[Microsoft](https://tech.yahoo.com/computing/articles/microsofts-revamped-windows-11-search-154532617.html) has confirmed that Windows has a previously unknown Global Device ID (GDID), a permanent, unique digital identifier assigned to Windows devices that can tie a user’s actions to their device. This came to light when an alleged member of a notorious hacking group was caught at an airport after Microsoft handed over his GDID to the authorities.
So when you first set up Windows, or register a new Windows device, Microsoft ties that installation’s GDID to you. Anything that happens on that system can then be traced back to you, the individual.
GreatGojira on
I’m just seeing reasons to use Bazzite. My PC is stuck on Windows 10, but any new device I will instantly download Linux.
thhvancouver on
I mean, don’t we already have MAC-addresses and Serial Numbers? Why is this surprising?
ash_ninetyone on
The shock for me isn’t that Microsoft would do this but the idiocy of the hacker who got caught using his own personal device running Windows to try and hack a system
Nicholas-Steel on
Well yeah, it’s been there since Windows XP. How else would they determine your copy of Windows product key is valid and that your copy of Windows should be activated?
That it’s being used for more than just this is what’s news worthy.
chrisuu__ on
How is this GDID exposed when you log or hack into a system?
It sounds like a unique identifier that sits passively in the registry.
> In the case of the alleged hacker, he had used the same device for all his online activities, so even if his identity was hidden through other means, Microsoft was able to tie all those activities together.
Don’t get how it was exposed through random online activities.
jvrodrigues on
Hacker that uses windows?
evilparagon on
I’d be more concerned about how this could affect privacy from governments.
Take for instance the fact that every country is putting up more ID barriers to everything online. This means more people are flocking to VPNs. What if it eventually moves to IDs needing to be tied to GDIDs otherwise your computer itself won’t comply with what you want, you simply won’t have permission to set up your own networking and such.
Then once your ID is linked to the GDID, tada, now VPNs don’t work anymore. Doesn’t matter where in the world you say you’re connected to, your GDID says you’re from X country. No more American Netflix or Albanian torrenting.
Obviously Linux is right there, but Linux isn’t casual enough for a lot of people.
ezzys18 on
How did it get exposed. When you browse a website this id is not being sent or viewable by the website right?
sprinklesandlove on
Make the move to Linux.
chocobowler on
Can my mom access this information and see what websites I have been to?
Gandzilla on
How is this different than HWID game banns?
> Yes, Overwatch permanently bans the hardware identifiers (HWID) of players caught using cheats or severe exploiting software. These bans block the specific computer from connecting to the game,
PumpkinBrain on
This wasn’t “previously unknown”. They aren’t even hiding it. They just aren’t shouting it from the rooftops.
My oldish gaming computer can still run all the games, but I got a notice saying I didn’t meet the hardware requirements to upgrade to windows 11. So I opened the notice and it told me that the hardware problem was that my motherboard didn’t have a unique identifier chip built into it, and that windows 11 required that chip.
I don’t remember the exact words, but it did not try to be subtle about the chip’s purpose, tracking me online.
Edit: well, looks like I was wrong. In my paranoia, I assumed that something that was assigning a unique ID to my computer was… assigning a unique ID to my computer. But, like, in a different way.
pseudonym-161 on
Haven’t we always assumed Microsoft to be government spyware? This just confirms what we already knew.
TheUncleTimo on
1984 is very very soon, people
Specialist-Sun-5968 on
SteamOS does not.
thelionsmouth on
Hasn’t this been common knowledge?
v3bbkZif6TjGR38KmfyL on
This is why I file off the global device ID from my machines.
remember whoever controls the physical hardware controls what it does, even if it takes a while to assert that control
carki001 on
What about virtual machines? Is there tracking there too?
Proximity on
We’re all going to end up needing to simply run Tails.
Key-Government-3157 on
I’m no hacker, but i always assumed this. I thought that if I wanted to stay anonymous for something, I would have to at least reinstall windows and then delete. Turns out my instinct was correct…
0oWow on
Microsoft didn’t need to confirm. We’ve known it’s been done for several years now.
ottermann on
Reason # 1,864 to never use Windows…
BusinessNo1311 on
„Until July 2026, the term appeared publicly almost exclusively in a single line in the Azure Monitor documentation for enterprise administrators.“
AnotherBigToblerone on
Reminder that Linux doesn’t have this.
Tech_Wonk on
Wouldn’t this be the same device ID that Microsoft uses to track whether you have a Windows 10 / 11 license? You can wipe the system and it still knows that your install is legit (or not). Maybe that’s the MB serial #?
TornadoEF5 on
so how can we force microsoft to remove this feature ???
gaspingFish on
Its one of those things that we knew Microsoft was doing but didnt know by what means exactly.
They solved the big data problem, its not that our privacy has decreased over the past few years, we lost our ability to protect our privacy over a decade ago. LLM have made it easy to use digital footprints for targeted commerce and law enforcement. Basically, everything youve done on a device or software by a trillion dollar company has been collected before they could do anything with it.
saintlouis1910 on
They really just don’t want any of us watching—consensual—porn in privacy anymore, do they? While they rape children? Mm, Gates?
TwiztedZero on
Microsoft is going to discover it’s user base getting smaller and smaller until suddenly one day it just *vanishes*. And that – will be that.
JoeB- on
Joke’s on Microsoft. I don’t use Windows.
TauCabalander on
What if you don’t have a Microsoft account?
I’ve never registered my Windows systems.
bawlsacz on
How about Mac OS?
Matticus-G on
I think most of us in the industry have assumed this was a thing for a long time, even without confirmation.
I am sad to see it confirmed, but not shocked.
I had a single Windows machine left for a handful of niche software, but I’m going to replace it. No need for this nonsense.
Pieck6996 on
sounds illegal under the current EU laws
ProperPizza on
So… VPNs used on Windows don’t actually protect your privacy online, then?
SharkCream on
Uninstall Windows 11 and install Nobara
It’s a very similar experience as Windows 11 and has all the gaming support plugged in.
Hydrbator on
Is there no way to obfuscate/spoof the GDID?
ChaoticKiwiNZ on
I honestly just assumed this was a thing and didn’t know it wasn’t a known fact, lol.
Anyone who thinks they’re anonymous on any of their devices in 2026 are just fooling themselves. Everything we do it tracked, especially online.
FinancialWater9026 on
honestly this is why i dont fully trust when a setting says tracking is off there is always some id you cant remove good that more people are seeing this now
nikkorshooter on
Not only would the GDID give him away, but also heuristic behavior mapping, or fingerprinting in OSINT terminology. I’m assuming the hacker was smart enough to mask his ISP hops and lateral movements, but then again, why was he using a Windows device in the first place???
Zorin OS FTW!
ST33LDI9ITAL on
It’s been a thing for past 10 years ever since uefi and secure boot. If you install Windows you are tracked and profiled, period. uuid, location, emails, preferences, wifi networks, etc.
Leave A Reply
Du musst angemeldet sein, um einen Kommentar abzugeben.
43 Kommentare
[Microsoft](https://tech.yahoo.com/computing/articles/microsofts-revamped-windows-11-search-154532617.html) has confirmed that Windows has a previously unknown Global Device ID (GDID), a permanent, unique digital identifier assigned to Windows devices that can tie a user’s actions to their device. This came to light when an alleged member of a notorious hacking group was caught at an airport after Microsoft handed over his GDID to the authorities.
Microsoft describes the GDID in a published complaint (via [Windows Latest](https://www.windowslatest.com/2026/07/10/you-cant-fully-disable-microsofts-gdid-windows-11-tracker-but-these-settings-limit-what-it-captures/)) as „a persistent, device-level identifier designed to uniquely identify an installation of a Windows operating system on a device, either a physical device (e.g., a mobile phone or laptop) or virtual machine, across certain Microsoft services and scenarios.“
So when you first set up Windows, or register a new Windows device, Microsoft ties that installation’s GDID to you. Anything that happens on that system can then be traced back to you, the individual.
I’m just seeing reasons to use Bazzite. My PC is stuck on Windows 10, but any new device I will instantly download Linux.
I mean, don’t we already have MAC-addresses and Serial Numbers? Why is this surprising?
The shock for me isn’t that Microsoft would do this but the idiocy of the hacker who got caught using his own personal device running Windows to try and hack a system
Well yeah, it’s been there since Windows XP. How else would they determine your copy of Windows product key is valid and that your copy of Windows should be activated?
That it’s being used for more than just this is what’s news worthy.
How is this GDID exposed when you log or hack into a system?
It sounds like a unique identifier that sits passively in the registry.
> In the case of the alleged hacker, he had used the same device for all his online activities, so even if his identity was hidden through other means, Microsoft was able to tie all those activities together.
Don’t get how it was exposed through random online activities.
Hacker that uses windows?
I’d be more concerned about how this could affect privacy from governments.
Take for instance the fact that every country is putting up more ID barriers to everything online. This means more people are flocking to VPNs. What if it eventually moves to IDs needing to be tied to GDIDs otherwise your computer itself won’t comply with what you want, you simply won’t have permission to set up your own networking and such.
Then once your ID is linked to the GDID, tada, now VPNs don’t work anymore. Doesn’t matter where in the world you say you’re connected to, your GDID says you’re from X country. No more American Netflix or Albanian torrenting.
Obviously Linux is right there, but Linux isn’t casual enough for a lot of people.
How did it get exposed. When you browse a website this id is not being sent or viewable by the website right?
Make the move to Linux.
Can my mom access this information and see what websites I have been to?
How is this different than HWID game banns?
> Yes, Overwatch permanently bans the hardware identifiers (HWID) of players caught using cheats or severe exploiting software. These bans block the specific computer from connecting to the game,
This wasn’t “previously unknown”. They aren’t even hiding it. They just aren’t shouting it from the rooftops.
My oldish gaming computer can still run all the games, but I got a notice saying I didn’t meet the hardware requirements to upgrade to windows 11. So I opened the notice and it told me that the hardware problem was that my motherboard didn’t have a unique identifier chip built into it, and that windows 11 required that chip.
I don’t remember the exact words, but it did not try to be subtle about the chip’s purpose, tracking me online.
Edit: well, looks like I was wrong. In my paranoia, I assumed that something that was assigning a unique ID to my computer was… assigning a unique ID to my computer. But, like, in a different way.
Haven’t we always assumed Microsoft to be government spyware? This just confirms what we already knew.
1984 is very very soon, people
SteamOS does not.
Hasn’t this been common knowledge?
This is why I file off the global device ID from my machines.
„can’t turn off“ my ass
https://github.com/Korben00/no-gdid
remember whoever controls the physical hardware controls what it does, even if it takes a while to assert that control
What about virtual machines? Is there tracking there too?
We’re all going to end up needing to simply run Tails.
I’m no hacker, but i always assumed this. I thought that if I wanted to stay anonymous for something, I would have to at least reinstall windows and then delete. Turns out my instinct was correct…
Microsoft didn’t need to confirm. We’ve known it’s been done for several years now.
Reason # 1,864 to never use Windows…
„Until July 2026, the term appeared publicly almost exclusively in a single line in the Azure Monitor documentation for enterprise administrators.“
Reminder that Linux doesn’t have this.
Wouldn’t this be the same device ID that Microsoft uses to track whether you have a Windows 10 / 11 license? You can wipe the system and it still knows that your install is legit (or not). Maybe that’s the MB serial #?
so how can we force microsoft to remove this feature ???
Its one of those things that we knew Microsoft was doing but didnt know by what means exactly.
They solved the big data problem, its not that our privacy has decreased over the past few years, we lost our ability to protect our privacy over a decade ago. LLM have made it easy to use digital footprints for targeted commerce and law enforcement. Basically, everything youve done on a device or software by a trillion dollar company has been collected before they could do anything with it.
They really just don’t want any of us watching—consensual—porn in privacy anymore, do they? While they rape children? Mm, Gates?
Microsoft is going to discover it’s user base getting smaller and smaller until suddenly one day it just *vanishes*. And that – will be that.
Joke’s on Microsoft. I don’t use Windows.
What if you don’t have a Microsoft account?
I’ve never registered my Windows systems.
How about Mac OS?
I think most of us in the industry have assumed this was a thing for a long time, even without confirmation.
I am sad to see it confirmed, but not shocked.
I had a single Windows machine left for a handful of niche software, but I’m going to replace it. No need for this nonsense.
sounds illegal under the current EU laws
So… VPNs used on Windows don’t actually protect your privacy online, then?
Uninstall Windows 11 and install Nobara
It’s a very similar experience as Windows 11 and has all the gaming support plugged in.
Is there no way to obfuscate/spoof the GDID?
I honestly just assumed this was a thing and didn’t know it wasn’t a known fact, lol.
Anyone who thinks they’re anonymous on any of their devices in 2026 are just fooling themselves. Everything we do it tracked, especially online.
honestly this is why i dont fully trust when a setting says tracking is off there is always some id you cant remove good that more people are seeing this now
Not only would the GDID give him away, but also heuristic behavior mapping, or fingerprinting in OSINT terminology. I’m assuming the hacker was smart enough to mask his ISP hops and lateral movements, but then again, why was he using a Windows device in the first place???
Zorin OS FTW!
It’s been a thing for past 10 years ever since uefi and secure boot. If you install Windows you are tracked and profiled, period. uuid, location, emails, preferences, wifi networks, etc.