Windows 11 privacy settings that actually make a difference

Windows 11 privacy settings are messy by default. The useful bits are scattered across Settings and the Microsoft Privacy Dashboard, so I’ve kept this to the changes that do the most work for the least fuss.

Practical steps to configure Windows 11 privacy settings

Do these on the PC you want to lock down. After each change, reopen the same page and check the setting stuck.

1. Turn off advertising ID and personalised offers

   • Open Settings > Privacy & security > General.
   • Turn off the toggle for letting apps use an advertising ID and any setting that shows personalised ads or offers.
   • Verify: sign into an app that previously showed personalised content and check that it now looks generic. This stops apps tied to your Microsoft account from building ad profiles on that device.

2. Manage location services

   • Go to Settings > Privacy & security > Location.
   • Turn off location for the device if you do not need it. If you need location for navigation, set app-by-app permissions instead.
   • Verify: open Maps or another location-aware app and check whether it asks for permission or shows no location after you turned it off.

3. Control camera and microphone access

   • Open Settings > Privacy & security > Camera and then > Microphone.
   • Disable access for any app that does not need live audio or video. Keep access for the apps you actually use for calls.
   • Verify: run a web meeting or camera app after the change and check whether it asks for permission or cannot reach the device.

4. Adjust diagnostic data and feedback

   • Go to Settings > Privacy & security > Diagnostics & feedback.
   • Set optional diagnostic data off. Leave required diagnostic data as it is; Windows will show a notice about required data.
   • Click Delete diagnostic data if you want stored records removed.
   • Verify: look for the label that says you are sending required diagnostic data and confirm optional data is switched off.

5. Use the Microsoft Privacy Dashboard for account-level data

   • Visit the Microsoft Privacy Dashboard in your browser and sign in with your Microsoft account.
   • Clear activity types you do not want stored: browsing, search, location, voice and media activity.
   • Adjust advertising preferences on the dashboard to limit personalised ads tied to your account.
   • Verify: after clearing, the dashboard activity lists should be empty or show only the items you kept.

Those five changes cut the main data flows from Windows 11 without turning the machine into a paperweight.

Tips to improve data protection

These reduce linking between your PC and Microsoft services. Some cost convenience. That is the trade-off.

• Switch to a local account

  • Settings > Accounts > Your info > Sign in with a local account.
  • Consequence: you lose Microsoft account sync for settings, passwords and OneDrive integration.
  • Verify: after switching, revisit Accounts and confirm it shows a local account; sign-in options will be different.

• Sign out of Copilot to limit conversational data

  • Open Copilot, click the profile or account icon, and sign out of your Microsoft account within the Copilot UI.
  • This removes personalised conversation history tied to your account. Copilot features may be limited afterwards.
  • Verify: Copilot should show a sign-in prompt or anonymous mode.

• Unlink OneDrive to stop automatic syncing

  • Right-click the OneDrive cloud icon in the notification area, open Settings > Account, then choose Unlink this PC.
  • Disable OneDrive from starting on boot if you do not want it running at all.
  • Verify: OneDrive will prompt to sign in again or will not show synced files in File Explorer.

• Disable peer-to-peer update sharing

  • Settings > Windows Update > Advanced options > Delivery Optimisation.
  • Turn off Allow downloads from other PCs. This stops your PC sharing updates with other devices on the internet or local network.
  • Verify: check Delivery Optimisation status; it should show only download from Microsoft or be turned off.

• Review shared experiences and cross-device syncing

  • Settings > System or Settings > Apps > Advanced app settings (label varies by build).
  • Turn off Shared Experiences or the toggle labelled “Share across devices”.
  • Verify: check your phone link or nearby devices sections and confirm no cross-device activity appears.

Practical examples and quick checks

• After unlinking OneDrive and switching to a local account, open File Explorer and confirm cloud icons are gone. You can still sign in separately to OneDrive later if you need it.
• After turning off camera or mic access for an app, launch that app. It should either prompt for permission or fail to access the hardware.
• After clearing activity on the Microsoft Privacy Dashboard, browse or search, then revisit the dashboard and check that the cleared items do not return unless you sign in and allow them.

Trade-offs you need to accept

• Some diagnostic data is required and cannot be turned off. That is shown on the Diagnostics page.
• Switching to a local account means more manual management: passwords, settings and backups need a different approach.
• Signing out of Copilot or unlinking OneDrive cuts convenience. That is the price of less data collection.

Final takeaways
Make these changes on the devices you use daily. Apply the Settings toggles, then test the relevant app or service and check the change held. I prefer local accounts plus selective app permissions. That cuts the noise without breaking the bits I actually use.