Windows 10 Operation System Settings: Medium privacy set

Change settigns
Privacy level
Choose
Platform
Choose
What are we setting up here?
Choose
ApplyCancel

How to keep your account from being hacked

open all
Configure your login options

What for: To keep your account from being hacked.

Windows 10 provides several system login options, including alphanumeric or graphic passwords, PIN codes, face or fingerprint recognition, and a hardware security key. For the most effective protection, we recommend using a PIN code or a fingerprint scanner.

The PIN code is stored locally on the device and is tied to your computer. Even if someone finds out your password combination, they will not be able to log in to your account from another device. That’s a PIN code’s advantage over a password.

Use a reliable secret code that:

  • Consists of 8 or more characters.
  • Contains lowercase and uppercase letters, numbers, and special characters ($, @, and others).
  • Is not too simple, such as, for example, 12345678 or 00000000.
  • Is not the same as your passwords for any other accounts, including your Microsoft password.
  • Is not an actual word or known phrase.
  • Does not contain information that strangers could easily find out (your name or the name of a loved one, pet's name, date of birth, and so on).

To create a PIN code:

  1. Open your system’s Settings by pressing the cogwheel in the Start menu or using the Windows + i key combination;
  2. Go to the Accounts section;
  3. Select Sign-in options in the menu at the left;
  4. Find PIN code and press the Add button;
  5. Click Next. If necessary, enter the password for your local or Microsoft account;
  6. Select Include letters and symbols in the opened window and create a secure combination.

Use a short and simple PIN code only if you are certain that no one else will gain access to your computer. Otherwise, strangers can to easily guess your password combination and get hold of your personal data.

You can use the same PIN to protect programs on your computer that require a login and online services — for example, OneDrive or Dropbox.

If you have a fingerprint scanner or one is built into your device, then you can enable fingerprint authorization after creating a PIN code. It is not so easy to fake a fingerprint, which makes this method safer than face recognition, which can be tricked sometimes, for example, by using a photo. Keep in mind though, that Windows will send your biometric data and your sensor usage details to Microsoft.

To turn on fingerprint authorization:

  1. Open your system’s Settings by pressing the cogwheel in the Start menu or using the Windows + i key combination;
  2. Go to the Accounts section;
  3. Select Sign-in options in the menu at the left;
  4. Find Fingerprint and press the Windows Hello Settings button;
  5. Enter the PIN code that you use to log in to the system;
  6. Scan your fingerprint;
  7. Click Close.


Turn on automatic screen lock

What for: To prevent strangers from gaining access to the system while you are away.

Windows 10 can lock your computer when you are not using it. This will prevent strangers from gaining access to your confidential data when you are not around.

To configure the screen lock:

  1. Open your system’s Settings by pressing the cogwheel in the Start menu or using the Windows + i key combination;
  2. Go to the Personalization section;
  3. Select Lock screen in the menu at the left;
  4. Press Screen saver settings;
  5. Check the On resume, display logon screen box in the opened window and select the lock interval that suits you;
  6. Click OK.

You can configure the lock settings so that a valid password is required to wake the system. This feature is enabled by default. However, it can be disabled. We recommend checking the settings and reactivating if necessary:

  1. Open your system’s Settings by pressing the cogwheel in the Start menu or using the Windows + i key combination;
  2. Go to the Accounts section;
  3. Select Sign-in options in the menu at the left;
  4. If you see that Never is selected in the Require sign-in section, press the arrow to the right of this text and select When PC wakes up from sleep.

You can lock the computer manually by pressing the Win key + L key combination or in the Start menu.

  1. Open the Start menu;
  2. Click your profile icon;
  3. Select Lock.

Enable Dynamic lock

What for: To ensure that your screen is locked automatically when you leave your computer.

Windows 10 can lock your computer when you are away. The system is paired with gadgets that are connected to your computer, such as your cell phone. To use this function, you need to connect the device to your computer with Bluetooth. Your computer will be locked when you leave the geofenced area (which is usually about 10 meters) for more than a minute.

To enable dynamic lock:

  1. Open your system’s Settings by pressing the cogwheel in the Start menu or using the Windows + i key combination;
  2. Go to the Accounts section;
  3. Select Sign-in options in the menu at the left;
  4. Check the box in the Dynamic lock section;
  5. When the warning appears, press Bluetooth & other devices;
  6. Press the Add Bluetooth or other device button and link your gadget to the computer.

Remember that Bluetooth signals can penetrate walls and other obstacles. Therefore, leaving the room may not be sufficient to lock your computer.

We recommend you use this feature in conjunction with automatic screen lock to keep your data safe even if you leave the linked gadget next to your computer. In this case your data will be safe, even if you leave the linked gadget next to your computer.


How to protect your data

open all
Enable the device search feature

What for: To lock your computer if you lose it.

Windows 10 regularly saves your device location so that you can find it. If you lose your computer or if it is stolen, you can track it and, if necessary, lock it. This feature is enabled by default, but we recommend checking your settings:

  1. Open your system’s Settings by pressing the cogwheel in the Start menu or using the Windows + i key combination;
  2. Go to the Update & security section;
  3. Select Device search in the menu at the left;
  4. Press the Change button and enable device search.

You can find and lock a lost device in the Devices section on the Microsoft Account page.

Remember that you must use the Microsoft user account that you used to log in to the lost computer to search for it. A lost device can send its location only if it is turned on and connected to the Internet.

Downside: Your computer’s location will be sent to the company’s server and stored on the device.

Restrict displaying data on the lock screen

What for: To keep your personal data private.

Windows 10 can display your Microsoft account information on the lock screen. This feature allows you to see your meeting schedule for tomorrow or notifications of incoming messages without logging in to the system. However, if you leave your laptop somewhere, strangers will be able to see this information. This feature is disabled by default. However, we still recommend checking the settings:

  1. Open your system’s Settings by pressing the cogwheel in the Start menu or using the Windows + i key combination;
  2. Go to the Accounts section;
  3. Select Sign-in options in the menu at the left;
  4. Make sure that the Show account details (e.g. email address) on sign-in screen feature is disabled.

To stop your apps from displaying notifications on the lock screen:

  1. Open your system’s Settings by pressing the cogwheel in the Start menu or using the Windows + i key combination;
  2. Go to the System section;
  3. Select Notifications & actions in the menu at the left;
  4. Uncheck the following boxes in the Notifications section:
  5. Show notifications on the lock screen.
  6. Show reminders and incoming VoIP calls on the lock screen.

To allow only particular apps to show notifications on the sign-in screen:

  1. Open your system’s Settings by pressing the cogwheel in the Start menu or using the Windows + i key combination;
  2. Go to the Personalization section;
  3. Select Lock screen in the menu at the left;
  4. Select the icons of the apps, for which detailed or summary status information is displayed on the lock screen, one at a time and select Nothing.



How to get rid of unwanted notifications and ads

open all
Turn off notifications with recommendations

What for: To stop Windows from spamming you with Microsoft offers.

By default, Windows 10 shows you notifications with tips and product recommendations from Microsoft. You can turn off these notifications.

  1. Open your system’s Settings by pressing the cogwheel in the Start menu or using the Windows + i key combination;
  2. Go to the System section;
  3. Select Notifications & actions in the menu at the left;
  4. Uncheck the box next to Get tips, tricks, and suggestions as you use Windows in the Notifications section.

If it is just the notification sounds that get on your nerves, try muting them: Uncheck the box next to Allow notifications to play sounds in the Notifications section. Some Windows 10 editions do not let users turn off notification sounds.

Disable your advertising ID

What for: So that Microsoft and advertisers do not learn too much about you.

Your advertising ID is tied to your account and used to personalize ads. You can restrict certain data collection used to personalize ads and disable the use of your advertising ID.

  1. Open your system’s Settings by pressing the cogwheel in the Start menu or using the Windows + i key combination;
  2. Go to the Privacy section. You will see the general settings tab.
  3. Disable all the toggle switches in the Change privacy settings section to fully restrict apps and websites from collecting your information to customize ads.

Microsoft will keep showing you offers and ads, but they will not be personalized.


How to protect yourself from snooping

open all
Restrict access to your camera and microphone

What for: So that no one can spy on you

Apps and websites can obtain access to the camera and microphone on your computer, for example to make video calls. Certain malware and Web pages try to get these permissions either covertly or by tricking you to spy on you. You can partially or fully restrict the system or apps and websites from accessing the camera and microphone.

To block access to your camera:

  1. Open your system’s Settings by pressing the cogwheel in the Start menu or using the Windows + i key combination;
  2. Go to the Privacy section;
  3. Select Camera in the menu at the left.
  4. If you want to block Windows and all apps from accessing your camera, press the Change button and disable the feature.
  5. If you want to block most apps from accessing your camera (for more details about exclusions, see the information after these instructions), disable the toggle switch in the Allow apps to access the camera section.
  6. If you want to block specific apps from accessing your camera, scroll down to the list of Microsoft Store apps and disable the toggle switches for the apps that do not require access to your camera. After that these apps will not be able to use the camera directly. However, they will still be able to ask you to grant them access in the Camera app. If you do that, the permission will remain valid until you cancel it.
  7. If you want to block desktop apps from accessing the camera, disable the toggle switch in the Allow Desktop apps to access the camera section.

Please note that if you use Windows Hello to sign in to your computer, the service will still have access to the camera.

To block access to your microphone:

  1. Open your system’s Settings by pressing the cogwheel in the Start menu or using the Windows + i key combination;
  2. Go to the Privacy section;
  3. Select Microphone in the menu at the left.
  4. If you want to block Windows and all apps from accessing your microphone, press the Change button and turn off the feature.
  5. If you want to block most apps from accessing the microphone, disable the toggle switch in the Allow Desktop apps to access the microphone section.
  6. If you want to block specific apps from accessing your microphone, scroll down to the list of Microsoft Store apps and disable the toggle switches next to the names of those apps that you want to block from accessing the microphone.
  7. If you want to block desktop apps from accessing the microphone, disable the toggle switch in the Allow desktop apps to access the microphone section.

Certain apps installed not from the Microsoft Store may still have access to the camera and microphone, even if you have disabled it for the apps from other sources. For example, when an app installs a driver, the app is able to directly access your hardware.

For better protection, you can disconnect your external camera and microphone. You can turn off the built-in camera and microphone using the Device Manager. However, to do that you need to know their names. You can find this information on the manufacturer's website, in your computer’s technical specifications. To disable your camera and microphone:

  1. Right-click the Start icon in the lower left corner of the screen;
  2. Select Device Manager in the drop-down list;
  3. Double click the Imaging device category;
  4. In the drop-down list right-click your camera name and select Disable device;
  5. To disable your microphone, double-click Audio inputs and outputs in the category list of your Device Manager;
  6. In the drop-down list right-click the name of your microphone and select Disable device.

You can reenable your camera and microphone at any time: Open Device Manager as specified in steps 1 and 2, then find your camera and microphone in the device list as specified in steps 3–6, and instead of Disable device select Enable device.

Downside: If you need the camera and microphone, for example to make a video call, you will have to manually enable them in the Device Manager.


Check your app permissions

What for: To keep the apps on your computer out of your private affairs.

By default, Windows 10 grants apps access to your SMS and MMS messages, phone calls, other apps' diagnostic data, e-mail messages, and other information. Malware can masquerade as harmless apps and obtain system permissions. We recommend checking your settings and revoking access from apps you do not trust.

  1. Open your system’s Settings by pressing the cogwheel in the Start menu or using the Windows + i key combination;
  2. Go to the Privacy section;
  3. In the menu at the left select the following, one at a time: Notifications, Contacts, Calendar, Phone calls, Call history, Email, Tasks, Messaging, Radio, Other devices, Auto-download files, Documents, Images, Video;
  4. If you want to block Windows and all apps from accessing this data, press the Change button and disable this feature.
  5. If you want to revoke access from these apps, disable the toggle switch in the corresponding section.
  6. If you want to revoke access for specific apps, scroll down to the list of Microsoft Store apps and disable the toggle switches next to the app names.

Please keep in mind that you will find only default and Microsoft Store apps in the list. This setting will not affect apps that were downloaded from other sources.

If you wish, you can block not all, but only desktop apps (not downloaded from the Microsoft Store) from accessing certain settings. It is true that such a ban will affect only some of these apps. To prevent third-party apps from viewing your personal information, make sure to download apps from reliable sources.

Restrict apps from accessing your account data

What for: So that developers do not learn too much about you.

Windows apps can access your account details, such as your calendar, contacts, call history, and other data. This information can be used to improve how the software works and to personalize ads, and it can also be sent to third parties. You can block the OS as well as all or just some of your apps from accessing this data.

  1. Open your system’s Settings by pressing the cogwheel in the Start menu or using the Windows + i key combination;
  2. Go to the Privacy section;
  3. Select Account info in the menu at the left.
  4. If you want to block Windows and all apps from accessing your account information, press the Change button and disable this toggle switch.
  5. If you want to revoke access from apps, disable the toggle switch in the Allow apps to access account data section.
  6. If you want to revoke access from specific apps, scroll down to the list of Microsoft Store apps and disable the toggle switches next to the app names.

Please keep in mind that you can only find default and Microsoft Store apps in the list. This setting will not affect apps that were downloaded from other sources.


How to hide from Big Brother

open all
Disable location services

What for: So that your computer does not store your location history.

The operating system as well as some apps collect data about your location. This information is sent to Microsoft and app developers' servers, and it is also stored on your computer. Geolocation is used to create routes, provide you with weather information, automatically determine your time zone, and enable certain other features. If you do not want to share your location, turn off location services.

  1. Open your system’s Settings by pressing the cogwheel in the Start menu or using the Windows + i key combination;
  2. Go to the Privacy section;
  3. Select Location in the menu at the left;
  4. Press the Change button and turn off this feature;
  5. Turn off the Allow apps access to your device feature;
  6. If you want to block specific apps from accessing your location, scroll down to the Select apps that may obtain information about your exact location section and disable the toggle switch next to the app names.
  7. To delete your location history from a device, find the Location information log section and press the Clear button.

Even if you disable geolocation access, certain apps can still get your computer’s approximate location by using Wi-Fi, Bluetooth or your wireless modem.

Downside: After you disable geolocation you cannot use the lost device search feature.

Disable voice activation

What for: So that voice assistants do not spy on your conversation.

Cortana and certain apps can react to special voice commands. By default, voice activation is enabled in Windows 10, and it can always access your microphone, even when your computer is locked. In addition, your voice samples are periodically sent to developers in order to improve the app.

The developers of voice assistants claim that this feature in no way compromises user privacy. However, if this does not sound convincing enough, you can disable voice activation.

  1. Open your system’s Settings by pressing the cogwheel in the Start menu or using the Windows + i key combination;
  2. Go to the Privacy section;
  3. Select Voice activation in the menu at the left;
  4. Turn off the toggle switches:
  5. Allow apps to use voice activation
  6. Allow apps to use voice activation when this device is locked
  7. If you want to block voice activation for specific apps, scroll down to the app list.

If you blocked apps that use voice activation from accessing your microphone, voice activation will also be unavailable. However, please note that it does not work the other way around: Disabling voice activation will not prevent other apps from accessing the microphone.

Privacy level
?

Relaxed

Basic privacy settings, maximum convenience.


Medium

A golden mean respecting privacy matters but preserving convenience.


Tight

A choice of security over convenience; instructions contain a lot of details.

Relaxed
Medium
Tight
Platform
Windows
Mac
iPhone
Android
What are we setting up here?
Instagram
Facebook
TikTok
WhatsApp
VK
Twitter
Skype
Windows 7
Windows 10
Apply