How to Secure Windows 11 Privacy Settings

Get Started with Basic Protection

Start with the core protections that cover the whole machine. These are the baseline, and the more specialized tweaks later in this guide assume they are in place.

Before changing anything else, check these four things:

1. Open Start, type Windows Security, and press Enter. The app opens on a Security at a glance page.
2. Look at each tile: Virus & threat protection, Firewall & network protection, App & browser control and Device security. A green check means that area is fine.
3. If a tile shows a yellow warning or red cross, select it and follow the button it offers, usually Turn on or Restart now.
4. Open Settings › Windows Update 🔃 and select Check for updates 🔃. Install anything pending and restart if asked.

Fixing these first matters because privacy settings do not help much if the system itself is out of date or unprotected.

1 How to Secure Your Windows 11 PC: Essential Security Settings Windows 11 includes built-in tools, mainly Microsoft Defender Antivirus (in the Windows Security app) and Windows Hello, that protect your PC from… 17 min read · ↻ Updated Oct 2026

2 How to Use Windows 11’s Built-in Antivirus (Microsoft Defender) Microsoft Defender is the built-in antivirus in Windows 11. It runs in the background and stops viruses, spyware and other threats when… 18 min read · ↻ Updated Oct 2026

3 How to Turn On Enhanced Phishing Protection in Windows 11 Enhanced Phishing Protection in Windows 11 alerts users about password reuse across different websites and apps, mitigating risks from potential hacks. Integrated with Microsoft Defender SmartScreen, it provides comprehensive security. Users can easily enable or disable this feature through Windows Security or the Local Group Policy Editor, ensuring safer online activity. 4 min read · ↻ Updated Oct 2026

4 How to Turn On SmartScreen Enhanced Phishing Protection in Windows 11 This guide explains how to enable Enhanced Phishing Protection on Windows 11, which alerts users if they save passwords in unsafe applications like Notepad or Microsoft Office. This feature is part of Microsoft Defender SmartScreen, enhancing security alongside other protective measures. Advanced options are available via the Local Group Policy Editor. 3 min read · ↻ Updated Oct 2026

Manage Your Data and Access

Privacy controls decide what data Windows collects and which apps can reach your personal information. If you want tighter limits on data sharing, this is where to make the granular changes.

Work through the main pages like this:

1. Open Settings › Privacy & security You will see two groups: Windows permissions and App permissions.
2. Select General. Turn off Let apps show me personalized ads by using my advertising ID. Turn off the options for suggested content and for tracking app launches if you do not want Windows to personalize Start and Search results. The toggles should now read Off.
3. Go back and select Diagnostics & feedback. Turn off Send optional diagnostic data. Also turn off Tailored experiences, and set Feedback frequency to Never if you do not want feedback prompts.
4. In the same page, expand Delete diagnostic data and select Delete to clear what Windows has already stored about your device.
5. Go back and open Inking & typing personalization (on some builds it is named Inking & typing). Turn it off if it is on, so Windows stops building a custom dictionary from what you type.
6. Open Activity history and clear the option that stores your activity on this device, then select Clear history if you want to remove what exists.

One limit to know about: you cannot turn off required diagnostic data on Windows 11 Home or Pro. It is the minimum Windows needs to stay secure and up to date. Only Enterprise and Education editions can reduce it further, through Group Policy. Turning off the optional data is the most a Home or Pro user can do from Settings.

No restart is needed for any of these. To undo a change, return to the same page and flip the toggle back.

1 How to Change Purchase Sign-in Settings in Microsoft Store This guide explains how to adjust the Purchase sign-in settings in the Microsoft Store app on Windows 11, allowing users to require a password for each purchase or skip the prompt for convenience. Changes apply only to the current device, and security should be considered when turning off the password requirement. 4 min read · ↻ Updated Oct 2026

2 How to Change Offline Permissions on Windows 11 To play Microsoft Store games offline on Windows 11, enable Offline permissions while connected to the internet. Each game needs to be opened online once for offline access. You can change your designated offline device only three times a year. Disable Offline permissions to return to online gaming. 5 min read · ↻ Updated Oct 2026

3 How to Enable or Disable Passkey Managers on Windows 11 This article outlines how to manage Passkey Managers on Windows 11, highlighting the security and convenience of signing in with biometrics or PIN. It explains that users can enable or disable saving passkeys through the Settings app, and discusses integration with third-party managers like 1Password or Bitwarden for enhanced user experience. 4 min read · ↻ Updated Oct 2026

4 How to Delete Passkeys in Windows 11 The article guides users on how to create and delete Passkeys on websites and apps in Windows 11. Passkeys are a secure authentication alternative to passwords, stored and secured by Windows Hello. They can be used via Windows Hello Facial recognition, Fingerprint or PIN. The guide also mentions that currently, only Google, eBay, and Microsoft support Passkeys. 4 min read · ↻ Updated Oct 2026

5 How to Find Your BitLocker Recovery Key in Windows 11 BitLocker, a Windows 11 security feature, protects files by locking hard drives. The BitLocker recovery key, a 48-digit backup code, is needed if Windows cannot verify access. It can be stored online, on paper, or on a USB drive. Keeping this key safe is crucial, as losing it may necessitate a factory reset. 5 min read · ↻ Updated Oct 2026

Fine-Tune Advanced Security Features

The advanced configurations are for developers and power users with specific environment needs. The tools in this group are less common, and most people can skip them. Only change them if you know why you need to, and note the original value before you do, so you can revert it.

If a setting here is greyed out or missing, the usual causes are the edition (some tools are Pro, Enterprise and Education only) or a policy set by your organization. A work or school PC may show the message Some settings are managed by your organization. In that case ask your IT team before trying to override it.

1 How to Turn On or off Dev Drive Protection in Windows 11 This guide explains how to enable or disable Dev Drive Protection in Windows 11, intended to enhance developer storage performance. Users can toggle settings via the Windows Security app or the Registry Editor. The protection method impacts file scanning speed, balancing security with efficiency. Detailed instructions are provided. 4 min read · ↻ Updated Oct 2026

2 How to Set Dev Drive as Trusted or Untrusted in Windows 11 This guide explains how to manage the trust status of a Dev Drive in Windows 11, influencing security and performance. A trusted Dev Drive allows Windows Defender to operate in faster performance mode, while an untrusted drive enforces stricter real-time protection. Users can switch statuses using commands in Windows Terminal. 5 min read · ↻ Updated Oct 2026

3 How to Enable or Disable Windows Device Portal in Windows 11 Windows Device Portal (WDP) in Windows 11 allows remote management of your PC through a web browser, offering functions like changing settings, controlling apps, managing Wi-Fi, and monitoring resource usage. It requires enabling Developer Mode, and authentication can be added for security. You can toggle WDP on and off based on your needs. 4 min read · ↻ Updated Oct 2026

4 How to Enable or Disable Reducing Protections for Agent Connectors on Windows 11 This article outlines how to enable or disable the "Reducing Protections for Agent Connectors" feature in Windows 11, introduced with build 26220.7344. This setting allows AI agents greater access and privileges, facilitating integration with external tools. Users should consider security implications before making adjustments and consult Microsoft documentation for guidance. 4 min read · ↻ Updated Oct 2026

Keep Your Security Tools Running Smoothly

The built-in protection tools need regular upkeep so they keep catching new threats. If Microsoft Defender is not behaving as it should, work through these checks in order:

1. Open Windows Security and select Virus & threat protection.
2. Under Virus & threat protection updates, select Protection updates, then Check for updates. Wait for the page to show that your definitions are up to date.
3. Go back, select Manage settings under Virus & threat protection settings, and make sure Real-time protection is On.
4. If you still see a problem, select Quick scan to run a scan now. For a deeper check, choose Scan options and pick Full scan.
5. Restart the PC and open Windows Security again to see if the warning has cleared.

If Defender looks switched off and you cannot turn it back on, check for another antivirus program. Windows hands over to a third-party antivirus automatically and turns Defender's real-time protection off while it is installed. Uninstalling the other product usually returns control to Defender. Also check that Tamper protection is on in the same settings page, since it stops other software from quietly disabling Defender.

1 How to Optimize Microsoft Defender CPU Usage in Windows 11 Microsoft Defender Antivirus, built into Windows 11, can significantly impact CPU usage during scans, potentially slowing down your computer. Fortunately, users can adjust CPU usage via PowerShell, Local Group Policy Editor, or Registry Editor. Reducing CPU allocation can help performance but may extend scan durations. Restart your PC after making changes. 6 min read · ↻ Updated Oct 2026

2 How to Check Your Microsoft Defender Antivirus Signature Version in Windows 11 Microsoft Defender Antivirus, the built-in antivirus for Windows 11, regularly updates to enhance protection against the latest threats. Users can check their signature version via the Windows Security app or by using Command Prompt or PowerShell. Regular checks ensure that the antivirus is up-to-date and effectively safeguarding the computer. 4 min read · ↻ Updated Oct 2026

3 How to Backup and Restore Microsoft Defender Firewall in Windows 11 The article outlines methods to backup and restore Microsoft Defender Firewall settings in Windows 11 using the Windows Security app and Command Prompt. It emphasizes the importance of safeguarding device security by managing firewall settings effectively. Regular backups allow for quick restoration in case of configuration issues, ensuring network protection is maintained. 6 min read · ↻ Updated Oct 2026

4 How to Reset Default Firewall Settings in Windows 11 This article outlines how to restore Microsoft Defender Firewall settings to default in Windows 11. Users can utilize the Windows Security app, Advanced Security, Command Prompt, or PowerShell. These methods provide quick and effective solutions for reverting unwanted changes, ensuring enhanced device security against unauthorized access. 5 min read · ↻ Updated Oct 2026

Protect Your PC When You're Away

Dynamic lock secures the PC the moment you walk away, which stops anyone from using it while you are gone. It relies on a Bluetooth-paired phone: when the phone moves out of range, Windows locks the screen. It is available on Home and Pro.

1. Pair your phone first. On the phone, turn on Bluetooth. On the PC, open Settings › Bluetooth & devices and select Add device.
2. Choose Bluetooth, select your phone from the list, and confirm the pairing code on both devices. The phone should appear as Paired or Connected.
3. Open Settings › Accounts › Sign-in options
4. Expand Dynamic lock and tick Allow Windows to automatically lock your device when you're away.

Windows locks the PC about a minute after the phone goes out of Bluetooth range. It is not instant, so for a short trip away from your desk you should still press the Windows key plus L. To undo it, clear the same checkbox.

1 How to Automatically Lock Computer After Inactivity in Windows 11 Windows 11 automatically locks to protect your files when inactive. You can adjust this setting through the Local Security Policy on Pro editions or by editing the Registry on Home editions. Set the desired inactivity time in seconds or enter 0 to disable automatic locking, allowing customized control over your PC’s security. 8 min read · ↻ Updated Oct 2026

Common questions

What is Microsoft Defender Antivirus?

Microsoft Defender Antivirus is the security program built into Windows 11. It runs in the background all the time. It scans files as you open or download them and watches for suspicious behavior, so it can catch viruses, malware and other active threats before they cause damage.

For most home users it is enough on its own, as long as it stays on and up to date. It turns itself off only if you install a different antivirus, as covered earlier.

How do I know if my PC is secure?

You can check the state of your protection in the Windows Security app. A quick audit every month or so is enough:

1. Open Windows Security from the Start menu.
2. On the home page, confirm that Virus & threat protection and Firewall & network protection show a green check. Select either tile to see details.
3. In Virus & threat protection, check that Real-time protection is on and that the last scan date is recent.
4. In Firewall & network protection, check that the firewall is on for the domain, private and public networks. The active network is marked.
5. Open Settings › Windows Update and confirm that no updates are waiting.

Windows Security shows a notification and a badge on its taskbar icon when something needs your attention, so do not ignore those.

What is SmartScreen?

SmartScreen is a filter that blocks malicious websites and risky downloads. It checks the file or site against Microsoft's lists of known threats and warns you before you run something harmful.

1. Open Windows Security and select App & browser control.
2. Under Reputation-based protection, select Reputation-based protection settings.
3. Make sure Check apps and files is On. Do the same for SmartScreen for Microsoft Edge, Potentially unwanted app blocking and SmartScreen for Microsoft Store apps.

If a toggle is greyed out, your organization manages it through policy. Turning SmartScreen off is not recommended. If a warning blocks a file you know is safe, think twice before you choose to run it anyway.

How can I protect my privacy on 🪟 Windows 11?

App permissions, location access and the diagnostic data sent to Microsoft are all controlled from the Settings app. Limiting background access stops apps from collecting more than they need.

1. Open Settings › Privacy & security › Location
2. To turn location off for the whole PC, switch off Location services. To keep it on but limit it, leave it on and turn off Let apps access your location. The toggles should now read Off.
3. If you leave location on, scroll down the list of apps and switch off the ones that do not need it.
4. Under Location history, select Clear to remove locations stored on the device.
5. Go back to Privacy & security and review Camera, Microphone, Contacts and the other pages under App permissions. Switch off any app that has no reason to use them.

Turning an app's permission off can break features. A mapping or weather app, for example, may stop showing local results. If that happens, switch that one app back on.

What is a BitLocker Recovery Key?

A BitLocker recovery key is a 48-digit numerical password that unlocks an encrypted drive when Windows cannot verify the hardware. This can happen after a motherboard swap, a firmware update or certain BIOS changes. Without the key, the data on the drive is lost for good.

Back it up now, not after a problem. Windows usually saves the key to your Microsoft account automatically when you sign in with one and encryption turns on. Check that it is there:

1. Sign in to your Microsoft account in a web browser and open the page that lists your devices' BitLocker recovery keys.
2. Find your PC in the list and confirm that a key is shown for it.
3. Copy the key down and keep it somewhere safe, away from the PC, such as a password manager or a printed copy in a secure place.

If the key is not in your account, open Settings › Privacy & security › Device encryption on a supported PC, or BitLocker Drive Encryption in Control Panel on Windows 11 Pro, and choose the option to back up your recovery key. Home edition uses Device encryption and may not offer the full BitLocker controls. Without a saved key you cannot recover your files if the drive locks you out.