Rufus: A complete guide to creating bootable USB drives with UEFI, Secure Boot, and GPT

Last update: 09/05/2026
Author Isaac
  • Rufus allows you to create bootable USB drives compatible with UEFI, Secure Boot, and GPT and MBR partition schemes.
  • Version 4.14 adds key improvements for Windows installations and advanced support for specific ISOs.
  • The project is free software under GPLv3, with transparent development and extensive community collaboration.
  • Its reliability and flexibility make it a benchmark tool for users and professionals.

Bootable USB drive with Rufus for Windows and Linux

If you often struggle with Windows or Linux installations, sooner or later you'll come across Rufus. This small utility has become the go-to tool for creating fast, reliable bootable USB drives compatible with UEFI, Secure Boot, and GPT partitions , even on modern computers that come with limited features from the factory.

In this article, we'll take a step-by-step look at how to use Rufus in 2026 to prepare a USB drive for installing Windows 10, Windows 11, or other ISOs (including Linux distributions ). We'll discuss the implications of UEFI, Secure Boot, legacy BIOS, MBR/GPT , and the advanced options included in the latest version 4.14, which is packed with new features designed to improve the Windows installation experience.

What is Rufus and what exactly is it used for?

Rufus interface for creating bootable USB

Rufus is a free and open-source program for Windows designed to format and create bootable USB drives . It works with USB flash drives, memory cards, and generally any USB flash drive that the system detects as a removable disk.

Its main function is to help you when you need to boot a computer from a USB drive instead of the internal hard drive . This could be for installing Windows or Linux, booting a rescue system, running a diagnostic tool, or even flashing the BIOS from a minimalist DOS environment.

Among the most common uses of Rufus are some very specific scenarios that it handles particularly well: creating installation media from official Windows 10 and Windows 11 ISOs , preparing bootable USB drives with Linux distributions (Ubuntu, Fedora, etc.), generating DOS flash drives to update firmware, and launching low-level utilities that cannot be run from Windows.

Despite its small size, Rufus integrates everything necessary to manage partition formats (MBR/GPT), target firmware types (legacy BIOS, pure UEFI, UEFI with CSM) and different boot schemes, making it a very flexible solution for both older computers and modern laptops with Secure Boot.

Rufus system requirements and compatibility

Rufus creating bootable USB with UEFI and GPT

Rufus is designed to run on relatively recent Windows systems, so you need at least Windows 8 or later (including Windows 10 and Windows 11) to use it. It requires no installation: simply download the executable, save it wherever you like, and open it directly.

The Rufus file comes digitally signed so you can verify its authenticity. Depending on the version, the signature should read "Akeo Consulting" in Rufus 1.3.0 or later , or "Pete Batard – Open Source Developer" in older versions. This is an important detail if you download the program from outside the official website and want to ensure it hasn't been modified.

Another interesting point is that Rufus is translated into a long list of languages. Among the supported languages ​​are Spanish, English, French, German, Italian, Portuguese, Russian, Simplified and Traditional Chinese, Japanese, Korean, and many more . The developer explicitly acknowledges the work of the translation community that has been responsible for localizing both the program and the website.

Although the executable is very compact, Rufus works well with a wide variety of ISO images . The website itself mentions that it includes a non-exhaustive list of tested ISOs, ranging from Windows versions to numerous Linux distributions and rescue tools, so you'll rarely encounter an ISO that doesn't work.

GPLv3 license, transparency and absence of donations

One of the lesser-known but most important aspects of Rufus is its development model. The program is distributed under the GNU GPL version 3 (GPLv3) or later license , a copyleft license that guarantees the source code remains free and can be modified and redistributed as long as its conditions are respected.

This means that any user or company can use, redistribute, modify, or even sell Rufus , as long as they maintain the same license and respect the terms of the GPLv3. The author emphasizes that the project is developed in a completely transparent manner from its public code, in a MinGW32 environment, following best practices of free software.

Regarding funding, Rufus has a very clear stance: there is no donation button on the official website . The developer believes that direct donation systems don't usually contribute to sustainable development and tend to generate a sense of guilt in those who cannot or do not want to donate money.

Instead, the author advocates for patronage or sponsorship from companies that benefit from a healthy FLOSS ecosystem. He also emphasizes that, since he can develop the project in his spare time without financial worries, he prefers that people direct their generosity toward organizations that need it more, such as the Free Software Foundation, which he explicitly mentions as a good recipient of donations.

The website relies on in-page ads as a source of income , which the author considers sufficient to sustain the project. Even so, he expresses his gratitude for the constant support and enthusiasm of users, emphasizing that Rufus can be used without any guilt or financial obligation of any kind.

  Windows 10: Effective Solution - How to Remove "Your Windows License Will Expire Soon" Message

Key changes in Rufus 4.14 and improvements for Windows

Version 4.14, released in late April 2026, introduces a number of new features designed to improve the Windows installation experience from a USB drive created with Rufus . These improvements focus particularly on customizing the environment and automating parts of the process.

Among the new Quality of Life options is the ability to automatically disable certain components forced by Microsoft , such as Teams, Outlook, Copilot, and other "annoyances" that are installed by default in recent versions of Windows. This is very useful in corporate environments or for users who want a cleaner system from the first boot.

Another powerful feature of Rufus 4.14 is the option to silently install Windows on the first detected disk , without requiring user interaction and, importantly, without displaying any warnings. In other words, the installer launches and proceeds directly to install Windows on the first disk it detects. This should be used with extreme caution, but it can save a lot of time in large-scale deployments. For other deployment and cloning strategies, you can consult guides on system cloning such as Clonezilla.

The update also adds the ability to automatically copy the SkuSiPolicy.p7b file to the ESP partition during installation, as detailed in Microsoft bulletin KB5042562. This feature is useful in environments where you work with security policies or specific configurations linked to that boot policy.

Regarding ISO image support, Rufus 4.14 includes limited compatibility with extracting El-Torito UEFI images , particularly for certain Dell BIOS update ISOs. It also improves the detection of GRUB and Isolinux MBRs, as well as the identification and exclusion of new hidden volumes created by Bitdefender as VHDs, which could interfere with target selection. To identify devices and volumes, you can use tools that allow you to query the USB hardware ID.

Finally, Windows To Go media management has been refined , correcting errors related to newer versions of the bcdboot tool, and the UEFI:NTFS partition label has been adjusted to make it clearer which media is being used during the Windows Setup partitioning phase. All of this is accompanied by clearer error messages when the user tries to use an ISO located on the same drive they want to format, avoiding some confusing situations.

Supports ISO images, Windows and Linux distributions

Rufus has allowed you to create bootable USB drives from ISO files for a very long time. In fact, all versions since 1.1.0 support creating bootable media from ISOs , so you won't have any problems with virtually any modern Windows or most popular Linux distributions.

If you have a physical DVD or a set of installation files and folders, you can first create an ISO image using free tools like InfraRecorder or CDBurnerXP, and then use that ISO with Rufus. This combination allows you to transform old physical discs into much faster and more convenient USB installers. And if you're working from macOS, there are specific guides for creating bootable Windows USB drives on a Mac, such as this one on creating a bootable USB drive for Mac.

Rufus's own documentation mentions a list of known and tested working ISOs (not exhaustive), which includes everything from Windows versions to numerous Linux distributions and rescue utilities. Although not detailed in the text we have, it is known that Rufus correctly handles UEFI, hybrid, and many custom ISOs as long as they meet certain minimum formatting requirements.

In corporate environments, it's common to work with Windows 10 Enterprise ISOs obtained through Microsoft volume licensing . These ISOs typically work seamlessly with Rufus, which converts them into perfectly valid USB installers for enterprise computers configured with UEFI and, in many cases, with Secure Boot enabled.

In addition to Windows, Rufus has been improving its compatibility with Fedora derivatives like Bazzite , which don't strictly adhere to standard EFI conventions. Version 4.14 includes specific improvements for these types of distributions, ensuring that the resulting USB drive boots correctly even when the ISO structure isn't typical.

Rufus, UEFI, GPT and Secure Boot: what you need to know

One of the points that generates the most confusion among users is the relationship between Rufus and UEFI, GPT partitions, and the Secure Boot mechanism . Modern laptops, such as many HP EliteBook models, come factory-configured to boot only in UEFI mode with Secure Boot enabled, which in theory blocks any boot loader that is not signed with a recognized key.

Rufus offers various "Target System" options that allow you to choose whether the USB drive will be geared towards Legacy BIOS, pure UEFI, or both . When you select UEFI mode, Rufus adapts the partitioning scheme and boot type to the requirements of that firmware, typically using GPT and a suitable EFI system partition (ESP). To better understand how the boot process works in UEFI, you can read a detailed description of the UEFI boot process.

  PowerShell Commands for Writing to Files: A Complete Guide

However, there's an important caveat: due to its GPLv3 license, certain Rufus components cannot be officially signed for Secure Boot by Microsoft . This means the program itself warns that, in some cases, it will be necessary to disable Secure Boot to use a USB drive created with Rufus, because the bootloader used would not have an accepted signature.

This warning has led to some confusion. Some users report that, in practice, they have been able to boot without problems from USB drives created with Rufus on laptops with Secure Boot enabled , especially when using an official Windows 10 or Windows 11 ISO, which already includes its own signed binaries. In these cases, the boot process is performed using Microsoft's own bootloader, which is signed, thus passing the Secure Boot filter.

Does this mean Rufus's message is incorrect? No. What Rufus emphasizes is that standalone GPLv3 components cannot be signed for Secure Boot due to Microsoft's own policy restrictions. However, if the boot process relies on pre-signed binaries included in the ISO (as is the case with Windows), the result is usually compatible. In any case, when the primary boot loader is an alternative one, it may be necessary to disable Secure Boot in the BIOS to allow booting.

In environments where security is a priority, it's advisable to carefully review what's being loaded at boot time. Using Rufus to create the USB drive doesn't inherently compromise system security , provided the source ISO is legitimate and trustworthy (for example, downloaded from the official Microsoft website or the corresponding Linux distribution) and the file's integrity is verified.

Creating a bootable Windows USB drive with Rufus

Many users turn to Rufus because they need to install or reinstall Windows 8.1, Windows 10, or Windows 11 from scratch and want to avoid problems with official tools that sometimes fail or don't correctly detect the USB drive. A typical scenario is a PC that no longer boots and requires a clean installation from an ISO image and a USB drive.

In this scenario, you'll need an ISO image of the operating system you want to install (for example, a downloaded, licensed copy of Windows 8.1) and a sufficiently large USB drive, typically 8 GB or more for modern versions of Windows. Once you have these, Rufus will format the drive, configure the appropriate partition scheme, and copy the necessary files so your computer can boot from the USB drive.

Unlike Microsoft's official media creation tool, which in some cases generates USB drives that don't appear in the boot menu or behave erratically with certain UEFI firmwares, Rufus offers finer control over the partition type (MBR vs GPT) and the target system (UEFI, BIOS), helping to resolve incompatibilities that would otherwise require tinkering with the BIOS without a clear understanding of what is being changed.

When a user reports that the USB drive created with the official Windows 11 wizard doesn't boot or appear in the boot menu, a common solution is to use Rufus with the corresponding ISO image. This is a safe and widely used way to obtain a functional bootable USB drive recognized by most modern motherboards , provided the correct options are selected for the target computer.

In the specific case of Windows 8.1 or Windows 10 on older computers that previously had that operating system, Rufus is also very useful for performing clean reinstalls when the system becomes corrupted, as happened to the user whose Windows 8.1 stopped booting. With a good ISO image and a sufficiently large USB drive, the tool allows you to create a perfectly valid installation medium in just a few minutes, which you then simply select from the PC's boot menu.

DOS support and use with older BIOS

Although today almost everything revolves around UEFI, Rufus still maintains very useful support for creating bootable DOS drives . This is especially handy when you need to flash a classic BIOS, update firmware, or run very low-level utilities designed to run in pure DOS.

If you create a bootable DOS USB drive and use a non-US keyboard, Rufus will automatically attempt to select a keyboard layout that matches your system's regional settings . Therefore, if your operating system is in Spanish, the special characters and key layout will be adjusted, as much as possible, to what you're used to.

On truly ancient systems, where only legacy BIOS exists and there's no trace of UEFI, Rufus offers the option to create MBR boot drives and a Legacy BIOS-compatible bootloader , allowing you to boot without problems even on hardware that hasn't received updates in many years. If you encounter USB errors in Windows when connecting older drives, there are specific guides for troubleshooting USB descriptor errors.

  Fix: Skype not opening or responding on Residence Home windows 10

This combination of modern UEFI compatibility and support for classic BIOS and DOS is one of the reasons why Rufus has become an almost indispensable tool for technicians and administrators , allowing them to move between new and old systems using the same USB drive, adjusting only a couple of parameters depending on the destination. If you prefer a different approach to USB multiboot, there are also solutions like Ventoy that make it easy to carry multiple ISOs on a single drive.

Safety, reliability and use in professional environments

A recurring question is whether Rufus is safe, especially when presented as an alternative to Microsoft's official tool. The general answer is that, if downloaded from its official website or trusted repositories and the digital signature is verified, Rufus is a reliable utility widely used in professional environments.

Companies deploying Windows 10 Enterprise from volume licensing ISOs have been using Rufus for years to create USB installation media for corporate laptops with Secure Boot enabled, such as the HP EliteBook series. The fact that the process works and the computers boot correctly is good evidence of its reliability, provided internal security policies are followed.

When combining Rufus, a simple UEFI firmware, and an official ISO, the main risk factor is not the tool itself, but the origin and integrity of the ISO . Therefore, it's advisable to download operating system images from official websites or trusted sources, and to verify the hashes when the vendor publishes them.

Regarding technical integrity, Rufus has a Frequently Asked Questions (FAQ) page hosted on GitHub, which addresses common questions about boot failures, Secure Boot compatibility, use with different ISO types, write errors, and much more . The GitHub issue system is also used to report bugs, request improvements, or provide feedback, further enhancing the project's transparency.

This openness to feedback and the ability to constantly evolve are key for Rufus to maintain a high level of compatibility with current hardware and software , incorporating specific patches for cases such as Bitdefender's hidden VHDs or Dell's BIOS update images, which are not exactly home user scenarios, but rather day-to-day issues for system administrators.

Community participation and open development

Rufus isn't backed by a large corporation, but rather a project that has steadily grown thanks to a combination of a very active lead developer and a community that contributes translations, testing, and suggestions . The source code remains public, and any interested developer is openly invited to experiment with it and propose patches.

The main repository is managed through GitHub, where you can view the change history , see the evolution of versions, and follow the log of issues and improvements. This allows you to understand why certain decisions were made, how errors were corrected, and what problems were encountered with different firmwares, ISOs, or antivirus software.

Because it is licensed under GPLv3, any improvements must adhere to that license, ensuring the project remains free software at all times . This philosophy aligns with the idea that tools so critical to system administration should be auditable, reviewable, and adaptable to specific contexts without relying on the rigid decisions of a single vendor.

Overall, Rufus's way of working—without a direct donation model, with advertising revenue, with transparent code publication, and with active participation on GitHub—makes the tool a solid benchmark within the ecosystem of operating system installation and rescue utilities , not only for advanced home users but also for professionals.

All of the above makes Rufus a key tool for anyone who needs to deal with system installations or repairs: from quickly creating a bootable USB drive compatible with UEFI, GPT, and Secure Boot to install Windows 10 or 11, to preparing a DOS drive for flashing BIOS on older computers, as well as supporting modern Linux distributions and very specific cases like Bazzite or Dell tools. With a solid technical foundation, open development, a huge range of languages, and a clear focus on user experience, it's difficult to find an alternative today that combines simplicity, power, and transparency at the level that Rufus offers.

Create a bootable USB drive for Windows 11 using the Rufus media creation tool
Related articles:
How to create a bootable Windows 11 USB drive using the official tool and Rufus