Configure privacy in Windows 11 step by step

Informatec Digital » Resources » Configuring Privacy in Windows 11 Step by Step

If you've just received a PC with Windows 11 as a gift and your first thought is that Microsoft knows too much about you , you're not far off the mark. Out of the box, the system comes loaded with options that send data, display personalized ads, and sync all kinds of information with the cloud.

The good news is that, with a little setup, you can significantly reduce what Windows 11 shares about your activity and minimize your digital footprint, both on your own computer and online, as explained in our practical guide to protecting your data . You won't disappear completely, but you can stop walking around with a flashing sign above your head.

Why Windows 11 is so aggressive with your privacy

The latest versions of the operating system, especially Windows 10 and Windows 11, have been heavily criticized for their default privacy settings . The system collects diagnostic data, activity history, app usage data, location, voice, typing data, and much of this is enabled upon installation.

Windows 11 is designed to integrate with the cloud, your Microsoft account, OneDrive, and all of the company's services, resulting in a constant flow of information between your computer and Microsoft servers . In addition, many apps receive broad permissions, allowing them to access your camera, microphone, location, or files if you don't check. Our guide on managing app permissions will show you how to limit them.

Furthermore, some features, while not malicious, have sensitive implications. For example, the Windows search engine indexes all the content on your hard drive to speed up searches. In theory, this index remains local, but Microsoft acknowledges that other applications could access it and see what you have saved.

This doesn't mean your PC is a hopeless sieve, but if you want a more private experience, you'll need to tweak far more settings than you might initially think . You can also check out our tips on online privacy and key configurations . Let's go through it screen by screen to make your system much quieter.

Control what you send to Microsoft: diagnostics and feedback

The first important section is everything related to diagnostic data and feedback . Microsoft uses this to understand how Windows works, detect errors, and improve products, but you can filter out much of that information.

Go to Settings > Privacy and security > Feedback and diagnostics . There you'll see several key options that are worth reviewing carefully:

• Optional diagnostic dataThe basic data is required, but you can disable the sending of optional data. This includes more detailed information about errors, the applications you use, and the websites you visit within the Microsoft ecosystem. If you are concerned about your privacy, only allow the minimum required data.
• Improve handwriting and writingIf you use a digital pen or write a lot, Windows may send examples of what you write to "improve" recognition. From a privacy perspective, this means that Your strokes and part of your text end up on Microsoft serversSo the wisest thing to do is to turn it off.
• Personalized Windows ExperiencesThis option uses your diagnostic data to show you tailored recommendations, ads, and suggestions. It's another way the system... I profiled you as a user based on your habitsTherefore, it's best to turn it off if you want less tracking; you can check how Disable AI as much as possible in Windows 11.
• View diagnostic dataIt allows you to locally save the data sent to Microsoft and view it with its own viewer. This is useful if you want See with your own eyes what information actually comes out of your deviceHowever, the viewer isn't particularly user-friendly and you need to be patient.
• Delete diagnostic dataThis command allows you to request that Microsoft delete the diagnostic data collected from your device from its servers. Ideally, to maintain your privacy, you should... use this option every so oftenespecially if you make a lot of configuration changes.

In this section, you can also decide how often you want Windows to ask for feedback. If you don't want the system to interrupt you or generate more traffic for this reason, set the feedback option to "Never" and you'll avoid that noise.

General privacy settings: ads, searches, and more

Within Settings > Privacy and security, you'll find a section called Windows Permissions . There are several sections worth reviewing, starting with General , which contains several influential toggles.

In the General section you will find options like these, which you can disable if you prioritize your privacy:

• Allow apps to show personalized ads using my advertising IDWindows creates a unique identifier associated with your user account that apps can use to show you ads tailored to your interests. If you turn it off, you'll still see ads, but It will no longer be so closely linked to your personal profile..
• Allow websites to display locally relevant content by accessing my language listThis lets websites know which languages ​​you have set up in Windows. They can use this to serve you more relevant content, but it's also just more data added to your tracking footprintIt can be deactivated without significant loss.
• Enable Windows to improve startup and search results by tracking application launchesHere you're telling Microsoft which programs you open and how often, in exchange for them appearing first in Start menu searches. Disabling this is one of the best ways to prevent the system from registering your most used applications.
• Show me suggested content in the Settings appThese are recommendations and messages within the Settings app. It's not so much a privacy issue as it is a noise issue, but You can uncheck it for a cleaner environment.

In addition, Windows offers a system-level advertising ID feature . Disabling it in General settings will stop Microsoft Store apps from receiving that ID, thus reducing cross-app tracking . This won't eliminate ads, but it will stop personalization based on that ID.

Voice, typing, and keyboard: turn off what you don't want analyzed

Further down in the same Privacy and Security panel, you'll see the Voice and Handwriting and Text Personalization sections . Both have a direct impact on what Microsoft does with what you say and type.

In Voice , the most important setting is Online Speech Recognition . If enabled, apps using Microsoft technology can send voice clips to the cloud for processing. This allows for more precise commands, but it means some of your voice commands are uploaded to the company's servers . If you don't need it, feel free to turn it off.

In the handwriting and typing section, Windows creates a sort of personalized dictionary of the words you use. According to Microsoft, this data is stored locally and, at most, synced with your OneDrive , but if you don't want to take any risks, you can disable both the word list and the typing customization.

To do this, go to Settings > Privacy and security > Handwriting and typing customization and uncheck the option to use your personal dictionary. This will stop feeding the system examples of what you type , but you'll lose some accuracy in the suggestions.

Activity and search history: less trace of what you do

Another sensitive point is the so-called Activity History . Windows 11 records the applications you open, some documents, pages visited, and actions so that it can synchronize this "timeline" across multiple devices and allow you to continue your work where you left off.

If that idea seems too intrusive, you can go to Settings > Privacy and security > Activity history and uncheck the box for Store my activity history on this device . There's also a button to clear your saved history, which will delete the data that has accumulated.

Very close by you'll find the Search Permissions section . When you use the Windows search bar, the system doesn't just look on your computer: it can also run queries to the internet and cloud services to provide you with results.

From Search Permissions you can:

• Turn off online searches so that the search engine is limited to your local content.
• Configure adult content filters, in case other people or minors share the PC.
• Disable cloud content search (OneDrive, SharePoint, etc.), preventing the search box from "scrambled" through your online information as well.

In the Searching in Windows section , you can adjust how your local files are indexed. There are two important aspects: the indexing mode (classic or full) and the list of excluded folders . You can add paths where you store sensitive documents to the exclusion list so they don't appear in searches and aren't indexed.

Finding my device: useful, but at the cost of privacy

Among the Privacy and security options, you'll also see Find My Device . This feature periodically sends your device's approximate location to your Microsoft account, so if you lose it or it's stolen, you can see where it was last seen.

If you use a laptop and travel with it, it can be a useful safety measure. But if you have a desktop PC that won't be leaving your home , it usually doesn't make much sense to keep it active. As long as it's on, the system will keep recording its location and associating it with your account.

To turn it off, go back to Settings > Privacy and security > Find My Device and toggle the switch off. Your device will stop sending its location, and that tracking layer will disappear completely.

App permissions: camera, microphone, location, and more

One of the keys to avoiding giving away information is controlling the permissions of installed applications . Just like on a mobile phone, in Windows 11 you can decide which apps have access to the camera, location, microphone, contacts, calendar, or files.

Go to Settings > Privacy & security > App permissions . You'll see a long list of permission categories. Each category works the same way: at the top, there's a switch that decides whether Windows, as a system, can use that resource; below it, another switch to allow apps to use it; and further down, a list of apps that you can enable or disable one by one.

Among the most sensitive permissions are:

• LocationThis allows apps to access your approximate location (via Wi-Fi, GPS, or mobile networks). Only a few tools actually need this; for the rest, it's best to deny access.
• CameraControl which programs can use your webcam. It's worth checking here that only video calls and trusted apps have an active checkbox.
• MicrophoneSimilar to the camera, but for audio. It disables any programs that shouldn't be "listening" in the background.
• Voice activationThis feature allows certain apps to listen for a keyword. If you prefer that nothing is constantly listening, disable voice activation or limit it to a couple of essential apps.
• Notifications, account information, contacts, calendar, email, tasks, messagesThese are personal data that many apps don't need. You can aggressively cut off access without breaking almost anything.
• Documents, Downloads folder, Music, Pictures, Videos, and file systemThese options control who can see your files. Pay special attention to "File system," because It gives you full access to all your storage, including OneDrive..
• Application DiagnosticsThis allows some apps to access diagnostic data from others. If you don't have a specific need for this, it's best to disable it. Some programs don't snoop into others.
• Screenshots and capture bordersThey decide whether apps can take screenshots or manage related settings. Worth checking just in case.

The general rule is simple: only grant each application the bare minimum it needs to function . And if you're unsure, try disabling a permission; if something breaks, you can always turn it back on.

Microsoft account, OneDrive, and cloud synchronization

Another important area is everything related to your Microsoft account and cloud synchronization . It's convenient to have settings, files, and preferences replicated across all your devices, but it also means that much of your information travels to and is stored on third-party servers.

If you signed in with a Microsoft account when setting up your PC but now want to reduce that dependency, you can switch to a local account . See our guide on user accounts in Windows for types, permissions, and security. To do this, open Settings > Accounts > Your info and look for the option "Sign in with a local account instead ." The wizard will guide you through creating a local user and stop linking your Microsoft email login.

Before making the change, if your disk is encrypted with BitLocker, make sure you keep your recovery key safe , as it is usually associated with your Microsoft account and you might need it if there are any problems.

As for OneDrive , the service usually starts with your system and automatically begins syncing folders like Desktop, Documents, and Pictures. This means that many of your files end up uploaded to the cloud without you even realizing it . If you're not going to use OneDrive, the wisest thing to do is turn it off.

Tap the OneDrive icon in the notification area, go to Settings > Account , and select Unlink this PC . This will stop syncing, and you can also uninstall the app afterward if you wish. Your local files will remain on your PC, but will no longer be copied to the Microsoft cloud.

In addition, Windows 11 includes a cloud backup feature that saves your preferences, apps, and other data to make clean restores and installations easier. If you don't want that level of tracking, go to Settings > Accounts > Windows Backup and turn off "Remember my preferences" and "Remember my apps."

Clipboard, synchronization, and other details that reveal more than they seem

The Windows 11 clipboard is more powerful than it seems. It not only saves the last copied item, but can also maintain a history (Win + V) and even sync it across devices through your Microsoft account . Incredibly convenient, but also a risk if you copy passwords, sensitive text, or private data.

If you want to prevent all of that from ending up in the cloud, go to Settings > System > Clipboard and turn off clipboard syncing . You can also clear your history with a button, or, if you prefer, turn off history altogether so that only one item is displayed at a time.

Another feature worth reviewing is the cloud synchronization of app settings and data . In addition to Windows backups, many UWP apps store their settings in your Microsoft account. If you want to reduce this footprint, limit your use of these types of apps and prioritize, whenever possible, traditional desktop software that doesn't rely as heavily on your account.

Delivery and update optimization: share less with other teams

Windows 11 includes a feature called Delivery Optimization that allows you to download updates and applications not only from Microsoft servers, but also from other nearby computers or on the Internet, using a peer-to-peer model.

The idea is to speed up downloads and reduce server load, but this means that some of your update data may be shared between third-party devices . Your personal information isn't sent, but it is an additional communication channel that you might prefer to close.

To do this, go to Settings > Windows Update > Advanced options > Delivery Optimization and uncheck Allow downloads from other PCs . From then on, you will only download updates directly from Microsoft.

Browser, search engine, and extra tools to further enhance your privacy

Even if you configure Windows 11 to the maximum, much of your exposure depends on how you browse the internet . The browser and search engine you use have a lot to do with how much of a digital footprint you leave.

By default, Edge and Bing are the official pair. Both work well, but their approach isn't exactly minimalist when it comes to data. If you want something more privacy-conscious, you can easily switch browsers and search engines .

Among browser options, Firefox and Brave are two alternatives heavily focused on tracking control, blocking trackers, and clear permission management. As for search engines, services like DuckDuckGo and Startpage aim to provide useful results while minimizing the tracking of your profile.

In parallel, there are two networking tools that also help you shed light on your activity:

• VPNIt encrypts the traffic between your computer and the VPN server and hides your real IP address from the websites you visit. It also allows you to simulate browsing from another country. Windows 11 includes a built-in VPN client. Settings > Network and Internet > VPNwhere you can add your favorite service.
• proxyIt acts as an intermediary between your computer and the internet, hiding details of your direct connection. You can configure automatic or manual proxies from Settings > Network & Internet > Proxyeven using specific scripts.

Another important factor is the DNS servers you use. Your ISP's servers usually log everything you resolve, while some alternative providers offer more privacy, greater security against attacks, and less censorship . Furthermore, to improve the privacy of your DNS queries, learn how to enable DNS over HTTPS (DoH) in Windows 11. To change them, open the Network Connections panel, go to your network adapter's properties, edit the Internet Protocol Version 4 (TCP/IPv4) settings , and specify your preferred DNS servers.

Updates, antivirus and common sense: security and privacy go hand in hand

Privacy isn't just about flipping switches; it also has a lot to do with the overall security of your system . An outdated or malware-infected computer can leak far more information than a well-patched Windows 11.

To keep your system up to date, check Settings > Windows Update frequently and make sure you install the latest updates. Many of these fix security vulnerabilities that attackers could exploit to steal data, spy on your activity, or install spyware.

A good antivirus (including Microsoft Defender ) helps stop Trojans, keyloggers, and other malware that tries to steal credentials or hijack your information. However, antivirus software can't prevent you from voluntarily handing over your data , for example, by typing your password on a phishing website or uploading a confidential document to a dubious service.

For online accounts, protect your profiles with strong, unique passwords for each service, preferably managed with a password manager. Always enable two-step verification (2FA) whenever possible so that stealing your password isn't enough to gain access to your accounts.

It's also vital to take care of the basics: don't connect to unsecured open Wi-Fi networks, don't open suspicious attachments or links, and don't expose half your life on social media . Adjusting Windows 11 privacy settings is pointless if you then publicly share your address, ID number, or daily routines.

With all these adjustments and habits, your Windows 11 goes from being a rather intrusive system into your life to a somewhat more discreet and controlled tool . You won't achieve total invisibility—nor do you need to—but you will have a much more reasonable configuration where you, and not the system, decide what is shared, with whom, and for what purpose.