14 simple Windows 11 tweaks that instantly boost your privacy

Windows 11 works great out of the box, but it also connects, syncs, reports, backs up, and shares more than many people realize. If you care about privacy and want tighter control over what your computer sends to Microsoft and other services, you have to go beyond the default settings.

Although you cannot make your computer completely private, there are tweaks you can use to harden Windows 11 for privacy. For instance, you can switch to a local account, reduce telemetry, turn off cloud-powered search, remove apps like OneDrive and Copilot (and Windows Recall, if available), disable sharing and backup integrations, control updates, and even replace BitLocker with an alternative encryption solution if you prefer a different trust model.

In this how-to guide, I'll outline the steps to improve your privacy on Windows 11.

Warning: Although these steps are non-destructive, you will be modifying system settings on Windows 11. It's strongly recommended that you create a full backup of your computer before proceeding, so you can restore your system if anything doesn't work as expected.

How to improve your privacy on Windows 11

On Windows 11, there are several practical changes you can make to strengthen your privacy, from switching to a local account and limiting telemetry to removing apps that raise privacy concerns.

1. Disable Device Encryption

Although it's always recommended to use encryption to protect and maintain your data private, if you enable Device Encryption (BitLocker) using the default settings, you would be relying on a third-party company network to store the recovery key, which is not ideal.

When I say disable encryption to protect your privacy, I'm referring to disabling Device Encryption and then using another solution to encrypt your files.

To disable Device Encryption on Windows 11, follow these steps:

1. Open Settings.
2. Click on Privacy & security.
3. Click the Device Encryption page on the right side.

4. Turn off the Device encryption toggle switch.

5. Click the Yes button.

Once you complete the steps, the recovery key already stored in your Microsoft account will no longer work on your computer. However, you can always sign in to your Microsoft account to delete the decryption key.

It's important to note that if you use Windows 11 Pro, you can enable BitLocker and save the recovery key locally. However, the Home edition doesn't have this feature, because Device Encryption is a limited version of BitLocker, and it requires saving the key in your Microsoft account.

If you have a device running Windows 11 Home, you can upgrade to Windows 11 Pro or choose a third-party solution to encrypt your data.

2. Disable Find my device

If you originally configured your device with a Microsoft account, chances are that the "Find my device" feature is turned on, and it'll send your device's geo location data periodically to Microsoft. If you want to increase your privacy, it's recommended to check and disable the feature.

To turn off the Find my device feature on Windows 11, use these steps:

1. Open Settings.
2. Click on Privacy & security.
3. Click the Find my device page on the right side.

4. Turn off the Find my device toggle switch.

After you complete the steps, the system will no longer send the physical location of the device.

3. Disable telemetry

Although you cannot completely disable telemetry on Windows 11, you can reduce the amount of data Microsoft collects about your activities.

To change the diagnostic and feedback settings, use these steps:

1. Open Settings.
2. Click on Privacy & security.
3. Click the Diagnostic & feedback page on the right side.

4. Click the Diagnostic data setting.
5. Turn off the "Send optional diagnostic data" toggle switch.

• Quick note: This option will also turn off the "Improve inking and typing" data collection.

4. Click the Tailored experiences setting.
5. Turn off the toggle switch to prevent Microsoft from using diagnostic data against you to personalize different types of promotions.

6. (Optional) Click the "Delete diagnostic data" setting.
7. Click the Delete button to erase diagnostic data stored on your device.
8. Select the Never option in the "Feedback frequency" setting.

Once you complete the steps, the system will reduce the amount of diagnostic data that is sent to Microsoft.

4. Disable activity tracking

Windows 11 tracks certain activities to personalize advertisements, Start menu recommendations, search results, and overall device experience. If you prefer a more private setup, you can disable these options directly from the Settings app.

To disable activity tracking on Windows 11, use these steps:

1. Open Settings.
2. Click on Privacy & security.
3. Click the General page on the right side.

4. Turn off the "Let apps show me personalized ads by using my advertising ID" toggle switch.
5. Turn off the "Let websites show me locally relevant content by accessing my language list" toggle switch.
6. Turn off the "Let Windows improve Start and search results by tracking app launches" toggle switch.
7. Turn off the "Show me suggested content in the Settings app" toggle switch.

8. Click on Personalization.
9. Click the Device usage page on the right side.
10. Turn off all toggles to prevent the system from sending device activity data to Microsoft.

11. Click on Personalization.
12. Click the Start page on the right side.
13. Turn off the "Show recommendations for tips, shortcuts, new apps, and more" toggle switch.

After you complete the steps, Windows 11 will stop using your activity data to personalize ads, recommendations, and other on-device experiences, resulting in a more private and less tailored system experience.

5. Disable location tracking

Windows 11 allows apps and traditional programs to access your location to deliver maps, weather updates, and other location-based features. However, you can control exactly how and when that information is shared.

To prevent apps from accessing your location data, use these steps:

1. Open Settings.
2. Click on Privacy & security.
3. Click the Location page on the right side.

4. (Option 1) Turn off the Location Services toggle switch to stop all apps from accessing your location.

• Quick note: Turning off this feature may prevent some apps from working correctly.

5. (Option 2) Turn off the toggle switch for those apps that you want to access your location information.
6. Turn off the "Let desktop apps access your location" toggle switch.

Once you complete the steps, applications will no longer be able to access your approximate location.

6. Disable search highlights

Windows Search can display highlights and suggestions on the Search home, including trending topics and web-based content. If you prefer a cleaner and more private experience, you can disable this feature from the Settings app.

To turn off search suggestions in the Windows Search home, use these steps:

1. Open Settings.
2. Click on Privacy & security.
3. Click the Search page on the right side.

4. Turn off the "Show search highlights" toggle switch.

After you complete the steps, the Search home will no longer show highlights or suggested content, giving you a more streamlined interface with fewer web-driven recommendations.

7. Disable cloud search

Windows 11 can extend its search capabilities beyond your device by pulling results from your Microsoft, work, or school accounts. While this integration can be convenient, it also means search queries may interact with cloud services. If you prefer to keep searches limited to local content, you can turn off cloud search from the Settings app.

To turn off the search history feature on Windows 11, use these steps:

1. Open Settings.
2. Click on Privacy & security.
3. Click the Search page on the right side.

4. Click the Search my accounts setting.
5. Turn off the "Microsoft account" toggle switch.
6. Turn off the "Work or School account" toggle switch.

After you complete the steps, Windows Search will no longer display results from your Microsoft, work, or school accounts. Your searches will remain focused on local files, apps, and settings, reducing cloud interaction and improving overall privacy control.

If you end up switching to a local account, you don't have to worry about this feature unless you connect a work or school account, which on consumer devices is not usually the case.

8. Switch to a local account

By default, Windows 11 encourages you to use a Microsoft account, which connects your settings, preferences, and certain activity data to the cloud. If you prefer a more isolated setup with fewer cloud integrations, you can switch to a local account directly from the Settings app.

To disconnect your account from your Microsoft account for a more private experience on Windows 11, use these steps:

1. Open Settings.
2. Click on Accounts.
3. Click the Your Info page on the right side.

4. Click the "Sign in a local account instead" option under the "Accounts settings" section.

5. Click the Next button.
6. Confirm your current password.
7. Create the new local account username, password, and hint.

8. Click the Next button.
9. Click the Sign out button.

Once you complete the steps, your device will use a local account that is no longer linked to your Microsoft account for sign-in. This reduces cloud synchronization of settings, preferences, and account-related data, giving you a more self-contained and privacy-focused experience.

9. Uninstall OneDrive

Microsoft OneDrive is deeply integrated into the operating system to sync files, settings, and folders with the cloud. While convenient, this integration means files and activity can be continuously connected to the cloud using your Microsoft account. If you prefer to keep your data strictly local, you can remove OneDrive from the system.

If you plan to stop using the OneDrive service, before uninstalling the app, from OneDrive > Sync and backup > Advanced settings, turn on the option to "Download all the files," to maintain a local copy. Once the file synchronization finishes, you can proceed to uninstall the app.

To uninstall the OneDrive app on Windows 11, use these steps:

1. Open Settings.
2. Click on Apps.
3. Click the Installed apps page on the right side.

4. Click the menu button in Microsoft OneDrive, then choose Uninstall.

5. Click the Uninstall button one more time.

After you complete the steps, OneDrive will be removed from your computer, stopping automatic file synchronization with the Microsoft cloud.

If you want to stop using the cloud storage, it's important to delete your files from your OneDrive account (online). But before proceeding with this action, confirm that all your files are available locally on your PC.

10. Uninstall Copilot

The Copilot app on Windows 11 connects to Microsoft's cloud-based AI services to provide assistance, content generation, and contextual answers. If you prefer a more traditional desktop experience with fewer AI-driven and cloud-connected features, you can remove the app from your computer.

To uninstall the Copilot app on Windows 11, use these steps:

1. Open Settings.
2. Click on Apps.
3. Click the Installed apps page on the right side.

4. Click the menu button in Copilot, then choose Uninstall.

5. Click the Uninstall button one more time.

Once you complete the steps, the Copilot app will be removed from your device.

11. Uninstall Windows Recall

Windows Recall is an AI feature designed to capture and index snapshots of your activity so you can quickly revisit past content. While the feature runs locally, it still records a timeline of on-device activity. If you prefer not to have this type of tracking enabled, you can remove the Recall components entirely from Windows Features for peace of mind and privacy.

To completely uninstall the Windows Recall components from your computer, use these steps:

1. Open Start.
2. Search for Turn Windows features on or off and select the top result to open the "Windows Features" settings.

3. Clear the Recall option.

4. Click the OK button.
5. Restart the computer.

1. Open Start.
2. Search for Turn Windows features on or off and select the top result to open the "Windows Features" settings.
3. Clear the Recall option.
4. Restart the computer.

After you complete the steps, the Recall components will be removed from your device, and Windows 11 will no longer capture and store snapshots for this feature.

12. Disable Windows Backup

On Windows 11, the Windows Backup system works in two layers. If OneDrive is installed, files stored in the OneDrive folder are automatically synced to the cloud. In addition, when you sign in with a Microsoft account, the operating system can back up a list of installed apps and various system preferences to your account.

By default, the operating system may store details such as accessibility settings, account preferences, Wi-Fi networks and passwords, personalization choices, language settings, and other configurations. This information helps restore your setup on a new device, but it also means certain data is uploaded to the cloud.

If you use a local account, this cloud-based backup does not happen unless you connect a Microsoft account. If you continue using a Microsoft account, you can manually turn off the options that sync apps and preferences. And if you have already removed OneDrive, you do not need to adjust file backup settings.

To prevent sending apps and personal preferences to Microsoft, use these steps:

1. Open Settings.
2. Click on Accounts.
3. Click the Windows Backup page on the right side.

4. Turn off the "Remember my apps" toggle switch.
5. Turn off the "Remember my preferences" toggle switch.

After you complete the steps, Windows 11 will no longer sync your installed apps list or system preferences to your Microsoft account. This keeps your configuration data stored locally on the device and limits what is uploaded as part of the Windows Backup feature.

13. Disable Windows Update

Windows 11 automatically downloads and installs updates, which can also send diagnostic and telemetry data to Microsoft, because update services routinely gather data to ensure proper installation, detect errors, and optimize performance.

If you want to limit this data flow and have more control over when your system communicates with Microsoft servers, you can use Group Policy to permanently disable automatic updates.

To disable automatic Windows 11 updates permanently from Group Policy, use these steps:

1. Open Start.
2. Search for gpedit.msc and click the top result to launch the Local Group Policy Editor.
3. Navigate to the following path: Computer Configuration > Administrative Templates > Windows Components > Windows Update > Manage end user experience
4. Double-click the "Configure Automatic Updates" policy on the right side.

5. Check the Disabled option to turn off automatic updates permanently on Windows 11.

6. Click the Apply button.
7. Click the OK button.

After you complete the steps, Windows 11 will stop downloading and installing updates automatically. However, you can still trigger the updates manually from the "Windows Update" settings page.

The recommendation here is not to skip updates. You should always keep your computer updated. However, if you want to reduce the amount of data that Microsoft collects, it would be better to download and install them manually from the Microsoft Update Catalog website.

If you want to re-enable automatic updates, follow the same instructions outlined above, but in step 5, select the "Not Configured" option.

If you have a device running Windows 11 Home, you can still disable automatic updates, but you'll need to use the Registry.

If you prefer to keep automatic updates enabled, you can enhance privacy by adjusting the "Delivery Optimization" settings. This prevents your computer from connecting to Microsoft's peer-to-peer network to download updates, limiting data sharing with other devices.

Open Settings > Windows Update > Advanced options > Delivery Optimization and turn off the "Allow download from other devices" toggle switch.

If you need to update the system manually, open Settings > Windows Update and click the "Check for updates" button.

14. Limit Microsoft Edge telemetry

If you happen to use Microsoft Edge as your preferred web browser, there are a few settings you may want to turn off to reduce the amount of data Microsoft collects about your browsing experience. Also, if you don't feel comfortable about Copilot, you can disable it too.

To limit data collection on Microsoft Edge, use these steps:

1. Open Microsoft Edge.
2. Open the main menu from the top-right and choose the Settings option.
3. Click on Privacy, search, and services from the left pane.
4. Click on Privacy.
5. Turn off the "Help improve Microsoft products by sending the results from search on the web" toggle switch.
6. Turn off the "Allow Microsoft to save your browsing activity, including history, usage, favorites, web content, and other browsing data to personalize Microsoft Edge and Microsoft services like ads, search, shopping, and news" toggle switch.

7. Click on Appearance from the left pane.
8. Click the "Copilot and sidebar" setting.

9. Click on Copilot.

10. Turn off the "Show Copilot button on the toolbar" toggle switch to disable the Copilot access from the top-right.

11. Click on AI innovations from the left pane.
12. Turn off the Copilot Mode toggle switch (if applicable) to disable.

Once you complete these steps, you'll reduce the amount of data the browser shares with Microsoft.

If you want to go one step further, you may want to disconnect the browser from your Microsoft account. To remove your profile connected to a Microsoft account, open the "Profiles" settings page from edge://settings/profiles, and either click the "Sign out" button to disconnect and key your current setup.

Or click the "Delete" button and then click the "Remove profile" button. This action will delete your old profile data from the computer, but already synced data will continue to be available on your Microsoft account until you delete it manually.

Let’s be honest

If you truly want absolute privacy, the only guaranteed solution is to disconnect completely. Unplug the Ethernet cable, turn off Wi-Fi, and stay offline. That is the only scenario where nothing leaves your device. Realistically, that is not how most of us use our computers.

What you can do, however, is reduce exposure to a practical minimum. By applying the right privacy settings and system tweaks, you can stay connected, keep using your favorite apps and services, and significantly limit the diagnostic and background data your system sends. It is not total isolation, but it's a balanced, controlled approach that gives you far more transparency and control over your experience.

FAQs about making Windows 11 more private

These are common questions regarding changing settings to make Windows 11 more private.

More resources

For more helpful articles, coverage, and answers to common questions about Windows 10 and Windows 11, visit the following resources:

• Windows 11 on Windows Central — All you need to know
• Windows 10 on Windows Central — All you need to know

Join us on Reddit at r/WindowsCentral to share your insights and discuss our latest news, reviews, and more.