privacy-settings/Privacy Settings/Windows-11.md

301 lines
9.9 KiB
Markdown
Raw Normal View History

2021-11-29 17:42:45 +01:00
# Windows 11 Privacy Settings
Go to Settings.
## System
#### Notifications
2022-11-29 16:47:59 +01:00
- Additional settings >
2023-10-08 19:40:38 +02:00
- Show the Windows welcome experience after updates and when signed in to show what's new and suggested: Off
2022-11-29 16:47:59 +01:00
- Suggest ways to get the most out of Windows and finish setting up this device: Off
- Get tips and suggestions when using Windows: Off
#### Nearby sharing
- Off (Enable this only when needed. Remember to turn it off when no longer required.)
2021-11-29 17:42:45 +01:00
2022-08-06 19:56:17 +02:00
#### Remote Desktop
**This feature is not available in Home editions**
- Off (Enable this only when needed. Remember to turn it off when no longer required.)
- Require device to use Network Level Authentication to connect: On
2021-11-29 17:42:45 +01:00
2021-12-29 21:19:33 +01:00
## Bluetooth & devices
#### Mobile devices
2024-06-02 19:48:23 +02:00
- Phone Link : Off (use something else like [KDE Connect](https://kdeconnect.kde.org/), [LocalSend](https://localsend.org/), etc.)
2021-12-29 21:19:33 +01:00
2022-08-06 19:56:17 +02:00
#### AutoPlay
- Use AutoPlay for all media and devices: Off
2021-12-29 21:19:33 +01:00
## Network & internet
2022-08-06 19:56:17 +02:00
#### Ethernet
- DNS server assignment > Edit >
- Edit DNS settings: Manual
- IPv4: On
2024-07-01 03:27:42 +02:00
- Preferred DNS: enter IPv4 address of a provider from [this list](https://www.privacyguides.org/en/dns/#recommended-providers)
2022-08-06 19:56:17 +02:00
Example: For Quad9, enter 9.9.9.9
2022-11-29 16:47:59 +01:00
- DNS over HTTPS: On (automatic template)
- Fallback to plaintext: Off
- Alternate DNS: enter alternate IPv4 address of the same provider as above or a different provider
2022-08-06 19:56:17 +02:00
Example: For Quad9, enter 149.112.112.112
2022-11-29 16:47:59 +01:00
- DNS over HTTPS: On (automatic template)
- Fallback to plaintext: Off
2022-08-06 19:56:17 +02:00
- IPv6: On
2024-07-01 03:27:42 +02:00
- Preferred DNS: enter IPv6 address of a provider from [this list](https://www.privacyguides.org/en/dns/#recommended-providers)
2022-08-06 19:56:17 +02:00
Example: For Quad9, enter 2620:fe::fe
2022-11-29 16:47:59 +01:00
- DNS over HTTPS: On (automatic template)
- Fallback to plaintext: Off
- Alternate DNS: enter alternate IPv6 address of the same provider as above or a different provider
2022-08-06 19:56:17 +02:00
2022-11-29 16:47:59 +01:00
Example: For Quad9, enter 2620:fe::9
- DNS over HTTPS: On (automatic template)
- Fallback to plaintext: Off
2022-08-06 19:56:17 +02:00
2024-05-05 15:15:08 +02:00
Click `Save`
2021-12-29 21:19:33 +01:00
#### Wi-Fi
- Random hardware addresses: On
2022-08-06 19:56:17 +02:00
- Hardware properties > DNS server assignment > Edit
- Edit DNS settings: Manual
- IPv4: On
2024-07-01 03:27:42 +02:00
- Preferred DNS: enter IPv4 address of a provider from [this list](https://www.privacyguides.org/en/dns/#recommended-providers)
2022-08-06 19:56:17 +02:00
Example: For Quad9, enter 9.9.9.9
2022-11-29 16:47:59 +01:00
- DNS over HTTPS: On (automatic template)
- Fallback to plaintext: Off
- Alternate DNS: enter alternate IPv4 address of the same provider as above or a different provider
2022-08-06 19:56:17 +02:00
Example: For Quad9, enter 149.112.112.112
2022-11-29 16:47:59 +01:00
- DNS over HTTPS: On (automatic template)
- Fallback to plaintext: Off
2022-08-06 19:56:17 +02:00
- IPv6: On
2024-07-01 03:27:42 +02:00
- Preferred DNS: enter IPv6 address of a provider from [this list](https://www.privacyguides.org/en/dns/#recommended-providers)
2022-08-06 19:56:17 +02:00
Example: For Quad9, enter 2620:fe::fe
2022-11-29 16:47:59 +01:00
- DNS over HTTPS: On (automatic template)
- Fallback to plaintext: Off
- Alternate DNS: enter alternate IPv6 address of the same provider as above or a different provider
2022-08-06 19:56:17 +02:00
2022-11-29 16:47:59 +01:00
Example: For Quad9, enter 2620:fe::9
- DNS over HTTPS: On (automatic template)
- Fallback to plaintext: Off
2021-12-29 21:19:33 +01:00
2024-05-05 15:15:08 +02:00
Click `Save`
2021-12-29 21:19:33 +01:00
## Personalization
#### Lock screen
- Personalize your lock screen
2024-05-05 15:15:08 +02:00
- select `Picture` or `Slideshow`
- Get fun facts, tips, tricks and more on your lock screen: Off
2023-10-08 19:40:38 +02:00
#### Start
- Show recommendations for tips, shortcuts, new apps and more: Off
2022-08-06 19:56:17 +02:00
#### Device usage
- Turn everything off
2021-11-29 17:42:45 +01:00
## Apps
2022-11-29 16:47:59 +01:00
#### Installed apps
2021-11-29 17:42:45 +01:00
Uninstall anything you don't use like XBox, candy crush, some other preinstalled apps/games etc.
2024-05-05 15:15:08 +02:00
Be sure not to uninstall anything important. If you have doubts about any app, search the net.
2021-11-29 17:42:45 +01:00
## Accounts
#### Your info
2024-07-01 03:27:42 +02:00
**This section is applicable only if you've signed in with a Microsoft account**
Delete your account picture and set it to default as mentioned below:
2021-11-29 17:42:45 +01:00
- Choose a file > Browse files
2024-05-05 15:15:08 +02:00
- Go to `C:\Users\JohnDoe\AppData\Roaming\Microsoft\Windows\AccountPictures` and delete your picture. (Replace `JohnDoe` with your username)
- Go to `C:\ProgramData\Microsoft\User Account Pictures` and select `guest.png`.
2021-11-29 17:42:45 +01:00
2023-10-08 19:40:38 +02:00
NOTE: `AppData` is a hidden folder by default. To enable: in file explorer on top click `View` > Show > select `Hidden items`.
2021-11-29 17:42:45 +01:00
#### Sign-in options
- Show account details such as my email address on the sign-in screen: Off
## Time & language
#### Typing
- Show text suggestions when typing on the physical keyboard: Off
- Typing insights: Off
## Privacy & security
#### Windows Security
- Virus & threat protection > Virus & threat protection settings > Manage settings > All protections on (Except automatic sample submission)
- Firewall & network protection > Firewall should be on for domain, public and private networks.
#### Find my device
- Find my device: Off
#### General
- All off
2024-06-13 18:34:54 +02:00
#### Recall & Snapshots
2024-07-01 03:27:42 +02:00
**This feature is available only on some devices**
2024-06-13 18:34:54 +02:00
- Save Snapshots: Off
- Delete Snapshots >
- Delete all snapshots: Delete all
2021-11-29 17:42:45 +01:00
#### Speech
- Online speech recognition: Off
#### Inking & typing personalization
2023-10-08 19:40:38 +02:00
- Custom inking and typing dictionary: Off
2021-11-29 17:42:45 +01:00
#### Diagnostics & feedback
- Diagnostic data > Send optional diagnostic data: Off
2022-11-29 16:47:59 +01:00
- Improve inking & typing: Off
2021-11-29 17:42:45 +01:00
- Tailored experiences: Off
- Delete diagnostic data: Delete
2023-10-08 19:40:38 +02:00
- Feedback frequency: Never
2022-08-06 19:56:17 +02:00
#### Activity history
- Send my activity history to Microsoft: Off
#### Search permissions
- Cloud content search
- Microsoft account: Off
- Work or School account: Off
2022-08-06 19:56:17 +02:00
- More settings
- Show search highlights: Off
2021-11-29 17:42:45 +01:00
2022-01-26 01:10:42 +01:00
#### App permissions
2021-11-29 17:42:45 +01:00
- Review each permission and disable accordingly (choose which apps can have access to location, camera, microphone, notifications etc. If any app doesn't need something, turn it off.)
2024-05-05 15:15:08 +02:00
- App diagnostics > App diagnostic access: Off
2021-11-29 17:42:45 +01:00
## Windows Update
2021-11-29 17:42:45 +01:00
#### Advanced options
- Delivery Optimization > Allow downloads from other PCs: Off
---
---
## Disable ads in file explorer
2023-10-08 19:40:38 +02:00
Open file explorer. Click 3 dots menu on top > Options >
- Click `View` on top of the new popup >
- Uncheck `Show sync provider notifications`
2024-05-05 15:15:08 +02:00
- Click `Apply`
2022-09-05 13:59:55 +02:00
- Also click "Apply to Folders" on top (if available)
## Disable telemetry service
2024-06-13 18:34:54 +02:00
Press `Win key + r` > type `services.msc` > press enter
2022-09-05 13:59:55 +02:00
2023-10-08 19:40:38 +02:00
- Double-click on `Connected User Experiences and Telemetry` >
- Service Status: Stopped (Click on `Stop`, if service is running)
2022-09-05 13:59:55 +02:00
- Startup Type: Disabled
2023-10-08 19:40:38 +02:00
- Click `OK`
2022-12-10 14:45:48 +01:00
2024-08-08 01:51:53 +02:00
## Block & uninstall Quick Assist
Press `Win key + r` > type `powershell` > press `ctrl + shift + enter` > Yes
- Type (or copy paste) the following in the powershell window & press enter:
```
notepad C:\Windows\System32\drivers\etc\hosts
```
2024-08-27 22:08:09 +02:00
- In this hosts file add the following line at the bottom & save it:
2024-08-08 01:51:53 +02:00
```
0.0.0.0 remoteassistance.support.services.microsoft.com
```
- To uninstall, type (or copy paste) the following in the powershell window & press enter:
```
Get-AppxPackage -Name MicrosoftCorporationII.QuickAssist | Remove-AppxPackage -AllUsers
```
2024-08-27 22:08:09 +02:00
## Block all Microsoft telemetry
Press `Win key + r` > type `powershell` > press `ctrl + shift + enter` > Yes
- Type (or copy paste) the following in the powershell window & press enter:
```
notepad C:\Windows\System32\drivers\etc\hosts
```
2024-08-27 22:30:02 +02:00
- Add everything from [this list](https://raw.githubusercontent.com/hagezi/dns-blocklists/main/hosts/native.winoffice.txt) at the bottom of the hosts file & save it.
2024-08-27 22:08:09 +02:00
The list is updated regularly, so remember to check back often & replace old entries in the hosts file with the most recent ones.
Windows updates will function normally even with these additions.
2022-12-10 14:45:48 +01:00
## Disable trending searches & web search in search bar
2024-06-13 18:34:54 +02:00
Press `Win key + r` > type `regedit` > press enter > Yes
2022-12-10 14:45:48 +01:00
- Navigate to `Computer\HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Search`
2024-06-13 18:34:54 +02:00
- In the left navigation window, right click on `Search` > New > DWORD (32-bit) Value > name it `BingSearchEnabled`
2023-11-25 13:37:59 +01:00
- Double click it and make sure `Value data` is set to `0`
- Open Task Manager > Processes > select `Windows Explorer` > Right click > Restart
## Disable Copilot
2024-06-13 18:34:54 +02:00
Press `Win key + r` > type `regedit` > press enter > Yes
2023-11-25 13:37:59 +01:00
- Navigate to `Computer\HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows`
- In the left navigation window, right click on `Windows` > New > Key > name it `WindowsCopilot`
- Right click on `WindowsCopilot` > New > DWORD (32-bit) Value > name it `TurnOffWindowsCopilot`
- Double click it and set `Value data` to `1` > OK
- Open Task Manager > Processes > select `Windows Explorer` > Right click > Restart
2024-09-13 00:55:11 +02:00
---
---
## Fresh install
#### Block preinstalled third-party bloatware
- In the installation media setup wizard, select `Time and currency format` as `English (World)`.
2024-09-19 01:02:15 +02:00
- Once the device restarts, an error (`Something went wrong`) will be displayed. Click on `Skip` & continue with the rest of the setup.
2024-09-13 00:55:11 +02:00
- After the whole setup completes & the device boots into Windows 11, go to Settings > Time & language > Language & region > Country or region: select your country/region
#### Bypass Microsoft account requirement
After the installation media setup wizard completes & the device begins to restart, disconnect your internet connection (even if you're unable to disconnect for any reason, keep following the process).
<br>After the device restarts, it'll reach the country or region selection screen.
- Press `Shift + F10`. On some devices you may require to press `Fn + Shift + F10`.
- In the command prompt, type the following & press enter:
```
oobe\bypassnro
```
Your device will restart.
- If for some reason you were unable to disconnect from the internet earlier, press `Shift + F10` or `Fn + Shift + F10` again. In the command prompt, type the following & press enter:
```
ipconfig /release
```
- Select `I don't have internet` & continue with the local account creation.
- If you used `ipconfig /release` command previously, once the whole setup process is complete:
- Press `Win key + r` > type `cmd` & press enter.
- In the command prompt, type the following & press enter:
```
2024-09-13 00:59:14 +02:00
ipconfig /renew
2024-09-13 00:55:11 +02:00
```