Privacy GuideJune 16, 20268 min read

How to Lock Down Windows 11 Privacy Settings in 2026

SC

By Sarah Chen

Head of Privacy Research

How to Lock Down Windows 11 Privacy Settings in 2026

Don't want to do this by hand? We remove your info from 100+ broker sites automatically.

Windows 11 collects an enormous amount of data about you by default — from diagnostic telemetry and advertising identifiers to AI-powered features like Copilot and Recall that analyze your screen activity. Microsoft buries most of its privacy controls across multiple settings pages, counting on the fact that most users will never find them. This guide walks you through every important Windows 11 privacy setting so you can take back control of your data in 2026.

Why Windows 11 Privacy Settings Matter

Out of the box, Windows 11 sends data about your device, installed apps, usage patterns, browsing habits, and even clipboard contents back to Microsoft. The 2024 and 2025 feature updates added AI-powered tools — Copilot and Recall — that introduce entirely new categories of data collection. Unless you actively configure your settings, Windows treats your PC as a telemetry pipeline that feeds Microsoft's advertising and AI training infrastructure.

Recall and Copilot Are Opt-In — But Check Anyway

After widespread backlash, Microsoft now requires explicit opt-in for Recall on Copilot+ PCs. However, Copilot integration is enabled by default in Windows 11 24H2, and many privacy-sensitive settings still default to the most permissive option. Don't assume you're protected — verify every toggle below.

Step 1: Disable the Advertising ID

Windows assigns every user a unique advertising ID that lets apps and advertisers track your behavior across the system. To turn it off:

  1. Open Settings > Privacy & security > General.
  2. Toggle off Let apps show me personalized ads by using my advertising ID.
  3. While you're here, also disable Let websites show me locally relevant content by accessing my language list and Let Windows improve Start and search results by tracking app launches.

Step 2: Limit Diagnostic Telemetry

Microsoft collects diagnostic data at two levels: Required (basic hardware and error data) and Optional (detailed usage patterns, browsing data, and app activity). To minimize collection:

  1. Go to Settings > Privacy & security > Diagnostics & feedback.
  2. Toggle off Send optional diagnostic data.
  3. Toggle off Improve inking and typing.
  4. Toggle off Tailored experiences — this stops Microsoft from using your diagnostic data to personalize tips, ads, and recommendations.
  5. Click Delete diagnostic data to clear what Microsoft has already collected from your device.

Step 3: Disable Microsoft Recall

Recall takes periodic screenshots ("snapshots") of everything on your screen and uses AI to make it searchable. Even though it now stores data locally and requires Windows Hello authentication, the privacy implications are significant — every password you type, every private message you read, and every document you view can be captured.

  1. Go to Settings > Privacy & security > Recall & snapshots.
  2. Toggle off Save snapshots.
  3. If snapshots were previously enabled, click Delete all to remove stored data.

Step 4: Control Copilot and AI Features

Windows Copilot integrates AI assistance throughout the operating system, but it processes queries through Microsoft's cloud servers, meaning your prompts and context leave your device.

  • To remove Copilot from the taskbar, right-click the taskbar and uncheck Copilot.
  • In Settings > Privacy & security > General, review any AI-related data sharing toggles.
  • In Microsoft Edge, go to Settings > Sidebar > Copilot and disable it if you don't use it.
  • Consider using a privacy-focused browser like Firefox or Brave as your default to avoid Edge's built-in AI tracking.

Step 5: Lock Down Location, Camera, and Microphone

Windows 11 grants apps access to your location, camera, and microphone unless you explicitly restrict it.

  1. Go to Settings > Privacy & security > Location. Toggle off location services entirely, or review the per-app list and disable access for apps that don't need it.
  2. Under Camera and Microphone, do the same — review which apps have access and revoke permissions for anything unnecessary.
  3. Under Account info, Contacts, Calendar, and Call history, disable access for apps that don't need these.

Skip the manual opt-outs

One opt-out won't stop them — brokers relist your data. PrivacyOn removes your info from 100+ sites and keeps it removed.

Start your free scan

Step 6: Disable Activity History and Clipboard Sync

Activity History logs what you do on your PC and can sync it across devices. Clipboard History can send copied text to Microsoft's cloud.

  • Go to Settings > Privacy & security > Activity history and uncheck Store my activity history on this device.
  • Go to Settings > System > Clipboard and toggle off Clipboard history if you don't need it, or at minimum disable Sync across your devices.

Step 7: Tighten Search and Start Menu Settings

The Start menu and Windows Search send your queries to Microsoft by default for web results and recommendations.

  • In Settings > Privacy & security > Search permissions, toggle off Cloud content search for both Microsoft and Work/School accounts.
  • Under History, toggle off Search history on this device.
  • Disable Show search highlights to stop Microsoft from pushing trending content into your search bar.

Use a Local Account for Maximum Privacy

Signing in with a Microsoft account ties your PC activity to your online profile. If privacy is your priority, consider using a local account instead. Go to Settings > Accounts > Your info and select Sign in with a local account instead. You'll lose access to OneDrive sync and some Microsoft Store features, but you'll dramatically reduce the data Microsoft can link to your identity.

Step 8: Review App Permissions

Beyond location, camera, and microphone, Windows 11 lets apps access your file system, documents, pictures, and even other apps. Audit these regularly:

  1. Go to Settings > Privacy & security and scroll through every category under App permissions.
  2. Disable access for any app that doesn't need a specific permission.
  3. Pay special attention to Background apps — apps running in the background can collect data even when you're not using them.

Step 9: Manage Microsoft Edge Privacy (or Switch Browsers)

If you use Edge, it has its own layer of tracking separate from Windows:

  • Go to Edge Settings > Privacy, search, and services and set tracking prevention to Strict.
  • Disable Personalize your web experience and Send optional diagnostic data.
  • Turn off the Shopping and Follow creators features that track your browsing.

For stronger privacy, switch to Firefox, Brave, or another privacy-focused browser and set it as your default in Settings > Apps > Default apps.

The Bigger Picture: Your Data Beyond Windows

Locking down Windows 11 is an important step, but it's only part of protecting your privacy. Data brokers collect and sell your personal information — name, address, phone number, employment history — from public records, social media, and commercial sources, regardless of how tight your OS settings are. A hardened PC won't stop a people-search site from listing your home address.

PrivacyOn monitors and removes your personal information from 100+ data broker sites automatically, including people-search engines, marketing databases, and background-check services. Combined with the Windows settings above, you'll have a comprehensive privacy defense that covers both your device and your online footprint.

Frequently Asked Questions

Will disabling telemetry break Windows Update?

No. Setting diagnostic data to "Required" still sends enough information for Windows Update to function normally. Only completely blocking telemetry via third-party tools or Group Policy can occasionally cause issues.

Is Recall safe if I opt in?

Recall stores snapshots locally with encryption and requires Windows Hello authentication. However, any application with admin access could potentially read the snapshot database, and the feature captures everything on screen — including sensitive information. Most privacy experts recommend leaving it disabled.

How often should I review these settings?

Check your privacy settings after every major Windows feature update (typically twice a year), as Microsoft sometimes resets toggles or introduces new data-collection features with updates.

SC
Sarah Chen

Head of Privacy Research

CIPP/US CertifiedIAPP MemberB.S. Computer Science

CIPP/US-certified privacy researcher with over a decade of experience helping consumers remove their personal information from data brokers.

Ready to Protect Your Privacy?

Let PrivacyOn automatically remove your personal information from data broker sites and keep it removed.