How can I make a Windows 11 laptop safer and easier to use?

Start with a standard Windows account for her and keep a separate administrator account for maintenance. That makes system-wide changes and many software installations require administrator approval, though it won't stop every unwanted app or browser extension.

Keep Windows, the browser, and Microsoft Defender updated. Put shortcuts to her email and other regular sites somewhere easy to find, and remove shortcuts she doesn't need. A simpler screen can help her avoid clicking the wrong thing.

What you're describing is an allowlist: access is restricted to approved sites rather than trying to block every bad site. Browser or Windows policy controls can help set that up, depending on the edition and tools available.

It takes some upkeep. Email links, sign-in pages, and services used by an approved site may lead to other domains, so expect to adjust the rules. And an allowed email account can still receive a scam message. The list isn't a complete safety net.

I'd focus on a couple of simple habits too. Tell her not to call phone numbers in alarming pop-ups or give remote access to someone who contacts her unexpectedly. If a message asks for money, passwords, or urgent action, she can check with a trusted person first.

Those warnings matter even if she's only reading email or visiting familiar sites. Technical controls can reduce risk, but they can't catch every scam.

A protective DNS service is another layer worth considering. Some services block known malicious domains, though they won't catch everything and can occasionally block a legitimate site. Make sure the person helping her knows how to change the setting if it causes trouble.

If she really only needs web services, ChromeOS Flex is an alternative to consider instead of Windows. Check whether the laptop is supported and whether her devices and needed apps will work first. It's a bigger change than securing the existing Windows setup, not a requirement.