How to Set up Windows 10 to Protect Your Privacy

When you first get a new Windows computer (or set up an old one), you can focus on downloading your favorite applications and transferring files. This is also a good time to tweak your computer to protect your privacy.

We all need to protect our personal information . Whether you’re carrying confidential work files, confidential images, or just passwords , there is certain information you don’t want other people to have. When you first set up a computer, you are establishing habits that you will use as long as you have the computer. Instead of waiting around to take care of your privacy later, it’s best to start on the right foot.

First, a disclaimer: with the release of Windows 10 at the end of the month, we decided we’d better write this guide as it applies to Windows 10. Many of these settings, where applicable, still exist in Windows 8, but may be elsewhere or have slightly different names. In fact, even in the newest versions, the settings are often duplicated in multiple places in the OS, but we’ll cover that as best we can.

It’s also worth mentioning that Windows still allows you to install any app you want. Once installed, these apps can do just about anything. Blocking your privacy in Windows does little if you install other applications that can still read your data.

Start with a clean install, even if you bought your computer new

Before you do anything, make sure you start with a clean slate. If you bought your computer from a store, it likely contained a lot of unwanted software that the manufacturer thought you might need (or were paid for ). Getting rid of this junk is a good idea from a performance standpoint. However, sometimes even reputable vendors may include unwanted programs that violate security and privacy .

We already have a guide on how to remove malware from your computer , so we won’t rephrase it in full. However, you have two main options for purchasing a new computer:

• Wipe down your machine and reinstall Windows from scratch: This is one of the surest ways to ensure that no unnecessary applications are running on your system. If you’ve built your own car, you’re probably fine by now. If you are using a store bought computer, be sure to track your license key prior to installation, even if you are installing Windows 10 .
• Manually remove malware: Our guide will show you how to easily remove malware from your computer. It’s a bit more tedious process, and you might accidentally leave something behind, but it allows you to clean your machine without erasing anything you’ve already installed.

A clean install is a good step whether or not you’re concerned about privacy. However, if you want to make sure that there is nothing on your computer that makes you or your data vulnerable, this is even more important. The only way to make sure that nothing is running on your computer other than what you install is to clear everything on the first setup.

Disconnect from your Microsoft account

After making sure your machine is clean (or ideally while you’re doing a clean install), you should decide how closely you want your machine to be linked to your Microsoft account. Starting with Windows 8, you can sign in to Windows using your Microsoft account. Of course, there are some trade-offs here. On the other hand, your Microsoft account has two-factor authentication built in . However, you might not want Microsoft to know this every time you log into your computer. Microsoft is also no stranger to user account disputes . If you are uncomfortable with having a direct link to your personal Microsoft account tied directly to your computer, you can use a local account instead.

There are two ways to use a local account on your Windows computer. The first is to select “local account” when you first set up your computer . If you chose this option when you first installed Windows, then everything is fine. On the other hand, if you’ve ever signed into your Microsoft account on Windows, here’s how to disable it:

1. Open the “Start” menu and find “Account”, then select “Account Management”. (Or open the Settings app and select Account.)
2. Click “Sign in to a local account instead.”
3. Create a new username and password.
4. Log out and log back in with your new credentials.

After you sign in to your local account, open the same section of the application “Settings”. If your Microsoft account is still listed under Other accounts you use, you can delete it here. Of course, you will lose some functionality (most notably Cortana) if you do not have a Microsoft account connected, however this is one of the safest ways to ensure that nothing of your data is synced or transferred without your knowledge.

Check the privacy section in the Settings app

With Windows 8, Microsoft introduced a new style of “modern” apps . To go along with this, Microsoft has added a new permission system . This is mostly targeted at phones and tablets, but as Microsoft directs developers more towards the Microsoft store, more apps can use these permissions to access things like your camera, microphone, or location. To manage these permissions, open the Start menu, type privacy and select Privacy Settings.

You can find a number of settings here that you should tweak to your liking, including but not limited to:

• Location: Here you can specify the location used by all of your apps, or turn off location tracking entirely. You can also see a list of apps that can use your location and turn them on or off for each app. This only applies to new modern style Windows apps, so it can’t prevent all apps from using your location if you give the app permission.
• Camera and Microphone: Here you can block access to your camera or microphone for each app, or disable access entirely. Like the location settings, these sections only apply to modern apps. It also won’t disable devices at the system level.
• Contacts, Calendar, and Messages: If you use any Microsoft services to manage your contacts, events, or messages, you can also control which apps have access to your data here.
• Speech & Typing: In the Speech, Handwriting & Typing section, you can turn off Know Me. This setting seems oddly placed, and it’s unclear how much data Microsoft is tracking with this setting, but it states that it is being used to offer better suggestions, improve dictation, and help Cortana get to know you. So if you’re uncomfortable with digital assistants learning about your habits, it might be best to turn that off.

Depending on how much you want your operating system to know about you, it might be worth looking at the entire Privacy section. Also, keep in mind that any permissions disabled here apply only to the displayed apps. Microsoft’s permission system is still relatively new, so if you haven’t downloaded the app from the Windows Store, it probably won’t stop them from using your hardware.

Protect your apps and your data

Because Microsoft’s embedded systems can’t protect your data or the apps you download, you’ll have to do it yourself. Protecting your online privacy is a discipline in itself, but there are a few basic things you must do to stay safe before you start using your computer for normal work:

• Install antivirus / malware protection: Antivirus / malware protection can protect you from unwanted installations or malicious software, so you should start by making sure you’re protected from the basics. You can read our guide here on the differences between these tools and the ones you need.
• Download browser extensions that protect privacy. Chances are, you spend more time in your browser than any other standalone application. To protect yourself, install browser extensions such as AdBlock Plus , Disconnect, and other privacy-protecting extensions to keep your data safe.
• Use a VPN: Virtual private networks (or VPNs) have many uses, but one of the most useful is protecting your privacy . Setting up a VPN ensures that your browser traffic is encrypted and out of prying eyes.

We can’t cover all of the privacy tricks here, as they might fill out a few guides on their own. Fortunately, we have a lot of them. If you want to stay safe, you can learn more about privacy – focused web browsers , various malware, and why you shouldn’t trust Incognito Mode to ensure true privacy .

Block physical access to your computer

Once you’ve secured everything on your computer, you’re done, right? Actually, there is one more thing that needs to be taken care of. When it comes to protecting their data, most people are not inclined to consider physical access . Mega-corporations and governments aren’t the only ones you want to keep out of your data. You can also prevent visitors, untrustworthy coworkers, or certain family members from watching some of your files. To do this, you should take a few precautions:

• Turning on (and using) the lock screen: Your phone is not the only device on which you should turn on the lock screen . You can set your computer to automatically lock after a specified period of time, or alternatively, you can manually lock the screen by pressing Win + L.
• Store your machine in a safe place: The safety of your computer depends on the room in which you store it. If you have an office at work, be sure to keep the door locked when you leave. If you take your laptop to a coffee shop, don’t leave it unattended, or at least put on a physical lock and use it .
• Protect Your Wi-Fi: While not technically a physical connection, home Wi-Fi is an easy way for neighbors or passers-by to access your data. This can lead not only to security breaches, but even minor intrusions such as hijacking your Chromecast . Securing your Wi-Fi can keep your devices safe from nearby intruders.

As long as you cover other areas in this guide, physical access should be the only way someone can access your sensitive data . Of course, how important this physical safety is to you can be subjective. A top secret government agent will need more than one person in a studio apartment to lock his laptop at home. However, it is important to consider your physical machine when checking for privacy.

More…