The case of a 19-year-old hacker who was tracked down using his Windows GDID identifier has once again demonstrated that Microsoft maintains a persistent device fingerprint that is difficult to erase. Even when users rely on VPNs or frequently change IP addresses, the underlying Windows installation remains recognizable to Microsoft services through this unique identifier.
What is GDID and Why It Matters
GDID is a permanent device identifier used across Microsoft’s ecosystem, including licensing verification, the Microsoft Store, telemetry collection, and various cloud services. Because it is tied directly to the Windows installation, it survives network changes and creates a stable link between a user’s device and their activity history.
Practical Steps to Reduce Tracking
Although Microsoft does not provide a single switch to disable GDID entirely, users can take several concrete measures to limit data exposure:
- Use a local account instead of a Microsoft Account. Signing in with a Microsoft Account strengthens the connection between the device, OneDrive, the Store, and activity history. A local profile remains significantly more private.
- Disable activity history. Navigate to Settings → Privacy & security → Activity history and turn off the option to store activity history. This may affect features such as cross-device synchronization and the cloud clipboard, but it reduces the data sent to Microsoft.
- Limit diagnostic and feedback data. In Settings → Privacy & security → Diagnostics & feedback, disable the sending of optional diagnostic data. While basic telemetry cannot be fully removed, this step prevents the transmission of non-essential information.
- Disable unused background services. Turn off Phone Link, Nearby Share, cloud synchronization, unnecessary AI features, and any startup programs that connect to Microsoft servers. The fewer connections to the Microsoft ecosystem, the smaller the digital footprint.
It is important to note that reinstalling Windows does not automatically solve the problem. While a fresh installation generates a new GDID, signing back into the same Microsoft Account allows Microsoft to link the new installation with previous ones through account activity, license activation, and service history.
