediately check for and install all available Windows updates. Go to Settings > Update & Security > Windows Update and click “Check for updates”.
2. Firmware Updates: Check for Surface-specific firmware updates using the Surface app.
3. Driver Updates: Ensure all drivers are up to date through Windows Update or by visiting the manufacturer’s website (usually Intel, NVIDIA, etc.).

5. Install Security Software

Protect your device from future threats.

1. Antivirus: Install a reputable antivirus program like Windows Defender (built-in), Bitdefender, or Norton. Run a full system scan immediately after installation.
2. Firewall: Ensure the Windows Firewall is enabled and properly configured.
3. Malware Scanner: Consider running a separate malware scanner like Malwarebytes to catch anything missed by your antivirus.

6. Secure Your Accounts

The previous owner might have saved accounts on the device.

1. Change Passwords: Change passwords for all important accounts (Microsoft account, email, social media, banking) from a different, trusted device.
2. Check Saved Passwords: Use Password Manager in Windows Settings to check and remove any saved passwords that you don’t recognize.
3. Two-Factor Authentication: Enable two-factor authentication (2FA) on all accounts that support it for an extra layer of security.

7. BitLocker Encryption

Protect your data if the device is lost or stolen.

1. Enable BitLocker: Enable BitLocker drive encryption to protect your hard drive. Go to Settings > Update & Security > Device encryption.

8. Check for Remote Access Tools

Look for software that allows remote control of the device.

1. Installed Apps: Review the list of installed apps in Settings > Apps > Apps & features and uninstall any unfamiliar or suspicious programs, especially those related to remote access (TeamViewer, AnyDesk, etc.).