miracle091/privacy-settings
miracle091
/
privacy-settings
mirror of https://github.com/StellarSand/privacy-settings.git
0
0
Fork 0
Code
privacy-settings/Privacy Settings/Windows-11.md

5.1 KiB
Raw Blame History

Windows 11 Privacy Settings

Go to Settings.

System

Notifications

  • Offer suggestions on how I can set up my device: Off
  • Get tips and suggestions when I use Windows: Off

Remote Desktop

This feature is not available in Home editions

  • Off (Enable this only when needed. Remember to turn it off when no longer required.)
  • Require device to use Network Level Authentication to connect: On

Bluetooth & devices

Phone Link

Do not link

AutoPlay

  • Use AutoPlay for all media and devices: Off

Network & internet

Ethernet

  • DNS server assignment > Edit >
    • Edit DNS settings: Manual
    • IPv4: On

      • Preferred DNS: enter IPv4 address of a provider from this list

        Example: For Quad9, enter 9.9.9.9

      • Preferred DNS encryption: Encrypted only (DNS over HTTPS)

      • Alternate DNS server: enter alternate IPv4 address of the same provider as above or a different provider

        Example: For Quad9, enter 149.112.112.112

      • Alternate DNS encryption: Encrypted only (DNS over HTTPS)

    • IPv6: On

      • Preferred DNS: enter IPv4 address of a provider from this list

        Example: For Quad9, enter 2620:fe::fe

      • Preferred DNS encryption: Encrypted only (DNS over HTTPS)

      • Alternate DNS server: enter alternate IPv4 address of the same provider as above or a different provider

        Example: For Quad9, enter 2620:fe::fe:9

      • Alternate DNS encryption: Encrypted only (DNS over HTTPS)

Wi-Fi

  • Random hardware addresses: On
  • Hardware properties > DNS server assignment > Edit
    • Edit DNS settings: Manual
    • IPv4: On

      • Preferred DNS: enter IPv4 address of a provider from this list

        Example: For Quad9, enter 9.9.9.9

      • Preferred DNS encryption: Encrypted only (DNS over HTTPS)

      • Alternate DNS server: enter alternate IPv4 address of the same provider as above or a different provider

        Example: For Quad9, enter 149.112.112.112

      • Alternate DNS encryption: Encrypted only (DNS over HTTPS)

    • IPv6: On

      • Preferred DNS: enter IPv4 address of a provider from this list

        Example: For Quad9, enter 2620:fe::fe

      • Preferred DNS encryption: Encrypted only (DNS over HTTPS)

      • Alternate DNS server: enter alternate IPv4 address of the same provider as above or a different provider

        Example: For Quad9, enter 2620:fe::fe:9

      • Alternate DNS encryption: Encrypted only (DNS over HTTPS)

Personalization

Lock screen

  • Personalize your lock screen
    • select Picture or Slideshow
    • Get fun facts, tips, tricks and more on your lock screen: Off

Device usage

  • Turn everything off

Apps

Apps & features

Uninstall anything you don't use like XBox, candy crush, some other preinstalled apps/games etc. Be sure not to uninstall anything important. If you have doubts about any app, either ask or search the net.

Accounts

Your info

Delete your account picture and set it to default.

  • Choose a file > Browse files
  • Go to C:\Users\Username\AppData\Roaming\Microsoft\Windows\AccountPictures and delete your picture.
  • Go to C:\ProgramData\Microsoft\User Account Pictures and select any one.

NOTE: AppData is a hidden folder by default.

  • To enable: in file explorer on top click View > Show > select Hidden items.

Sign-in options

  • Show account details such as my email address on the sign-in screen: Off

Time & language

Typing

  • Show text suggestions when typing on the physical keyboard: Off
  • Typing insights: Off

Privacy & security

Windows Security

  • Virus & threat protection > Virus & threat protection settings > Manage settings > All protections on (Except automatic sample submission)
  • Firewall & network protection > Firewall should be on for domain, public and private networks.

Find my device

  • Find my device: Off

General

  • All off

Speech

  • Online speech recognition: Off

Inking & typing personalization

  • Personal inking and typing dictionary: Off

Diagnostics & feedback

  • Diagnostic data > Send optional diagnostic data: Off
  • Improve inking & typing recognition: Off
  • Tailored experiences: Off
  • Delete diagnostic data: Delete

Activity history

  • Send my activity history to Microsoft: Off

Search permissions

  • Cloud content search
    • Microsoft account: Off
    • Work or School account: Off
  • History
    • Search history on this device: Off
    • Clear device search history
  • More settings
    • Show search highlights: Off

App permissions

  • Review each permission and disable accordingly (choose which apps can have access to location, camera, microphone, notifications etc. If any app doesn't need something, turn it off.)
  • App diagnostics > Toggle off both

Windows Update

Advanced options

  • Delivery Optimization > Allow downloads from other PCs: Off

Disable ads in file explorer

Open file explorer. Click 3 dots menu on top, located to the right of "View" > Options >

  • Click "View" on top of the new popup >
    • Uncheck "Show sync provider notifications"
    • Click Apply
    • Also click "Apply to Folders" on top (if available)