7.1 KiB
Windows 11 Privacy Settings
Go to Settings.
System
Notifications
- Additional settings >
- Show the Windows welcome experience after updates and when signed in to show what's new and suggested: Off
- Suggest ways to get the most out of Windows and finish setting up this device: Off
- Get tips and suggestions when using Windows: Off
Nearby sharing
- Off (Enable this only when needed. Remember to turn it off when no longer required.)
Remote Desktop
This feature is not available in Home editions
- Off (Enable this only when needed. Remember to turn it off when no longer required.)
- Require device to use Network Level Authentication to connect: On
Bluetooth & devices
Mobile devices
- Phone Link : Off (use something else like KDE Connect, LocalSend, etc.)
AutoPlay
- Use AutoPlay for all media and devices: Off
Network & internet
Ethernet
-
DNS server assignment > Edit >
- Edit DNS settings: Manual
- IPv4: On
-
Preferred DNS: enter IPv4 address of a provider from this list
Example: For Quad9, enter 9.9.9.9
-
DNS over HTTPS: On (automatic template)
-
Fallback to plaintext: Off
-
Alternate DNS: enter alternate IPv4 address of the same provider as above or a different provider
Example: For Quad9, enter 149.112.112.112
-
DNS over HTTPS: On (automatic template)
-
Fallback to plaintext: Off
-
- IPv6: On
-
Preferred DNS: enter IPv6 address of a provider from this list
Example: For Quad9, enter 2620:fe::fe
-
DNS over HTTPS: On (automatic template)
-
Fallback to plaintext: Off
-
Alternate DNS: enter alternate IPv6 address of the same provider as above or a different provider
Example: For Quad9, enter 2620:fe::9
-
DNS over HTTPS: On (automatic template)
-
Fallback to plaintext: Off
-
Click
Save
Wi-Fi
-
Random hardware addresses: On
-
Hardware properties > DNS server assignment > Edit
- Edit DNS settings: Manual
- IPv4: On
-
Preferred DNS: enter IPv4 address of a provider from this list
Example: For Quad9, enter 9.9.9.9
-
DNS over HTTPS: On (automatic template)
-
Fallback to plaintext: Off
-
Alternate DNS: enter alternate IPv4 address of the same provider as above or a different provider
Example: For Quad9, enter 149.112.112.112
-
DNS over HTTPS: On (automatic template)
-
Fallback to plaintext: Off
-
- IPv6: On
-
Preferred DNS: enter IPv6 address of a provider from this list
Example: For Quad9, enter 2620:fe::fe
-
DNS over HTTPS: On (automatic template)
-
Fallback to plaintext: Off
-
Alternate DNS: enter alternate IPv6 address of the same provider as above or a different provider
Example: For Quad9, enter 2620:fe::9
-
DNS over HTTPS: On (automatic template)
-
Fallback to plaintext: Off
-
Click
Save
Personalization
Lock screen
- Personalize your lock screen
- select
Picture
orSlideshow
- Get fun facts, tips, tricks and more on your lock screen: Off
- select
Start
- Show recommendations for tips, shortcuts, new apps and more: Off
Device usage
- Turn everything off
Apps
Installed apps
Uninstall anything you don't use like XBox, candy crush, some other preinstalled apps/games etc. Be sure not to uninstall anything important. If you have doubts about any app, search the net.
Accounts
Your info
This section is only applicable if you've signed in with a Microsoft account
Delete your account picture and set it to default as mentioned below:
- Choose a file > Browse files
- Go to
C:\Users\JohnDoe\AppData\Roaming\Microsoft\Windows\AccountPictures
and delete your picture. (ReplaceJohnDoe
with your username) - Go to
C:\ProgramData\Microsoft\User Account Pictures
and selectguest.png
.
NOTE: AppData
is a hidden folder by default. To enable: in file explorer on top click View
> Show > select Hidden items
.
Sign-in options
- Show account details such as my email address on the sign-in screen: Off
Time & language
Typing
- Show text suggestions when typing on the physical keyboard: Off
- Typing insights: Off
Privacy & security
Windows Security
- Virus & threat protection > Virus & threat protection settings > Manage settings > All protections on (Except automatic sample submission)
- Firewall & network protection > Firewall should be on for domain, public and private networks.
Find my device
- Find my device: Off
General
- All off
Recall & Snapshots
This feature is not available on all devices
- Save Snapshots: Off
- Delete Snapshots >
- Delete all snapshots: Delete all
Speech
- Online speech recognition: Off
Inking & typing personalization
- Custom inking and typing dictionary: Off
Diagnostics & feedback
- Diagnostic data > Send optional diagnostic data: Off
- Improve inking & typing: Off
- Tailored experiences: Off
- Delete diagnostic data: Delete
- Feedback frequency: Never
Activity history
- Send my activity history to Microsoft: Off
Search permissions
- Cloud content search
- Microsoft account: Off
- Work or School account: Off
- More settings
- Show search highlights: Off
App permissions
- Review each permission and disable accordingly (choose which apps can have access to location, camera, microphone, notifications etc. If any app doesn't need something, turn it off.)
- App diagnostics > App diagnostic access: Off
Windows Update
Advanced options
- Delivery Optimization > Allow downloads from other PCs: Off
Disable ads in file explorer
Open file explorer. Click 3 dots menu on top > Options >
- Click
View
on top of the new popup >- Uncheck
Show sync provider notifications
- Click
Apply
- Also click "Apply to Folders" on top (if available)
- Uncheck
Disable telemetry service
Press Win key + r
> type services.msc
> press enter
- Double-click on
Connected User Experiences and Telemetry
>- Service Status: Stopped (Click on
Stop
, if service is running) - Startup Type: Disabled
- Click
OK
- Service Status: Stopped (Click on
Disable trending searches & web search in search bar
Press Win key + r
> type regedit
> press enter > Yes
- Navigate to
Computer\HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Search
- In the left navigation window, right click on
Search
> New > DWORD (32-bit) Value > name itBingSearchEnabled
- Double click it and make sure
Value data
is set to0
- Open Task Manager > Processes > select
Windows Explorer
> Right click > Restart
Disable Copilot
Press Win key + r
> type regedit
> press enter > Yes
- Navigate to
Computer\HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows
- In the left navigation window, right click on
Windows
> New > Key > name itWindowsCopilot
- Right click on
WindowsCopilot
> New > DWORD (32-bit) Value > name itTurnOffWindowsCopilot
- Double click it and set
Value data
to1
> OK - Open Task Manager > Processes > select
Windows Explorer
> Right click > Restart