How to Stay Private Online in Windows 11: Browser, DNS, and System Settings

Windows 11 comes with a long list of features that are intended to make everyday life on a PC more comfortable. However, many of them collect data silently and in the background.

Anyone who takes digital privacy seriously in Germany should understand what the operating system actually does and how to get it under control. The good thing is that you don’t need third-party software for noticeable improvements.

Telemetry: What data is captured by Windows 11 by default?

Microsoft's telemetry system automatically collects diagnostic data, usage patterns, and device information. In the default configuration, Windows 11 shares so-called "optional diagnostic data," which goes far beyond mere crash reports.

To limit this data sharing, go to Settings → Privacy & Security → Diagnostics & Feedback. Set the diagnostic data level to "Only Necessary" and turn off the "Improve Handwriting and Typing" and "Personalized User Experience" options. These changes do not affect system performance and take effect immediately.

Other settings worth checking:

• Activity History – Disables the timeline feature that records app and browser history
• Search Permissions – controls whether Windows sends search queries to the Microsoft cloud
• Location Settings – restrict which apps are allowed to access GPS or network-based location data

If you want to document the changes, it's best to take screenshots in Windows to capture the "before" and "after" states. This is extremely helpful for keeping track of things during a multi-step privacy audit.

Selecting a privacy-focused browser on Windows 11

While Microsoft Edge offers tracking prevention features, its data linkage with Microsoft remains significantly tighter than that of many alternatives. Firefox and Brave are two proven options with stronger default protection mechanisms and more transparency regarding the data they actually collect.

Regardless of the browser, these settings are particularly important:

1. Disable third-party cookies – this significantly reduces cross-site tracking
2. Enable HTTPS-Only Mode – forces encrypted connections whenever possible
3. Check installed extensions—remove anything that requests broad website permissions without a clear purpose
4. Using a privacy-friendly search engine – DuckDuckGo and Startpage are widely used in Germany

Browser fingerprinting is an often underestimated topic. Even without cookies, websites can identify users based on screen resolution, installed fonts, and browser version. Brave randomizes several of these signals by default, which significantly mitigates this attack vector.

Encrypt DNS Requests on Windows 11

DNS queries are the requests your device sends to resolve domain names into IP addresses. By default, these requests are unencrypted, allowing internet service providers and network observers to log every visited website. Switching to encrypted DNS is one of the most effective single measures privacy-conscious users can take.

Windows 11 supports DNS over HTTPS (DoH) out of the box. To enable it, go to Settings → Network & Internet → Wi-Fi (or Ethernet) → Hardware Properties → DNS Server Assignment. Enter a DoH-enabled provider there, such as Cloudflare (1.1.1.1) or Quad9 (9.9.9.9), and select „Encrypted only" from the dropdown menu. If you regularly switch between Wi-Fi and Ethernet, the DNS4EU guidelines for DNS setup provide a concise step-by-step reference to help you keep these settings consistent across both interfaces.

Anyone who understands how secure DNS and private DNS change in everyday life will quickly realize that this step is more than just a checkbox in the settings. Encrypted DNS prevents DNS-based surveillance, even if the websites visited already use HTTPS.

4 steps for a „clean" Windows system

Anyone who wants to go even further can remove preinstalled software and telemetry remnants that accumulate during OEM setup by performing a clean Windows installation.

Installing Windows cleanly using an official ISO image is a proven method for getting rid of manufacturer bloatware and starting with a controlled baseline.

This is particularly relevant for anyone who has purchased a pre-configured laptop.

Further sensible hardening measures:

1. Disable Cortana – reduces cloud-based query processing
2. Check app permissions—access to the camera, microphone, and contacts should be granted on a case-by-case basis
3. Enable BitLocker – encrypts the drive so that physical access does not reveal any stored data
4. Use a local account – prevents activity data from being synced with a Microsoft account

Privacy as a Consistent Habit Across Platforms

Privacy on Windows 11 is not a one-time matter. System updates can reset certain settings, and new features occasionally introduce additional options for data sharing. Quickly checking the Privacy & Security panel every few months takes less than ten minutes and keeps the configuration up to date.

This attitude can be applied to many digital areas.

Whether it’s streaming services or financial tools: more and more users are choosing options that require as few personal details as possible to access them.

In the German online entertainment market, this is reflected, for example, in the growing demand for secure online casinos without verification, which indicates a broader consumer interest in less data exposure when registering an account.

The pattern is the same as with the operating system: Those who avoid unnecessary data points keep their digital footprint small.

Consistent habits, whether in adjusting DNS settings or checking which platforms store personal data, add up to a noticeably more private digital everyday life. Responsible gaming: Taking risks seriously

Responsible Gaming: Editorial note

In this article, we mention online gambling as an example. Gambling can be entertainment, but it carries real risks: it can become addictive and lead to financial losses — bets can be lost completely.

We therefore recommend: The official portal GameCare and the Safer Gambling Support Hub offer free self-tests as well as help and information for safe gambling across Europe and worldwide.