5.4 KiB
Windows 11 Privacy Settings
Go to Settings.
System
Notifications
- Offer suggestions on how I can set up my device: Off
- Get tips and suggestions when I use Windows: Off
Remote Desktop
This feature is not available in Home editions
- Off (Enable this only when needed. Remember to turn it off when no longer required.)
- Require device to use Network Level Authentication to connect: On
Bluetooth & devices
Phone Link
Do not link
AutoPlay
- Use AutoPlay for all media and devices: Off
Network & internet
Ethernet
- DNS server assignment > Edit >
- Edit DNS settings: Manual
- IPv4: On
-
Preferred DNS: enter IPv4 address of a provider from this list
Example: For Quad9, enter 9.9.9.9
-
Preferred DNS encryption: Encrypted only (DNS over HTTPS)
-
Alternate DNS server: enter alternate IPv4 address of the same provider as above or a different provider
Example: For Quad9, enter 149.112.112.112
-
Alternate DNS encryption: Encrypted only (DNS over HTTPS)
-
- IPv6: On
-
Preferred DNS: enter IPv4 address of a provider from this list
Example: For Quad9, enter 2620:fe::fe
-
Preferred DNS encryption: Encrypted only (DNS over HTTPS)
-
Alternate DNS server: enter alternate IPv4 address of the same provider as above or a different provider
Example: For Quad9, enter 2620:fe::fe:9
-
Alternate DNS encryption: Encrypted only (DNS over HTTPS)
-
Wi-Fi
- Random hardware addresses: On
- Hardware properties > DNS server assignment > Edit
- Edit DNS settings: Manual
- IPv4: On
-
Preferred DNS: enter IPv4 address of a provider from this list
Example: For Quad9, enter 9.9.9.9
-
Preferred DNS encryption: Encrypted only (DNS over HTTPS)
-
Alternate DNS server: enter alternate IPv4 address of the same provider as above or a different provider
Example: For Quad9, enter 149.112.112.112
-
Alternate DNS encryption: Encrypted only (DNS over HTTPS)
-
- IPv6: On
-
Preferred DNS: enter IPv4 address of a provider from this list
Example: For Quad9, enter 2620:fe::fe
-
Preferred DNS encryption: Encrypted only (DNS over HTTPS)
-
Alternate DNS server: enter alternate IPv4 address of the same provider as above or a different provider
Example: For Quad9, enter 2620:fe::fe:9
-
Alternate DNS encryption: Encrypted only (DNS over HTTPS)
-
Personalization
Lock screen
- Personalize your lock screen
- select Picture or Slideshow
- Get fun facts, tips, tricks and more on your lock screen: Off
Device usage
- Turn everything off
Apps
Apps & features
Uninstall anything you don't use like XBox, candy crush, some other preinstalled apps/games etc. Be sure not to uninstall anything important. If you have doubts about any app, either ask or search the net.
Accounts
Your info
Delete your account picture and set it to default.
- Choose a file > Browse files
- Go to C:\Users\Username\AppData\Roaming\Microsoft\Windows\AccountPictures and delete your picture.
- Go to C:\ProgramData\Microsoft\User Account Pictures and select any one.
NOTE: AppData is a hidden folder by default.
- To enable: in file explorer on top click View > Show > select Hidden items.
Sign-in options
- Show account details such as my email address on the sign-in screen: Off
Time & language
Typing
- Show text suggestions when typing on the physical keyboard: Off
- Typing insights: Off
Privacy & security
Windows Security
- Virus & threat protection > Virus & threat protection settings > Manage settings > All protections on (Except automatic sample submission)
- Firewall & network protection > Firewall should be on for domain, public and private networks.
Find my device
- Find my device: Off
General
- All off
Speech
- Online speech recognition: Off
Inking & typing personalization
- Personal inking and typing dictionary: Off
Diagnostics & feedback
- Diagnostic data > Send optional diagnostic data: Off
- Improve inking & typing recognition: Off
- Tailored experiences: Off
- Delete diagnostic data: Delete
Activity history
- Send my activity history to Microsoft: Off
Search permissions
- Cloud content search
- Microsoft account: Off
- Work or School account: Off
- History
- Search history on this device: Off
- Clear device search history
- More settings
- Show search highlights: Off
App permissions
- Review each permission and disable accordingly (choose which apps can have access to location, camera, microphone, notifications etc. If any app doesn't need something, turn it off.)
- App diagnostics > Toggle off both
Windows Update
Advanced options
- Delivery Optimization > Allow downloads from other PCs: Off
Disable ads in file explorer
Open file explorer. Click 3 dots menu on top, located to the right of "View" > Options >
- Click "View" on top of the new popup >
- Uncheck "Show sync provider notifications"
- Click Apply
- Also click "Apply to Folders" on top (if available)
Disable telemetry service
Win key + r > type services.msc > press enter
- Double-click on "Connected User Experiences and Telemetry" >
- Service Status: Stopped (Click on Stop, if service is running)
- Startup Type: Disabled
- Click OK