Fix Windows Defender update error 0x80070643

You're trying to update Windows Defender (Microsoft Defender) and it just sits there, then throws error 0x80070643. This happens most often after a Windows update fails halfway, or when you've manually deleted some temp files and broke something. The update window shows 'Install error - 0x80070643' and the Defender engine refuses to update past a certain version.

What causes this

The culprit here is almost always corrupted update files in the SoftwareDistribution folder. Windows Defender relies on Windows Update components to download its definition updates. When those components get borked — say after a failed cumulative update or a disk cleanup that nuked the wrong files — the Defender update crashes with this generic error. Don't bother checking your internet connection, it rarely helps.

Fix it — use these steps in order

Step 1: Run the Windows Update troubleshooter

Open Settings (Win + I).
Go to Update & Security > Troubleshoot > Additional troubleshooters.
Select 'Windows Update' and run the troubleshooter.
Let it finish, then restart your PC.

This cleans up some basic corruption. If the error persists, move to step 2.

Step 2: Reset Windows Update components manually

This is the real fix. It stops the update services, clears the corrupted cache, and restarts everything fresh.

Open Command Prompt as administrator (right-click Start > Windows Terminal (Admin)).
Stop the update services by running these commands one by one:

net stop wuauserv
net stop cryptSvc
net stop bits
net stop msiserver

Rename the SoftwareDistribution and catroot2 folders (Windows will recreate them):

ren C:\Windows\SoftwareDistribution SoftwareDistribution.old
ren C:\Windows\System32\catroot2 catroot2.old

Restart the services:

net start wuauserv
net start cryptSvc
net start bits
net start msiserver

Close the command prompt and restart your PC.

Step 3: Run SFC and DISM

If the error still shows, your system files might be damaged. These commands check and repair them.

Open Command Prompt as admin again.
Run this first:

sfc /scannow

Wait for it to finish — can take 10-15 minutes. If it finds corrupted files, it'll fix them automatically.

Then run:

DISM /Online /Cleanup-Image /RestoreHealth

This fixes the Windows component store. Let it complete, then restart.

Step 4: Manually download and install the Defender update

Sometimes the built-in updater just won't cooperate. Grab the update from Microsoft directly.

Go to Microsoft's Defender update page.
Download the latest definition update (the one for your OS version — 64-bit or 32-bit).
Run the downloaded .exe file.
Restart your PC.

If it still fails

Check these things:

Disk space: Windows Update needs at least 5 GB free on C: drive. Check with File Explorer.
Antivirus conflict: If you have third-party antivirus (Norton, McAfee, etc.), disable it temporarily and retry the update. Those programs often block Defender updates.
Windows version: Make sure you're on Windows 10 version 2004 or newer, or Windows 11. Older builds don't support the latest Defender engine.
Check the Windows Update log: Press Win + R, type %windir%\WindowsUpdate.log. Look for lines with '0x80070643' and see what file failed. Usually it's a temp download that got stuck.

If none of this works, back up your data and use the Windows Media Creation Tool to do a repair install (keeps your files). That's the nuclear option, but it fixes 99% of these update issues.