Windows has tons of settings buried between layers of menus that you ever touch. However, Windows isn’t set up for security by default, meaning there are several default settings you need to change.
10Telemetry
Windows telemetry is Microsoft’s way of collecting data about how you use your system. They claim to do it for improving the overall user experience, but I’m not comfortable with my computer constantly sending data about my app usage, system performance, and hardware configuration to Microsoft.
Thankfully, disabling it is quite simple. Follow these steps:
Microsoft will still collect some data from your system, as you can’t disable telemetry completely on Windows Home editions without some under-the-hood tweaking. However, you can still reduce the amount of information your PC sends over, saving the CPU and memory resources spent on running the telemetry services in the background.
9Advertising ID
Windows generates a unique advertising ID for each user, which app developers and ad networks use to track you across apps. This works a lot like browser cookies, allowing advertisers to serve you personalized ads based on your browsing or app usage history.
Follow these steps to disable this behavior:
I also visitMicrosoft’s Privacy Dashboardand disable interest-based advertising there. This ensures you’re not being tracked through other Microsoft services.
8Location Services
The location services on your PC aren’t as accurate as those on your phone, but they serve the same purpose. This setting is enabled by default and can expose sensitive information about your daily routine and habits. Even if you trust Microsoft with this data, any app on your system can potentially access this information.
Here’s how to disable location services on Windows:
Remember that location services aren’t the same as GPS. Even theNSA recommendsdisabling it on your devices to limit location exposure risks.
Disabling location services on Windows will break some functionality, like automatic time zones and Find my device. If you need location services enabled, I recommend that you check theLet apps access your locationsection right below the location services setting to ensure only the required apps have access.
7Automatic App Updates in the Microsoft Store
Microsoft has made it impossible to permanently disable automatic app and Windows updates. You can now only pause them for up to 5 weeks. Here’s how you can get some control back:
Automatic updates are generally good for security, but Microsoft Store updates have been unreliable for me for as long as I’ve used it. For more permanent control, you’re able to use the Group Policy editor on Pro or Enterprise editions of Windows.
6Windows Update Active Hours and Restart Options
Nothing’s more frustrating than Windows deciding to restart to install updates in the middle of your work. The default active hours go from 8 AM to 5 PM and don’t really suit my real-world usage patterns.
Here’s how to change them:
you’re able to set up to 18 hours of active time, which should match most people’s daily usage.
5Untrusted Font Installation
This is a more technical setting that’s often overlooked by most people. However, it’s important for security, especially if you work with custom fonts. Windows allows programs to load fonts from anywhere on your system, which can be exploited by hackers for privilege escalation attacks.
Unfortunately, changing this setting requires the Group Policy editor. If you don’t have a Pro or Enterprise edition of Windows, you may modify the registry to change this setting.
Windows will now block all untrusted fonts from loading and log any attempts to do so. Do keep in mind that enabling this feature can cause compatibility issues with some applications, in which case you’ll have to revert any changes for the program to work.
4File and Printer Sharing Over Public Networks
Unless you know how network sharing works on Windows and enable this feature by default, file and printer sharing should never be enabled on public networks.
Here’s how to disable file and printer sharing over public networks:
This is one of the most important settings to change when setting up a new Windows PC. If enabled on public networks, anyone can potentially access your shared files or printers.
3Auto-Connect to Suggested Open Hotspots
Windows has a feature that automatically connects your laptop to open hotspots in public areas. Now, public Wi-Fi isn’t automatically insecure, butsome mistakes make it dangerous. It’s also far from your only option to get online on the go, and there aremuch safer alternatives to public Wi-Fiavailable.
While Wi-Fi Sense has been discontinued in Windows 11, it might still connect to random open Wi-Fi networks from time to time. You can’t completely stop this from happening without modifying the registry, but you can protect your device by using randomized hardware addresses. Here’s how:
This makes it harder for people to track your device’s location as the hardware or MAC address of your Wi-Fi card remains the same across networks. By randomizing it, it becomes harder to tell whether the same device is connected to multiple networks.
2Dynamic Lock
The Dynamic Lock feature uses Bluetooth to detect when your paired phone moves away and automatically locks your PC. The feature is great, but only as long as you have reliable Bluetooth—a feature only found on top-tier Windows laptops in my experience.
Here’s how you can disable it:
This one’s a bummer for me because I’d really like to see this feature working reliably and not lock my PC in my face. However, the constant Bluetooth connection requirement is not only unreliable, but also drains your battery faster.
1OneDrive Backup
Windows automatically enables cloud backups to your OneDrive account during setup. This means your Desktop, Documents, Pictures, Music, and Videos folders are automatically backed up to OneDrive. Except, you only get 5GB of free space—and it runs out faster than you think.
Disabling this is a simple matter of unlinking OneDrive on your PC. Here’s how:
Additionally, I uninstalled OneDrive and several other unnecessary programs using FreeTimeTech’s Windows 11 Debloater tool. It’s one of the besthacks if you want a faster, cleaner Windows 11.
Windows 11 isn’t cut out for security or privacy out of the box. There arebenefits to letting Windows invade your privacy, but ultimately, the balance of convenience to privacy is for you to decide. Taking the time to tweak a few settings here and there can make a massive difference in the long run.
