Configure privacy in Windows 11 step by step

Informatec Digital » Resources » Configure privacy in Windows 11 step by step

If you've just been given a PC with Windows 11 and the first thing you think is that Microsoft knows too much about youYou're not far off the mark. Out of the box, the system comes loaded with options that send data, display personalized ads, and sync all kinds of information with the cloud.

The good thing is that, with a little setup, you can greatly reduce what Windows 11 shares about your activity and reduce the footprint you leave both on your own device and on the internet, as our explains A practical guide to protecting your dataYou're not going to disappear off the map, but you can stop walking around with a neon sign above your head.

Why Windows 11 is so aggressive with your privacy

The latest versions of the system, especially Windows 10 and Windows 11, They have been heavily criticized for their default privacy settings.The system collects diagnostic data, activity history, app usage data, location, voice, handwriting… and much of it is activated as soon as it is installed.

Windows 11 is designed to integrate with the cloud, your Microsoft account, OneDrive, and all of the company's services, which translates into a constant flow of information between your team and Microsoft serversAdded to this are the generous permissions many apps receive, which can access your camera, microphone, location, or files if you don't check anything; in our guide on managing application permissions You'll see how to limit them.

Furthermore, there are functions that, while not malicious, have delicate implications. For example, the Windows search indexes all the contents of your disk This makes searches faster. In theory, this index remains local, but Microsoft acknowledges that other applications could consult it and see what you have saved.

This doesn't mean your PC is hopelessly leaky, but it does mean that if you want a more private experience, You have to adjust many more settings than it seems at first glance.and you can also check out our tips on online privacy and key settingsWe're going to go screen by screen to make the system much quieter.

Control what you send to Microsoft: diagnostics and feedback

The first important block is everything related to diagnostic data and commentsMicrosoft uses them to understand how Windows works, detect errors, and improve products, but much of that information can be removed.

Sign in Settings > Privacy and security > Feedback and diagnosticsThere you will see several key options that are worth reviewing carefully:

• Optional diagnostic dataThe basic data is required, but you can disable the sending of optional data. This includes more detailed information about errors, the applications you use, and the websites you visit within the Microsoft ecosystem. If you are concerned about your privacy, only allow the minimum required data.
• Improve handwriting and writingIf you use a digital pen or write a lot, Windows may send examples of what you write to "improve" recognition. From a privacy perspective, this means that Your strokes and part of your text end up on Microsoft serversSo the wisest thing to do is to turn it off.
• Personalized Windows ExperiencesThis option uses your diagnostic data to show you tailored recommendations, ads, and suggestions. It's another way the system... I profiled you as a user based on your habitsTherefore, it's best to turn it off if you want less tracking; you can check how Disable AI as much as possible in Windows 11.
• View diagnostic dataIt allows you to locally save the data sent to Microsoft and view it with its own viewer. This is useful if you want See with your own eyes what information actually comes out of your deviceHowever, the viewer isn't particularly user-friendly and you need to be patient.
• Delete diagnostic dataThis command allows you to request that Microsoft delete the diagnostic data collected from your device from its servers. Ideally, to maintain your privacy, you should... use this option every so oftenespecially if you make a lot of configuration changes.

In this section you can also decide how often you want Windows to ask for feedback. If you don't want the system to interrupt you or generate more traffic for this reason, Set the comments option to "Never" And you get rid of some noise.

General privacy settings: ads, searches, and more

Within Settings > Privacy and security You have a section called Windows permissionsThere are several sections worth reviewing, starting with General, where several highly influential switches are concentrated.

In the General section you will find options like these, which you can disable if you prioritize your privacy:

• Allow apps to show personalized ads using my advertising IDWindows creates a unique identifier associated with your user account that apps can use to show you ads tailored to your interests. If you turn it off, you'll still see ads, but It will no longer be so closely linked to your personal profile..
• Allow websites to display locally relevant content by accessing my language listThis lets websites know which languages ​​you have set up in Windows. They can use this to serve you more relevant content, but it's also just more data added to your tracking footprintIt can be deactivated without significant loss.
• Enable Windows to improve startup and search results by tracking application launchesHere you're telling Microsoft which programs you open and how often, in exchange for them appearing first in Start menu searches. Disabling this is one of the best ways to prevent the system from registering your most used applications.
• Show me suggested content in the Settings appThese are recommendations and messages within the Settings app. It's not so much a privacy issue as it is a noise issue, but You can uncheck it for a cleaner environment.

In addition to this, Windows offers a feature to Advertising ID at the system level. If you disable it in General, Microsoft Store apps will stop receiving that identifier, so cross-tracking between apps is reducedIt won't remove ads, but it will remove personalization based on that ID.

Voice, typing, and keyboard: turn off what you don't want analyzed

Further down, in the same Privacy and Security panel, you will see the sections for Voz y Customizing handwriting and writing inputBoth have a direct impact on what Microsoft does with what you say and what you write.

En Voz The most important adjustment is the online speech recognitionIf enabled, applications using Microsoft technology can send voice clips for processing in the cloud. This allows for more precise commands, but assumes that Part of your voice commands are uploaded to the company's servers.If you don't need it, turn it off without hesitation.

In the handwriting and typing section, Windows creates a kind of custom dictionary with the words you use. According to Microsoft, this data They are stored locally and, at most, synced with your OneDriveBut if you don't want to take any risks, you can turn off both the word list and the typing customization.

To do this, go to Settings > Privacy and security > Handwriting and typing customization and uncheck the option to use your personal dictionary. This way, You stop feeding the system with examples of what you type, in exchange for losing some precision in the suggestions.

Activity and search history: less trace of what you do

Another sensitive point is the so-called Activity historyWindows 11 records the applications you open, some documents, pages visited, and actions so that it can synchronize that "timeline" across multiple devices and allow you to continue your work where you left off.

If that idea seems too intrusive, you can go to Settings > Privacy & security > Activity history and uncheck the box Store my activity history on this deviceAdditionally, there's a button to clear the saved history, so You delete the data that had accumulated.

Very close by you will find the section of Search permissionsWhen you use the Windows search bar, the system doesn't just look on your computer: it can also launch queries to the Internet and cloud services to complete your results.

From Search Permissions you can:

• Turn off online searches so that the search engine is limited to your local content.
• Configure adult content filters, in case other people or minors share the PC.
• Disable cloud content search (OneDrive, SharePoint, etc.), preventing the search box from "scrambled" through your online information as well.

In the section Searching in Windows You can adjust how your local files are indexed. There are two important aspects: the indexing mode (classic or full) and the list of excluded foldersYou can add to the exclusion those paths where you store sensitive documents so that do not appear in searches and are not indexed.

Finding my device: useful, but at the cost of privacy

Among the Privacy and Security options you will also see Find my deviceThis feature periodically sends the approximate location of your device to your Microsoft account, so that if you lose it or it is stolen you can see where it was last seen.

If you use a laptop and travel with it, it can be a useful safety net. But if you have a desktop PC that He's not going to leave homeIt usually doesn't make much sense to keep it active. While it's on, the system It will record your location and associate it with your account..

To deactivate it, go back to Settings > Privacy & Security > Find My Device and turn off the switch. The device will stop sending its position and that tracking layer will disappear completely.

App permissions: camera, microphone, location, and more

One of the keys to avoiding giving away information is to control it. What permissions do the installed applications have?Just like on a mobile phone, in Windows 11 you can decide which apps have access to the camera, location, microphone, your contacts, calendar, or your files.

Sign in Settings > Privacy and security > App permissionsYou'll see a long list of permission categories. Each category works the same way: at the top, there's a switch that decides whether Windows, as a system, can use that resource; below it, another to allow applications to use it; and further down, a list of apps that you can activate or deactivate one by one.

Among the most sensitive permissions are:

• LocationThis allows apps to access your approximate location (via Wi-Fi, GPS, or mobile networks). Only a few tools actually need this; for the rest, it's best to deny access.
• CameraControl which programs can use your webcam. It's worth checking here that only video calls and trusted apps have an active checkbox.
• MicrophoneSimilar to the camera, but for audio. It disables any programs that shouldn't be "listening" in the background.
• Voice activationThis feature allows certain apps to listen for a keyword. If you prefer that nothing is constantly listening, disable voice activation or limit it to a couple of essential apps.
• Notifications, account information, contacts, calendar, email, tasks, messagesThese are personal data that many apps don't need. You can aggressively cut off access without breaking almost anything.
• Documents, Downloads folder, Music, Pictures, Videos, and file systemThese options control who can see your files. Pay special attention to "File system," because It gives you full access to all your storage, including OneDrive..
• Application DiagnosticsThis allows some apps to access diagnostic data from others. If you don't have a specific need for this, it's best to disable it. Some programs don't snoop into others.
• Screenshots and capture bordersThey decide whether apps can take screenshots or manage related settings. Worth checking just in case.

The general rule is simple: It only grants each application the bare minimum necessary for it to function.And if you're unsure, try disabling a permission; if something breaks, you can always turn it back on.

Microsoft account, OneDrive, and cloud synchronization

Another important front is everything related to Microsoft account and cloud synchronizationIt's convenient to have settings, files, and preferences replicated across all your devices, but it also means that much of your information travels to and is stored on third-party servers.

If you signed in with a Microsoft account when setting up your PC but now want to reduce that dependency, you can switch to a local accountConsult our guide on user accounts in Windows For types, permissions, and security. To do this, open Settings > Accounts > Your information and look for the option "Login with a local account instead"The wizard will guide you through creating a local user and stopping the linking of your Microsoft email login.

Before making the change, if your disk is encrypted with BitLocker, make sure Keep your recovery key safe., since it's usually associated with your Microsoft account and you might need it if there are any problems.

As for the OneDriveThe service usually starts with the system and automatically begins synchronizing folders such as Desktop, Documents, and Pictures. This means that Many of your files end up uploaded to the cloud without you even realizing it.If you're not going to use OneDrive, the most sensible thing to do is disconnect it.

Tap the OneDrive icon in the notification area, then go to Settings> Account and choose Unlink this computerThis will stop syncing, and if you want, you can also uninstall the app afterward. Your local files will remain on your PC, but will no longer be copied to the Microsoft cloud.

In addition, Windows 11 brings a feature to cloud backup which saves your preferences, apps, and other data to facilitate restores and clean installs. If you don't want that level of tracking, go to Settings > Accounts > Windows Backup and turn off "Remember my preferences" and "Remember my apps".

Clipboard, synchronization, and other details that reveal more than they seem

El clipboard Windows 11's backup feature is more powerful than it seems. It not only saves the last copied item, but can also maintain a history (Win + V) and even... Sync it across devices through your Microsoft accountVery convenient, but also a risk if you copy passwords, sensitive texts or private data.

If you want to prevent all of that from ending up in the cloud, go to Settings > System > Clipboard and disable the clipboard synchronizationYou can also clear the history with a button and, if you prefer, completely disable the history so that there is only one item at a time.

Another feature worth reviewing is the Cloud synchronization of app settings and dataIn addition to Windows backups, many UWP apps store their settings in your Microsoft account. If you want to reduce this footprint, limit your use of these types of apps and prioritize, whenever possible, Traditional desktop software that is not so account-dependent.

Delivery and update optimization: share less with other teams

Windows 11 includes a feature called Distribution optimization (Delivery Optimization) which allows downloading updates and applications not only from Microsoft servers, but also from other nearby computers or on the Internet, using a peer-to-peer model.

The idea is to speed up downloads and relieve pressure on servers, but it implies that Some of your update data may circulate between third-party devicesIt's not that your personal information is being sent, but it is an additional communication channel that you might prefer to close.

To do so, go to Settings > Windows Update > Advanced options > Delivery Optimization and uncheck Allow downloads from other devicesFrom then on, you will only download updates directly from Microsoft.

Browser, search engine, and extra tools to further enhance your privacy

Even if you set Windows 11 to the maximum settings, Much of your exposure depends on how you navigate the internetThe browser and search engine you use have a lot to do with how much of a trace you leave behind.

By default, Edge and Bing are the official pair. Both work well, but their philosophy isn't exactly minimalist when it comes to data. If you want something more privacy-conscious, you can change browser and search engine no problem.

Among the browser options, Firefox y Brave These are two alternatives heavily focused on tracking control, blocking trackers, and clear permission management. Regarding search engines, services like DuckDuckGo o start Page They try to offer useful results while minimizing the tracing of your profile.

In parallel, there are two networking tools that also help you shed light on your activity:

• VPNIt encrypts the traffic between your computer and the VPN server and hides your real IP address from the websites you visit. It also allows you to simulate browsing from another country. Windows 11 includes a built-in VPN client. Settings > Network and Internet > VPNwhere you can add your favorite service.
• proxyIt acts as an intermediary between your computer and the internet, hiding details of your direct connection. You can configure automatic or manual proxies from Settings > Network & Internet > Proxyeven using specific scripts.

Another relevant extra is the DNS servers whichever you use. Your carrier usually records everything you resolve, while some alternative providers offer More privacy, more security against attacks, and less censorshipFurthermore, to improve the privacy of your DNS queries, learn how to Enable DNS over HTTPS (DoH) In Windows 11, to change them, open the Network Connections panel, go into your adapter's properties, and edit the Internet Protocol version 4 (TCP / IPv4) and specify your preferred DNS servers.

Updates, antivirus and common sense: security and privacy go hand in hand

Privacy isn't just about flipping switches; it also has a lot to do with... general security of your systemAn outdated or malware-infected computer can leak far more information than a well-patched Windows 11.

To keep the system up to date, check Settings > Windows Update Check frequently and make sure you install the latest updates. Many fix bugs. security flaws that attackers could exploit to steal data, spy on activity, or sneak spyware onto your device.

A good antivirus (including your own) Microsoft DefenderIt helps stop Trojans, keyloggers, and other malware that tries to steal credentials or hijack your information. However, antivirus software... It cannot prevent you from voluntarily providing your dataFor example, by typing your password on a phishing website or uploading a confidential document to a dubious service.

In the online accounts section, protect your profiles with strong and unique passwords For each service, preferably manage them with a password manager. Activate them whenever possible. two step verification (2FA) so that stealing your password is not enough to get into your accounts.

It's also vital to take care of the basics: don't connect to unprotected open Wi-Fi networks, don't open suspicious attachments or links, and don't expose half your life on social mediaThere's little point in adjusting Windows 11 privacy settings if you then publicly publish your address, ID number, or daily routines.

With all these adjustments and habits, your Windows 11 goes from being a rather curious system with your life to a somewhat more discreet and controlled toolYou won't achieve total invisibility—nor is that necessary—but you will achieve a much more reasonable configuration where you, and not the system, decide what is shared, with whom, and for what purpose.