239 lines
7.0 KiB
Markdown
239 lines
7.0 KiB
Markdown
# Windows 10 Privacy Settings
|
|
|
|
Go to Settings.
|
|
|
|
|
|
|
|
## System
|
|
|
|
#### Notifications & actions
|
|
- Show notifications on the lock screen: Off
|
|
- Show reminders and incoming VoIP calls on the lock screen: Off
|
|
- Suggest ways I can finish setting up my device to get the most out of Windows: Off
|
|
- Get tips, tricks and suggestions as you use Windows: Off
|
|
|
|
#### Shared experiences
|
|
- Nearby sharing: Off (Enable this only when needed. Remember to turn it off when no longer required.)
|
|
- Share across devices: Off
|
|
|
|
#### Remote Desktop
|
|
**This feature is not available in Home editions**
|
|
- Off (Enable this only when needed. Remember to turn it off when no longer required.)
|
|
- Require device to use Network Level Authentication to connect: On
|
|
|
|
|
|
|
|
## Devices
|
|
|
|
#### Typing
|
|
- Spelling
|
|
- Autocorrect misspelled words: Off
|
|
- Highlight misspelled word: Off
|
|
- Typing
|
|
- Show text suggestions as I type on the software keyboard: Off
|
|
- Hardware keyboard
|
|
- Show text suggestions as I type: Off
|
|
- Autocorrect misspelled words I type: Off
|
|
- Multilingual text suggestions
|
|
- Show text suggestions based on the recognized languages you're typing in: Off
|
|
|
|
#### AutoPlay
|
|
- Use AutoPlay for all media and devices: Off
|
|
|
|
|
|
## Phone
|
|
- Do not link (use something else like [KDE Connect](https://kdeconnect.kde.org/), [LocalSend](https://localsend.org/), etc.)
|
|
|
|
|
|
|
|
## Network & Internet
|
|
|
|
#### Wi-Fi
|
|
- Random hardware addresses (if available): On
|
|
|
|
|
|
|
|
## Personalization
|
|
|
|
#### Lock screen
|
|
- Background: select Picture or Slideshow
|
|
- Get fun facts, tips, tricks and more on your lock screen: Off
|
|
|
|
#### Start
|
|
- Show suggestions occasionally in Start: Off
|
|
|
|
|
|
|
|
## Apps
|
|
|
|
#### Apps & features
|
|
Uninstall anything you don't use like XBox, candy crush, some other preinstalled apps/games etc.
|
|
Be sure not to uninstall anything important. If you have doubts about any app, search the net.
|
|
|
|
|
|
|
|
## Accounts
|
|
|
|
#### Your info
|
|
**This section is applicable only if you've signed in with a Microsoft account**
|
|
|
|
Delete your account picture and set it to default as mentioned below:
|
|
- Choose a file > Browse files
|
|
- Go to `C:\Users\JohnDoe\AppData\Roaming\Microsoft\Windows\AccountPictures` and delete your picture. (Replace `JohnDoe` with your username)
|
|
- Go to `C:\ProgramData\Microsoft\User Account Pictures` and select `guest.png`.
|
|
|
|
> :information_source: **NOTE**: `AppData` is a hidden folder by default. To enable: in file explorer on top click `View` > select `Hidden items`.
|
|
|
|
#### Sign-in options
|
|
- Require sign-in: When PC wakes up from sleep
|
|
- Privacy
|
|
- Show account details such as my email address on the sign-in screen: Off
|
|
|
|
|
|
|
|
## Search
|
|
|
|
#### Permissions & History
|
|
- Cloud content search
|
|
- Microsoft account: Off
|
|
- Work or school account: Off
|
|
- History
|
|
- Search history on this device: Off
|
|
- Clear device search history
|
|
|
|
|
|
|
|
## Privacy
|
|
|
|
#### General
|
|
- All off
|
|
|
|
#### Speech
|
|
- Online speech recognition: Off
|
|
|
|
#### Inking & typing
|
|
- Getting to know you: Off
|
|
|
|
#### Diagnostics & feedback
|
|
- Diagnostic data: Required diagnostic data
|
|
- Improve inking & typing recognition: Off
|
|
- Tailored experiences: Off
|
|
- Delete diagnostic data: Delete
|
|
|
|
#### Activity history
|
|
- Send my activity history to Microsoft: Off
|
|
|
|
#### App permissions
|
|
- Review each permission and disable accordingly (choose which apps can have access to camera, microphone, gps, notifications etc. If any app doesn't need something, turn it off.)
|
|
- App diagnostics > Change > Off
|
|
|
|
|
|
|
|
## Update & Security
|
|
|
|
#### Delivery Optimization
|
|
- Allow downloads from other PCs: Off
|
|
|
|
#### Windows Security
|
|
|
|
- Virus & threat protection > Virus & threat protection settings > Manage settings > All protections on (Except automatic sample submission)
|
|
- Firewall & network protection > All firewalls should be on for domain, public and private networks.
|
|
|
|
|
|
|
|
## Encrypted DNS
|
|
Win key + r > type `ncpa.cpl` > press enter
|
|
|
|
Right click on Ethernet or Wifi depending on what you are using > Properties
|
|
|
|
- Select Internet Protocol Version 4 (TCP/IPv4) > Properties > select Use the following DNS server addresses:
|
|
- Preferred DNS server: enter IPv4 address of a provider from [this list](https://www.privacyguides.org/en/dns/#recommended-providers)
|
|
|
|
Example: For Quad9, enter 9.9.9.9
|
|
|
|
- Alternate DNS server: enter alternate IPv4 address of the same provider as above or a different provider
|
|
|
|
Example: For Quad9, enter 149.112.112.112
|
|
|
|
Click `OK`
|
|
|
|
- Select Internet Protocol Version 6 (TCP/IPv6) > Properties > select Use the following DNS server addresses:
|
|
- Preferred DNS server: enter IPv6 address of a provider from [this list](https://www.privacyguides.org/en/dns/#recommended-providers)
|
|
|
|
Example: For Quad9, enter 2620:fe::fe
|
|
|
|
- Alternate DNS server: enter alternate IPv6 address of the same provider as above or a different provider
|
|
|
|
Example: For Quad9, enter 2620:fe::9
|
|
|
|
Click `OK`
|
|
|
|
|
|
---
|
|
---
|
|
|
|
|
|
## Disable ads in file explorer
|
|
Open file explorer > click `View` on top > Options > Change folder and search options
|
|
- Click `View` on top of the new popup >
|
|
- Uncheck `Show sync provider notifications`
|
|
- Click `Apply`
|
|
- Also click `Apply to Folders` on top (if available)
|
|
|
|
|
|
|
|
## Disable telemetry service
|
|
Press `Win key + r` > type `services.msc` > press enter
|
|
|
|
- Double-click on `Connected User Experiences and Telemetry` >
|
|
- Service Status: Stopped (Click on `Stop`, if service is running)
|
|
- Startup Type: Disabled
|
|
- Click `OK`
|
|
|
|
|
|
|
|
## Block & uninstall Quick Assist
|
|
Press `Win key + r` > type `powershell` > press `ctrl + shift + enter` > Yes
|
|
|
|
- Type (or copy paste) the following in the powershell window & press enter:
|
|
```
|
|
notepad C:\Windows\System32\drivers\etc\hosts
|
|
```
|
|
- In this hosts file add the following line at the bottom & save it:
|
|
```
|
|
0.0.0.0 remoteassistance.support.services.microsoft.com
|
|
```
|
|
- To uninstall, type (or copy paste) the following in the powershell window & press enter:
|
|
```
|
|
Get-AppxPackage -Name MicrosoftCorporationII.QuickAssist | Remove-AppxPackage -AllUsers
|
|
```
|
|
|
|
|
|
|
|
## Block all Microsoft telemetry
|
|
Press `Win key + r` > type `powershell` > press `ctrl + shift + enter` > Yes
|
|
|
|
- Type (or copy paste) the following in the powershell window & press enter:
|
|
```
|
|
notepad C:\Windows\System32\drivers\etc\hosts
|
|
```
|
|
- Add everything from [this list](https://raw.githubusercontent.com/hagezi/dns-blocklists/main/hosts/native.winoffice.txt) at the bottom of the hosts file & save it.
|
|
|
|
The list is updated regularly, so remember to check back often & replace old entries in the hosts file with the most recent ones.
|
|
Windows updates will function normally even with these additions.
|
|
|
|
|
|
|
|
## Disable search highlights in search bar
|
|
Right click on taskbar > Search > uncheck `Show search highlights`
|
|
|
|
|
|
|
|
## Disable trending searches & web search in search bar
|
|
Press `Win key + r` > type `regedit` > press enter > Yes
|
|
|
|
- Navigate to `Computer\HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Search`
|
|
- In the left navigation window, right click on `Search` > New > DWORD (32-bit) Value > name it `BingSearchEnabled`
|
|
- Double click it and make sure `Value data` is set to `0`
|
|
- Open Task Manager > Processes > select `Windows Explorer` > Right click > Restart
|