Privacy settings to review first on a new or shared Windows PC

The first Windows privacy settings to review are the ones that control app permissions, diagnostics, sync, and sign-in. On a new or shared PC, start in `Settings` > `Privacy & security`, then check account access and lock-screen behavior before you use the machine for anything personal. That gives you the biggest privacy gains without wasting time in low-value menus.

Prerequisites

• A Windows 10 or Windows 11 PC.
• Access to the account you plan to use on the PC.
• Permission to change settings if the device belongs to someone else or is managed by an organization.
• If you are cleaning up a shared PC, enough access to check other accounts, sync options, and lock-screen settings.

Steps

1. Open Settings, then go to Privacy & security.

Settings > Privacy & security

This is the main control center for the privacy options you should review first.

2. Turn off the Windows data collection options you do not need.

Look for diagnostics, tailored experiences, advertising ID, and activity history. If Windows offers a choice between required data and optional data, keep the required part and switch off the optional part. If there is a setting for personalized ads or app suggestions based on your usage, turn it off unless you want Microsoft to use that data for recommendations.

3. Check app permissions for camera, microphone, location, and files.

Open the permission pages for Camera, Microphone, Location, and anything related to files or folders. If you do not use video calls, scanning, voice input, or location-based apps, turn the master access switches off. Then review the app lists and allow only the apps that genuinely need the feature.

4. Review the lock screen and sign-in settings.

Go to Settings > Accounts > Sign-in options and Settings > Personalization > Lock screen.

Settings > Accounts > Sign-in options
Settings > Personalization > Lock screen

Set the device to lock quickly when you step away. Make sure the PC requires a password, PIN, or other sign-in method when it wakes up, and check that you are not relying on automatic sign-in.

5. If other people use this PC, separate accounts before you share it.

Go to Settings > Accounts > Other users or Family, depending on how the device is set up.

Settings > Accounts > Other users
Settings > Accounts > Family

Make sure each person has their own account. Avoid sharing an administrator account unless you really need to, because it gives too much control over the whole PC.

6. Stop syncing more than you want across devices.

Go to Settings > Accounts > Windows backup or Sync your settings, depending on your version of Windows.

Settings > Accounts > Windows backup
Settings > Accounts > Sync your settings

Review what is being copied to other devices, then turn off anything you do not want traveling with you. Start with browser data, passwords, settings, and app preferences.

7. Check the privacy settings people forget most often.

Look at Clipboard history, lock-screen notifications, Nearby sharing, and Bluetooth. Turn off Clipboard history if you do not need it, reduce what appears on the lock screen if other people can see the screen, and switch off Nearby sharing if you do not use it on this PC.

8. Do one last pass before you start using the PC.

• Privacy & security: sensitive permissions are off unless you need them.
• Camera, Microphone, Location: only trusted apps have access.
• Accounts: you are in the right account, and no one else’s account is signed in.
• Sign-in options: the PC locks on sleep and needs a password or PIN.
• Sync: only the data you actually want is turned on.
• Lock screen: private notifications are hidden.

Start with the settings that change what Windows can see

Open Settings, then go to Privacy & security. That is the main control center for the privacy options you should review first. On a new PC, a lot of settings are often left at their default values. On a shared PC, those defaults may also reflect the last person who used it.

Focus first on the pages that affect system-wide data sharing rather than app-by-app settings. That usually means the privacy options for diagnostics, activity history, and general app permissions. If you only have time for one pass, start there before you open browser settings or less sensitive personalization menus.

A simple rule helps: if a setting changes what Windows collects, shares, or remembers across the whole device, check it before anything else. If it only changes the appearance of the desktop, it can wait.

Turn off the data collection options you do not need

Inside Settings > Privacy & security, review the pages that control diagnostics, recommendations, and activity history. The safest choice for most people is to turn off anything you do not actively use.

Look for options related to diagnostic data, tailored experiences, advertising ID, and activity history. If Windows offers a choice between required data and optional data, keep the required part and switch off the optional part. If there is a setting for personalized ads or app suggestions based on your usage, turn it off unless you want Microsoft to use that data for recommendations.

For activity history, clear anything that was already stored if this is a shared computer, then disable future collection if you do not need timeline-style features. If the PC is only for basic work, browsing, or school tasks, most people do not need extra usage tracking.

If you see a page about device usage data or “let Windows improve suggestions,” treat it the same way: turn it off unless you have a clear reason to keep it on.

Check app permissions for camera, microphone, location, and files

Now review the sensitive app permissions one by one. Go to Settings > Privacy & security, then open the permission pages for Camera, Microphone, Location, and anything related to files or folders.

Start with the broad switches that let apps access the device at all. If you do not use video calls, scanning, voice input, or location-based apps, turn those master access switches off. That blocks most apps from asking in the first place.

Then check the app lists underneath each permission. Allow only the apps that genuinely need the feature. For example, a video meeting app may need the camera and microphone, but a note-taking app usually does not. A weather app may need location, but a local text editor does not.

For file access, be careful with folder permissions such as Documents, Pictures, and Downloads. On a shared PC, a broad app permission can expose more personal files than you expect. If an app only needs one folder, do not give it broad access to everything.

Review the lock screen and sign-in settings

Move next to Settings > Accounts > Sign-in options and Settings > Personalization > Lock screen. These settings keep the PC from staying open for the next person.

Set the device to lock quickly when you step away. If Windows offers a screen timeout or a sleep timeout, shorten it so the display does not stay active for long. Then make sure the PC requires a password, PIN, or other sign-in method when it wakes up.

Check that you are not relying on automatic sign-in. On a shared machine, that can leave your account open after a restart. If you use Windows Hello, confirm that it is actually enabled and set up correctly, because a missing PIN or face sign-in setup can leave you depending on weaker fallback behavior.

Also review anything on the lock screen itself. If notifications, mail previews, or calendar items are visible before sign-in, other people can see them too.

If other people use this PC, separate accounts before you share it

If the PC belongs to several people, make sure each person has their own account. Go to Settings > Accounts > Other users or Family, depending on how the device is set up. A separate account keeps files, browser data, and many settings from mixing together.

Check whether you are signed in with a Microsoft account or a local account. A Microsoft account can sync data across devices, which is convenient, but on a shared PC it can also carry in saved passwords, browser data, and preferences if sync is turned on. A local account stays on the device, which may be better for a temporary user.

If this is a family PC, review the family settings so children or other members do not inherit access you did not mean to give. If you only need to let someone use the machine once, create a separate standard account instead of using your own. Avoid sharing an administrator account unless you really need to, because it gives too much control over the whole PC.

Stop syncing more than you want across devices

Go to Settings > Accounts > Windows backup or Sync your settings, depending on your version of Windows. Review what is being copied to other devices, then turn off anything you do not want traveling with you.

Start with browser data, passwords, settings, and app preferences. If the computer is shared, you may not want the device to sync your theme, language preferences, or saved Wi‑Fi networks. On a personal device, some sync is useful, but you should still check each category instead of leaving it all on by default.

If your browser is tied to the same Microsoft account, check its sync settings too. Passwords and bookmarks can follow you to any device signed into that account. That is convenient on your own PC, but on a shared one it can expose more than you intend.

A good middle ground is to keep only the sync options you truly use every day and turn off the rest.

The privacy settings people forget most often

A few settings get overlooked because they sit outside the obvious privacy pages. Check Clipboard history first. If it is on, copied text and images can stick around longer than you expect. Turn it off if you do not need to paste from multiple devices.

Next, look at notifications on the lock screen. Even if the PC is locked, message previews, calendar alerts, and mail snippets can still show up. Reduce what appears there if other people can see the screen.

Also review Nearby sharing and Bluetooth. Nearby sharing can make it easier to send files to nearby devices, which is handy in some settings but unnecessary on a shared or public PC. Bluetooth can also keep peripherals or paired devices connected longer than you want.

If the PC came with a manufacturer app that pushes recommendations or device care messages, check that too. Those apps often add noise and may share extra diagnostics beyond what Windows itself needs.

A quick last pass before you start using the PC

Before you settle in, do a fast checklist in Settings:

• Privacy & security: sensitive permissions are off unless you need them.
• Camera, Microphone, Location: only trusted apps have access.
• Accounts: you are in the right account, and no one else’s account is signed in.
• Sign-in options: the PC locks on sleep and needs a password or PIN.
• Sync: only the data you actually want is turned on.
• Lock screen: private notifications are hidden.

If all of those look right, the PC is in a much better state for normal use. You do not need to make every privacy setting perfect before you begin. The goal is to remove the obvious risks first, then fine-tune later if something feels too open.

What to check later if you want to go further

After the first pass, the next places to review are your browser privacy settings, account recovery details, and Windows Update. Browser settings matter because they control cookies, saved passwords, and site permissions. Account recovery matters because a shared or newly created account should still be recoverable if you lose access. Windows Update matters because privacy and security fixes often arrive there, not in the privacy menus.

If the PC will stay in regular use, you can also look at startup apps, default apps, and any cloud storage tied to the account. Those do not usually expose as much as camera or location access, but they can still affect what gets shared and what opens automatically the next time you sign in.

Completion

You are done with the first pass when Privacy & security, app permissions, sign-in, sync, and lock-screen settings all reflect how you actually want to use the PC. On a shared machine, you should also know which account is signed in and whether anyone else’s account or data is still attached.

If the screen locks when you step away, private notifications stay hidden, and only trusted apps can use sensitive permissions, the computer is in a much safer state. You can use it normally after that and come back later for browser settings and account recovery if needed.

Conclusion

If you only have a few minutes, start with `Privacy & security`, then check app permissions, sign-in, and sync. That covers the settings most likely to leak personal data without sending you through every menu. After that, make sure the account on the PC is really yours, or that each person has their own if the machine is shared. Once the obvious exposure is handled, you can use the computer normally and come back later for browser and recovery settings.

Frequently Asked Questions

Should I turn off every privacy setting on a new Windows PC?

Usually no. Some settings help the PC work the way you expect. A better approach is to turn off the parts that share data you do not need, then leave useful features on, such as a microphone for calls or location for maps if you actually use them.

What matters most on a shared Windows PC?

The biggest risks are account separation, sign-in security, app permissions, and sync. If other people can open your account, see your lock screen, or inherit your browser data, the PC is not really private for you.

Where do I find the main privacy settings in Windows?

Open `Settings` and go to `Privacy & security`. That is the main place for Windows privacy controls, including app permissions and several data-sharing options.