Critical Windows zero-day exploit cracking system security shield illustration

July 19, 2026

Windows Zero-Day Exploit: How LegacyHive Gives Hackers Admin Access

Post By administrator Microsoft, Windows Microsoft Windows, Windows 10, Windows 11, Windows 11 Pro, Windows operating system, Windows security update, zero-day exploit No Comments

A new Windows zero-day exploit called LegacyHive has sent shockwaves through the security community — and it works on fully patched Windows systems right now, without any user interaction. Disclosed by a researcher known as Nightmare Eclipse, LegacyHive abuses the Windows User Profile Service to silently hand attackers SYSTEM-level privileges from a standard user account. If you use Windows 10 or Windows 11, this affects you.

What Is the LegacyHive Windows Zero-Day Exploit?

LegacyHive is a proof-of-concept (PoC) exploit targeting a Windows privilege escalation flaw in the User Profile Service (ProfSvc). When the exploit runs, it manipulates user profile registry hive data to load a second user’s registry hive under the attacker’s controlled context, enabling full admin-level code execution. No victim clicks, no prompts, no warnings — an attacker already holding a low-privileged account on your machine can become Administrator in seconds.

The vulnerability was publicly released in July 2026, timed provocatively to coincide with Microsoft’s Patch Tuesday cycle — meaning it dropped into the wild with no official patch available at the time of disclosure. Security researchers at SOC Prime described LegacyHive as “an unpatched local privilege escalation vulnerability in the Windows User Profile Service that allows an attacker to load another user’s registry hive.”

Which Windows Systems Are Affected by This Zero-Day Vulnerability?

This zero-day vulnerability is broad in scope. According to published analysis from Security Affairs and Cybersecurity News, LegacyHive affects:

Windows 10 (all currently supported versions)
Windows 11 (including the latest 24H2 release)
Windows Server editions (desktop and server variants)
Fully patched systems — applying all July 2026 Patch Tuesday updates does not close this gap

The “fully patched” detail is critical. Many users assume that keeping Windows Update current eliminates risk. With a zero-day, by definition, no vendor patch exists yet — which means every Windows machine in that state is potentially vulnerable until Microsoft issues a fix.

How Does the LegacyHive Windows Security Flaw Actually Work?

Windows privilege escalation attack chain showing zero-day exploit steps

Understanding the mechanism helps you appreciate the risk. The Windows User Profile Service is responsible for loading user profiles when someone logs on. LegacyHive abuses an oplock (opportunistic lock) trigger — a Windows file-system feature — to intercept this loading process at exactly the right moment.

Here is the attack chain in plain terms:

The attacker already has a standard (non-admin) user account on the target machine — gained via phishing, credential theft, or any other initial compromise.
The exploit triggers an oplock on a specific registry hive file during the profile-loading phase.
At that window of opportunity, the attacker substitutes their own controlled hive data for a higher-privileged user.
The User Profile Service loads the manipulated hive with elevated trust, giving the attacker SYSTEM-level permissions.
The attacker can now execute arbitrary code, install malware, disable security software, or create persistent backdoors — all silently.

What makes this particularly dangerous is that the attack requires no user interaction. The victim does not need to open a file, click a link, or approve anything. As long as the attacker has a foothold on the machine, LegacyHive does the rest.

Windows Privilege Escalation Risks: Why This Is Especially Serious

Privilege escalation flaws are rarely “standalone” threats. They almost always serve as the second stage of a broader attack. A threat actor who compromises a low-level account through phishing or a weak password now has a reliable ladder to full administrative control — enabling ransomware deployment, data exfiltration, lateral movement across a corporate network, or complete system takeover.

For home users, admin access means an attacker can install keyloggers, disable Windows Defender, access saved browser passwords, or hold files hostage. For businesses, the impact scales dramatically: a single compromised workstation can become the launchpad for a network-wide breach.

It is also worth noting that LegacyHive arrived just hours after Patch Tuesday — a deliberate choice by the researcher. This timing means the next patch cycle is still weeks away, leaving a maximum exposure window for all Windows users.

How to Protect Yourself Against the Windows Zero-Day Exploit

Windows security flaw protection checklist with shield and lock icons

There is no official Microsoft patch for LegacyHive at the time of writing. However, you can significantly reduce your risk with the following steps — none of which require technical expertise.

1. Limit Standard User Account Exposure

LegacyHive requires the attacker to already have a foothold — a standard user account — on the machine. Minimising how attackers can gain that initial access is therefore your first line of defence. Use strong, unique passwords, enable multi-factor authentication wherever possible, and avoid logging in with an Administrator account for day-to-day tasks.

2. Keep Windows Updated — Even Now

While no patch for LegacyHive exists yet, staying current with all Windows security flaw patches ensures you are not exposed to the dozens of other vulnerabilities Microsoft does fix each month. The May 2026 Patch Tuesday update alone addressed 120 vulnerabilities. Do not let patch fatigue leave older, known flaws open alongside new ones.

3. Enable and Monitor Windows Defender

Microsoft’s built-in threat detection can identify suspicious process behaviour consistent with privilege escalation. Ensure real-time protection is on and definitions are up to date. Third-party endpoint detection and response (EDR) tools can offer more granular behavioural monitoring for business environments.

4. Restrict Local User Account Privileges

Review who has local accounts on any shared or business Windows machine. Remove unnecessary accounts. Apply the principle of least privilege — users should only have the permissions their role requires, nothing more.

5. Watch for Microsoft’s Out-of-Band Patch

Given the severity of LegacyHive, Microsoft may release an emergency out-of-band patch before the next scheduled Patch Tuesday. Monitor the Microsoft Security Response Center (MSRC) update guide for any new advisories. When a fix arrives, apply it immediately — do not wait.

6. Be Sceptical of Phishing and Social Engineering

Because LegacyHive needs initial account access to work, stopping the first step of an attack stops everything. Be cautious of unexpected emails, suspicious links, or requests for your credentials — even from apparently familiar senders.

Is Your Windows Version Running at Full Security Potential?

This Windows zero-day exploit is a sharp reminder that not all Windows editions are equal when it comes to built-in security tooling. Windows 11 Pro, for instance, includes BitLocker drive encryption, Windows Hello for Business, Hyper-V virtualisation-based security, and enhanced credential guard — all of which raise the bar for attackers even if a privilege escalation flaw exists. Windows 10 Home and Windows 11 Home users lack some of these enterprise-grade protections.

If you are still running Windows 10, it is also worth knowing that free security updates are currently extended to October 2027 — but that end date will arrive. Planning an upgrade to Windows 11 now, rather than scrambling later, keeps you on a more secure, actively developed platform. You can browse our range of Windows 11 Pro licence keys starting from €17.90 for a retail key — a straightforward way to ensure your machine is on the most protected version of Windows available.

This is not the only high-profile Windows vulnerability in recent memory. LegacyHive follows a pattern of serious flaws including a BitLocker bypass exploit that targeted encrypted drives. Our earlier deep-dive on the BitLocker bypass exploit affecting Windows 11 covers what that separate flaw means and how to respond — worth reading alongside this article for a fuller security picture.

What Is Microsoft Doing About the LegacyHive Zero-Day Vulnerability?

Microsoft has confirmed it is investigating the LegacyHive disclosure. At the time of writing, no CVE identifier has been officially assigned, and no patch date has been announced. The researcher, Nightmare Eclipse, has a history of dropping Windows PoC exploits at high-profile moments — including in the wake of previous Patch Tuesday releases — which places additional pressure on Microsoft to respond quickly.

Security analysts note that while the PoC as publicly released requires some additional steps to work reliably in all environments, a motivated threat actor could refine it into a fully weaponised tool. The window between PoC release and active exploitation in the wild has historically been very short — in some cases just days. Treat this as a live threat, not a theoretical one.

Frequently Asked Questions

Does LegacyHive affect fully patched Windows 11 machines?

Yes. LegacyHive is an unpatched zero-day, meaning no official fix exists yet. Applying all available Windows updates reduces your exposure to other flaws, but does not close the LegacyHive vulnerability. Only a dedicated patch from Microsoft will address it directly.

Does the attacker need physical access to exploit this Windows security flaw?

No. LegacyHive is a local privilege escalation exploit, meaning the attacker needs a low-privileged user account on the machine — but that account can be obtained remotely through phishing, malware, or credential theft. Physical access is not required.

What is the difference between a zero-day exploit and a patched vulnerability?

A zero-day exploit targets a flaw for which the software vendor has not yet issued a fix. The term “zero-day” refers to the fact that defenders have had zero days to patch it. A patched vulnerability, by contrast, has a fix available — users simply need to apply the update. Zero-days are inherently more dangerous because there is no immediate remediation from the vendor.

Should I upgrade from Windows 10 to Windows 11 because of this?

LegacyHive affects both Windows 10 and Windows 11, so upgrading alone will not protect you from this specific flaw. However, Windows 11 Pro offers additional built-in security features — such as virtualisation-based security and enhanced credential guard — that make privilege escalation attacks harder to execute and easier to detect. An upgrade is a good long-term security move, especially with Windows 10 support ending in October 2027.

How will I know when Microsoft releases a patch for LegacyHive?

Monitor the Microsoft Security Response Center (MSRC) at msrc.microsoft.com for new security advisories. You can also enable automatic Windows updates so that any out-of-band emergency patch is applied as soon as it becomes available. Security news outlets like BleepingComputer will also cover the release as soon as it drops.

Windows 11 PIN requirement lock screen with security shield icon

July 18, 2026

Windows 11 PIN Requirement: Why It’s Enforced and Your Real Options

Post By administrator Microsoft, Windows BitLocker, Microsoft Windows, Windows 11, Windows 11 features, Windows 11 Pro, Windows Hello, Windows security update No Comments

The Windows 11 PIN requirement catches many users off guard: you sit down to log in with your familiar password and Windows refuses to move on without a PIN. This isn’t a bug or a mistake — Microsoft deliberately pushes users toward PIN-based sign-in as part of its Windows Hello security framework. Understanding exactly why this happens, what triggers it, and what you can legitimately do about it will save you a lot of frustration.

What Is the Windows 11 PIN Requirement, Really?

Infographic comparing Windows Hello PIN device binding versus network password transmission

The Windows 11 PIN is not the same as a classic numeric passcode. Under Windows Hello, a PIN is a device-bound credential backed by the Trusted Platform Module (TPM) chip on your machine. According to Microsoft’s official Windows Hello for Business documentation, the PIN never leaves the device, meaning an attacker who steals your Microsoft account password still cannot use it to unlock your specific PC remotely. That is the core of Microsoft’s security argument — the PIN’s strength comes from device-binding, not from the complexity of the digits themselves.

A traditional Microsoft account password, by contrast, is transmitted over the network during authentication and is theoretically phishable. Windows Hello’s PIN sidesteps that risk entirely because it only ever authenticates locally, verified by the TPM hardware.

Why Microsoft Enforces It on Windows 11

Microsoft’s push toward Windows Hello PIN authentication reflects a broader industry shift toward passwordless identity. Several factors drive the enforcement you see on-screen:

Microsoft account requirements: Windows 11 Home now requires a Microsoft account on first setup (as of 2022–2023 releases). Once tied to a Microsoft account, Windows Hello PIN setup becomes part of the onboarding flow.
Security baseline defaults: Microsoft’s default security baselines — which inform both consumer and enterprise builds — set PIN as the preferred primary authenticator.
Windows 11 24H2 policy changes: The 24H2 update tightened several account policies. Some users on the AskWoody forum reported that November 2024 updates silently reinstated the PIN prompt even on machines where it had been disabled.
Entra ID (Azure AD) join behaviour: Devices joined to Microsoft Entra ID are forced into Windows Hello for Business provisioning on first sign-in, which mandates a PIN as the first authentication factor.
TPM 2.0 hardware baseline: Windows 11 requires TPM 2.0 on all certified hardware. Microsoft designed Windows Hello PIN to leverage this chip, so the infrastructure is always present — making enforcement technically straightforward.

The PIN vs Password Windows Debate: Who Is Actually Right?

The PIN vs password Windows debate is genuinely nuanced. Microsoft’s position is well-founded from a phishing and credential-theft standpoint — a device-bound PIN cannot be replayed from another machine. However, critics raise legitimate counter-points:

A short numeric PIN (4–6 digits) has far less entropy than a long, complex password — important if someone can physically access your machine.
Biometric fallback (face/fingerprint) can sometimes be bypassed by determined attackers with physical access, reintroducing risk at the device level.
For shared workstations or kiosk-style deployments, a PIN model may not fit the operational workflow.
Power users who already use password managers and long passphrases may see zero net benefit from switching.

The honest answer: for the average home user on a personal laptop, a Windows Hello PIN is genuinely safer against the most common threats (phishing, credential stuffing). For enterprise edge cases or shared machines, the calculus changes.

When Does the Windows 11 PIN Prompt Appear?

Windows 11 Settings accounts panel showing PIN requirement sign-in options

The PIN prompt does not appear in every situation. These are the most common triggers:

First-time setup of a new Windows 11 device with a Microsoft account
After a major feature update (especially 24H2) resets sign-in preferences
When a device is enrolled in Microsoft Entra ID or a corporate MDM (Mobile Device Management) solution
After certain monthly cumulative updates that refresh security policy baselines
When Windows detects the existing credential provider has become stale or corrupted

Your Actual Options for Managing the Windows 11 PIN Requirement

Here is the practical reality: Microsoft has made it progressively harder to remove the Windows 11 PIN entirely, but you do have options depending on your account type and edition.

Option 1: Switch to a Local Account (Home & Pro)

The most reliable way to eliminate the PIN prompt on a personal machine is to disconnect from your Microsoft account and use a local account instead. Go to Settings → Accounts → Your info and choose Sign in with a local account instead. Local accounts are not subject to the same Windows Hello onboarding flow. The trade-off: you lose OneDrive sync, Microsoft Store purchasing under your account, and some Copilot features.

Option 2: Use Group Policy (Windows 11 Pro and Enterprise Only)

On Windows 11 Pro and Enterprise, administrators can disable the Windows Hello PIN prompt through Group Policy. Navigate to Computer Configuration → Administrative Templates → Windows Components → Windows Hello for Business and set Use Windows Hello for Business to Disabled. This prevents Windows from provisioning Hello credentials on that machine. Note that this setting applies machine-wide — all users on that device are affected.

Option 3: MDM / Intune Policy (Business Deployments)

For IT administrators managing fleets of Entra ID-joined devices, the correct lever is Microsoft Intune. Under Endpoint security → Account protection, you can set the Windows Hello for Business policy to Disabled or configure specific PIN complexity and length requirements if you want to keep Hello but tailor it to your environment. This is the supported, scalable approach — not a workaround, but the proper enterprise control plane.

Option 4: Registry Edit (Advanced Users, All Editions)

A registry edit can suppress the PIN setup prompt on Windows 11 Home where Group Policy is unavailable. Navigate to HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\PassportForWork and create a DWORD value named Enabled set to 0. This mimics the Group Policy setting at the registry level. Back up your registry before making any edits — an incorrect change can destabilise Windows sign-in.

Option 5: Tolerate It and Use a Strong PIN

For many users the pragmatic answer is simply to set a strong alphanumeric PIN (Windows allows letters and symbols, not just digits). An alphanumeric PIN of 10+ characters combines the phishing-resistance of device-binding with the entropy of a traditional password — giving you the best of both worlds without fighting the OS.

Windows 11 PIN Requirement in Business Environments

IT admin configuring Windows Hello PIN policy in Microsoft Intune dashboard

The business impact of the enforced Windows Hello PIN policy is significant. Organisations that joined devices to Entra ID before fully understanding Windows Hello for Business provisioning have found that end-users are prompted to set a PIN on every first sign-in to a new device — even when IT intended password authentication to remain the primary method. Microsoft’s recommended resolution is to explicitly configure the Windows Hello for Business policy in Intune rather than leaving it in a default state, which can vary between tenants.

If your business runs on Windows 11 Pro and you are managing sign-in policies, it is worth auditing your edition choice. Windows 11 Pro provides Group Policy access that Home does not, making it significantly easier to enforce consistent authentication standards across a small business without a full Intune deployment. Licences from Buy Now Key for Microsoft Windows 11 Pro – Retail are available from €17.90 and deliver a genuine lifetime activation key, letting you access those advanced policy controls immediately.

Does Removing the PIN Weaken Your Security?

Removing the Windows Hello PIN and relying solely on a Microsoft account password reintroduces network-based authentication risk. Microsoft’s own data — cited internally — notes that accounts protected by Windows Hello are significantly less susceptible to phishing attacks than those using password-only sign-in, because the credential never traverses the network. If you do remove the PIN, compensate with a very strong, unique Microsoft account password and multi-factor authentication on the account itself (via the Microsoft Authenticator app). That way, even if your password is compromised, your account remains protected.

What to Do If Windows 11 Keeps Re-Enabling the PIN Prompt

Several users on the Microsoft Tech Community forum report that Windows 11 reinstates the PIN prompt after updates, even when it was previously disabled. This is most often caused by a cumulative update resetting the PassportForWork registry key or refreshing MDM policy. The reliable fix for managed devices is to enforce the policy through Intune or Group Policy rather than a manual registry edit, so the policy is reapplied on every startup. For home users, re-applying the registry edit after major updates — or simply switching to a local account — remains the most durable solution.

FAQ

Why is Windows 11 forcing me to use a PIN even though I never wanted one?

Windows 11, especially when configured with a Microsoft account, treats PIN setup as a default security step during onboarding and after certain updates. Microsoft designed Windows Hello PIN as the preferred authentication method because a PIN is device-bound and cannot be phished remotely. Feature updates — particularly the 24H2 release — have tightened these defaults, so even users who previously dismissed the prompt may see it reappear after updating.

Can I completely remove the PIN requirement on Windows 11 Home?

Yes, but the options are limited compared to Pro. The most reliable method on Home is to switch to a local account, which removes your device from the Microsoft account authentication flow entirely. Alternatively, a registry edit under HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\PassportForWork (DWORD Enabled = 0) can suppress the prompt, though this may be reset by future updates.

Is a Windows Hello PIN actually more secure than a password?

For most users, yes — but for a specific reason. The PIN is bound to your physical device and verified by the TPM chip, meaning it cannot be used on any other machine. A stolen Microsoft account password can be used anywhere; a stolen PIN is useless without the physical device. However, a short numeric PIN has lower entropy than a long passphrase, so if someone has physical access to your machine, a strong alphanumeric PIN or biometric lock is advisable.

How do IT admins stop Windows Hello PIN prompts for Entra ID-joined devices?

The correct approach is to configure the Windows Hello for Business policy in Microsoft Intune. Under Endpoint security → Account protection, set the Windows Hello for Business toggle to Disabled for the relevant device group. This is a supported, managed configuration and will persist across updates, unlike manual registry edits applied on individual machines.

Will Microsoft ever make the Windows 11 PIN requirement optional by default again?

Microsoft’s direction is clearly towards passwordless authentication, not away from it. With Windows 11 and the continued expansion of Windows Hello for Business, enforced PIN or biometric sign-in is likely to become more prevalent, not less. Users who genuinely prefer passwords should plan to use a local account or implement a formal Group Policy/MDM exemption rather than expect a future rollback of these defaults.

Windows 11 browser choice settings showing alternatives to Microsoft Edge

July 17, 2026

Windows 11 Browser Choice: How Dark Patterns Push You Toward Edge

Post By administrator Microsoft, Windows Browser, digital sovereignty, Microsoft Windows, Windows 11, Windows 11 features, Windows 11 Pro, Windows Search No Comments

Your Windows 11 browser choice is being quietly eroded. That is the central finding of a major report commissioned by Mozilla, which documents how Microsoft uses subtle but persistent design tactics to funnel users toward Edge — even when they have deliberately chosen a different browser. If you have ever felt like Windows keeps pulling you back to Edge no matter what you do, this report explains exactly why, and this guide tells you precisely how to reclaim your freedom.

What Mozilla’s Report Actually Found

Dark pattern UI tactics in Windows 11 browser choice settings highlighted

Mozilla commissioned independent UX researchers to audit Microsoft’s operating system and browser practices across Windows 10 and Windows 11. The result was a 74-page document cataloguing what the researchers call “harmful design” — a category that goes well beyond accidental friction. The report, titled Over the Edge, identifies a consistent pattern of Microsoft deploying interface tricks that make Edge the path of least resistance and every other browser feel like a risk or an inconvenience.

Key findings include:

Repeated prompts to switch to Edge when you open a rival browser via Windows search or the Start menu.
Fear-based warnings that frame non-Edge browsers as potentially unsafe, without any factual basis for the claim.
Confusing multi-step flows that make setting a different default browser far harder than it should be, while switching back to Edge takes a single click.
Widget and widget-board integration that opens links in Edge even after you have set a different browser as default.
Regional disparities: users inside the European Economic Area (EEA) — where regulators have pushed back on these practices — see fewer dark patterns than users outside it.

The Browser Choice Alliance, a coalition that formed in direct response to these findings, estimates that millions of users are affected globally. Microsoft’s own data shows Edge holds roughly 13% of global desktop browser market share as of mid-2026 — a figure that would likely be lower if users were making genuinely free choices.

What Is a Dark Pattern and Why Does It Matter for Browser Choice Windows Users?

A dark pattern is a user interface design that nudges people toward an outcome that benefits the company rather than the user. In the context of browser choice Windows users face, these patterns are especially significant because the operating system is the foundation of everything you do on your PC. When the OS itself is weaponised to influence software choices, users lose agency at the most fundamental level.

The Mozilla report identifies several specific dark pattern categories at play:

Confirmshaming — framing the rejection of Edge with language implying the user is making a mistake.
Misdirection — drawing visual attention to the Edge option while burying the “keep my current browser” choice.
Roach motel — making it easy to end up in Edge but difficult to get out: the multi-step process to change your default browser on Windows 11 contrasts sharply with Edge’s one-click restore prompts.
Hidden costs — not disclosing that certain Windows features (Cortana links, the News widget, some taskbar search results) will open in Edge regardless of your default browser setting.

For everyday users, this means repeated interruptions, cognitive load, and — for less tech-savvy people — an effective lock-in to a browser they never consciously chose.

How to Fix Your Default Browser Windows 11 Settings Once and For All

Step by step guide to changing default browser on Windows 11 settings

Taking back your default browser Windows 11 preference is straightforward once you know the steps — Microsoft just does not make them obvious. Here is a clean walkthrough:

Press Windows + I to open Settings.
Go to Apps, then Default apps.
Scroll down and find your preferred browser (Chrome, Firefox, Brave, etc.) in the list, or type its name in the search box at the top.
Click on your browser’s name. You will see a list of file types and link protocols (HTTP, HTTPS, .htm, .html, and more).
Set each one to your chosen browser. Crucially, do not forget HTTP and HTTPS — these are the protocols that handle most web links.
If prompted with a warning about Edge being “recommended”, ignore it and confirm your choice.

The official Microsoft Answers guidance confirms these are the correct steps — though it is telling that this process requires far more clicks than Edge’s own prompts to switch back.

One important caveat: even after following every step above, certain Windows 11 elements — including the News and Interests widget, some taskbar search links, and the Windows Search panel — may still open in Edge by design. These are the “roach motel” aspects the Mozilla report highlights, and there is currently no single system-wide fix for all of them. Third-party tools like EdgeDeflector (or its successor MSEdgeRedirect) can intercept these Edge-forced links and redirect them to your true default browser.

Windows Browser Settings: What Changed in Windows 11 Compared to Windows 10

Microsoft actually tightened the browser default process when it launched Windows 11 in October 2021. Under Windows 10, users could change their default browser in a single step. Windows 11 introduced the per-file-type model described above, which requires changing HTTP, HTTPS, and multiple file extensions individually. Privacy researchers described this change as deliberately regressive — making Windows browser settings more complex than they were five years earlier, not less.

The EEA is the notable exception. Under pressure from the EU’s Digital Markets Act (DMA), Microsoft introduced a more streamlined default browser selection screen for EEA users. This regional difference is significant: it proves Microsoft can make the process easy — it simply chooses not to for users outside the EEA where it is not compelled to do so.

The DMA came into force in March 2024, and early monitoring suggests compliance is partial at best. Regulators are still assessing whether Microsoft’s EEA implementation truly meets the law’s spirit, or whether friction has simply been redistributed rather than removed.

Browser Choice Windows: Which Alternatives Are Worth Switching To?

Windows 11 browser choice alternatives including Firefox Chrome and Brave

Once you have freed your browser choice Windows defaults from Edge, you have excellent alternatives. Each has different strengths:

Mozilla Firefox — the most privacy-respecting mainstream browser, open-source, with strong extension support. The natural choice if the Mozilla report’s findings prompted you to act.
Google Chrome — the most widely used browser globally; excellent compatibility but heavier on RAM and data collection.
Brave — Chromium-based but with aggressive tracker blocking and a privacy-first default configuration.
Vivaldi — highly customisable, Chromium-based, popular with power users who want deep control over their browser experience.
LibreWolf — a hardened Firefox fork for users who want maximum privacy with minimal configuration effort.

None of these will disappear from your taskbar after a Windows update or quietly revert to Edge following a system change — provided you follow the default-setting steps above and check them after every major Windows update.

Why Your Windows Version Matters More Than You Might Think

The version of Windows you run directly affects how many of these patterns you encounter — and how much control you have over your own system. Windows 11 Pro, for instance, gives IT administrators and savvy home users access to Group Policy settings that can enforce default browser choices more robustly than the standard Settings panel. If you are on Windows 11 Home, you lose that layer of control.

Running a genuine, activated copy of Windows 11 also matters for a less obvious reason: unactivated or grey-market builds sometimes disable or obscure Settings panels, meaning the steps above may not work as expected. At Buy Now Key, you can pick up a fully activated Microsoft Windows 11 Pro licence from €17.90 — a one-time purchase that gives you lifetime activation on your device, so you are always working from a clean, legitimate installation with full access to every system setting.

Not sure whether Pro is the right edition for you? Our breakdown of Windows 11 Pro vs Home walks you through every key difference, including the Group Policy access that makes enforcing your browser preferences far more reliable.

What This Means for the Broader Fight Over Browser Choice Windows

The Mozilla report is not an isolated complaint. It sits within a broader regulatory and advocacy context that is gradually shifting in users’ favour. The EU’s DMA, the UK’s Digital Markets, Competition and Consumers Act, and ongoing antitrust scrutiny in the United States all treat default settings and pre-installation practices as legitimate competition concerns — not just UX annoyances.

The Browser Choice Alliance, formed specifically to respond to the Mozilla findings, is actively lobbying regulators and raising public awareness. The fact that Microsoft already offers a cleaner flow inside the EEA shows that competitive pressure — whether from regulators or from users voting with their download counts — does produce results.

For now, the most powerful thing any individual can do is follow the steps above, check their Windows 11 browser choice settings after every major update, and support the organisations pushing for structural change at the platform level.

Frequently Asked Questions

Why does Windows 11 keep defaulting back to Edge?

Windows 11 can appear to revert to Edge after major updates because some update processes reset default app associations. After installing a cumulative or feature update, always revisit Settings → Apps → Default apps and confirm your chosen browser is still set for HTTP, HTTPS, and HTML file types. Additionally, some Windows components (widgets, search links) are hard-coded to use Edge regardless of your default setting — third-party redirect tools can address this.

Is changing my default browser on Windows 11 safe?

Completely. Changing your default browser on Windows 11 is a standard system setting and carries no security risk whatsoever. Microsoft’s warnings suggesting otherwise are precisely the kind of misleading language the Mozilla report calls out as a dark pattern. Major alternative browsers like Firefox, Chrome, and Brave all receive regular security updates and are entirely safe to use as your primary browser.

What did Mozilla’s report actually recommend?

The report recommended that Microsoft simplify the default browser selection process to a single step (as it does inside the EEA under DMA requirements), remove fear-based prompts that misrepresent competitor browser safety, and ensure that all Windows links — including those opened from widgets and search — respect the user’s chosen default browser. Mozilla also called on regulators outside the EEA to apply similar pressure on Microsoft.

Does Windows 11 Pro give more control over browser settings than Home?

Yes. Windows 11 Pro includes access to the Group Policy Editor (gpedit.msc), which allows you to set and lock default browser configurations at a system level — useful both for individual power users and for small businesses managing multiple machines. Windows 11 Home lacks Group Policy access, leaving users dependent on the standard (and more friction-heavy) Settings panel.

Will Microsoft ever fix this voluntarily?

Evidence suggests external pressure is the primary driver of improvement. Microsoft’s EEA-specific changes under the Digital Markets Act demonstrate that the company can streamline Windows browser settings when legally required to do so. Voluntary changes outside regulated markets have been minimal. Users who want a fair default-setting experience currently need either regulatory protection or manual workarounds.

Windows 11 Copilot RAM usage shown in Task Manager on a laptop

July 13, 2026

Windows 11 Copilot RAM Usage: The Real Cost and How to Fix It

Post By administrator Microsoft, Windows Copilot AI, Microsoft Windows, PC optimisation, Windows 11, Windows 11 features, Windows 11 Pro No Comments

Windows 11 Copilot RAM usage is a genuine problem that affects everyday PC performance — and the irony is hard to miss. Microsoft’s AI assistant, designed in part to help diagnose sluggish systems, routinely consumes between 500 MB and 1 GB of system memory just sitting in the background. On machines with 8 GB of RAM, that is a significant chunk of available headroom, and on older 4 GB devices it can push the system into chronic disk-paging territory.

Why Does Windows 11 Copilot Memory Usage Run So High?

The root cause of Windows 11 Copilot memory bloat comes down to architecture. Microsoft redesigned Copilot as a “browser-in-a-box” — the app runs on its own dedicated fork of Microsoft Edge, powered by WebView2, rather than as a lightweight native Windows component. Think of it less like a simple sidebar widget and more like running a full web browser in the background at all times.

According to reporting by TechRadar, the Copilot app sits at around 500 MB of RAM when idle and climbs to roughly 1 GB during active use. This is because every Edge-based app carries the overhead of a full browser renderer — V8 JavaScript engine, rendering pipeline, and all. Microsoft has confirmed the architecture is intentional, as it allows faster feature updates delivered via the web layer without requiring full OS patches.

Idle state: approximately 500 MB of RAM consumed
Active interaction: up to 1 GB or more
Heavy AI sessions: some users on Microsoft Q&A report spikes exceeding 5 GB under load
Background processes: multiple WebView2 child processes run simultaneously, each adding memory overhead

Real-World Impact: Copilot Performance Drain on Different PCs

The Copilot performance drain feels very different depending on how much RAM your machine has. Here is a practical breakdown:

4 GB RAM Systems

These machines — often budget laptops and older desktops — are already operating close to the limit under Windows 11. With Copilot running, available memory for applications can drop below 2 GB, forcing Windows into aggressive paging to the SSD or HDD. This translates into sluggish app launches, stuttering during video playback, and noticeably longer file-save times. For users on 4 GB systems, Copilot is not a helpful AI assistant — it is an active liability.

8 GB RAM Systems

This is where most mid-range laptops and desktops sit. An 8 GB system can technically accommodate Copilot’s idle footprint, but the moment you open a browser, a productivity suite like Microsoft Office, and a communication app simultaneously, the 1 GB consumed by Copilot starts to bite. Users running Chrome alongside Office 365 have reported browser tab crashes and slowdowns directly attributable to memory pressure.

16 GB RAM and Above

On 16 GB systems, Windows 11 Copilot memory overhead is largely negligible for everyday tasks. Power users running virtual machines, video editing software, or large data sets will still notice the footprint, but the average user is unlikely to feel a meaningful slowdown. For these machines, leaving Copilot enabled is a reasonable trade-off if you actively use its features.

The Diagnostic Irony: An AI That Slows Down Your PC

There is a well-known paradox at play here. Microsoft has positioned Copilot partly as a PC health assistant — one of its touted abilities is to help users understand why their system is running slowly. Yet the Copilot performance drain means the assistant itself can be a primary contributor to the exact problem it is meant to diagnose. Asking Copilot why your PC is slow while Copilot is consuming 1 GB of RAM is a bit like hiring a plumber who keeps flooding the kitchen.

This is not a hypothetical edge case. Community threads on Reddit’s r/Windows11 and Microsoft’s own Q&A forums are full of users who identified Copilot as the culprit behind unexpected slowdowns — only after running Task Manager and seeing “Copilot” and associated WebView2 processes occupying the top memory slots.

How to Measure Copilot RAM Usage on Your PC

Before taking any action, it is worth confirming exactly how much memory Copilot is consuming on your specific machine. The process is straightforward:

Press Ctrl + Shift + Esc to open Task Manager.
Click the Processes tab and sort by the Memory column (click the column header).
Look for entries labelled Copilot, Microsoft Edge WebView2 Runtime, and any child WebView2 processes.
Add up the memory values across all related entries — the total is your true Copilot footprint.
Repeat the measurement with Copilot open and actively responding to compare idle vs. active consumption.

If the combined total exceeds 700 MB on a system with 8 GB or less of total RAM, disabling Copilot is worth serious consideration.

How to Disable Copilot Windows 11 (Three Methods)

Disabling Copilot in Windows 11 is a proven way to recover meaningful RAM. There are three main approaches, each suited to a different type of user.

Method 1: Remove Copilot from Startup Apps

This is the quickest fix and the best starting point. Open Settings > Apps > Startup, locate Microsoft Copilot, and toggle it off. This prevents Copilot from loading at boot but leaves it available to launch manually. You will recover the idle RAM footprint — typically 500 MB — every single session.

Method 2: Uninstall the Copilot App

Navigate to Settings > Apps > Installed Apps, search for Copilot, and select Uninstall. This removes the app entirely, reclaiming all associated memory. Note that Microsoft may reinstall it via Windows Update, so it is worth checking periodically if RAM reclamation is your priority.

Method 3: Group Policy Disable (Windows 11 Pro Only)

For users on Windows 11 Pro, the Local Group Policy Editor offers a more robust approach. Press Win + R, type gpedit.msc, and navigate to User Configuration > Administrative Templates > Windows Components > Windows Copilot. Enable the policy “Turn off Windows Copilot” to block it at the OS level — this prevents Microsoft from silently re-enabling it via updates.

When Disabling Copilot Windows 11 Actually Makes Sense

Not everyone should disable Copilot. The decision depends on your hardware, workflow, and how much you actually use the assistant. Here is a clear framework:

Disable if: your PC has 8 GB of RAM or less and you notice slowdowns during multitasking.
Disable if: you never open Copilot intentionally — paying a 500 MB idle tax for a feature you ignore is simply wasteful.
Disable if: you are a developer or gamer where consistent frame rates and low-latency responses matter more than AI convenience.
Keep enabled if: you regularly use Copilot for document summarisation, code explanation, or system troubleshooting and your machine has 16 GB or more.
Keep enabled if: you have Windows 11 Pro and rely on enterprise Copilot integrations across Microsoft 365 apps.

Windows 11 Copilot Memory: Is Home or Pro Right for Your Setup?

One factor that rarely gets discussed in the Copilot RAM debate is whether your Windows edition is optimised for your actual use case. Windows 11 Home does not include Group Policy Editor, meaning the most reliable method to permanently block Copilot is unavailable. If you are a power user frustrated by the inability to fully control background processes — including Copilot memory overhead — upgrading to Windows 11 Pro gives you the administrative tools to manage the OS on your terms.

BuyNowKey offers Microsoft Windows 11 Pro Retail from €17.90, making it an accessible upgrade for users who want full control over their system. It is worth considering the cost of an upgrade against the ongoing productivity loss caused by unchecked background processes.

Copilot RAM Usage vs. the Benefits: An Honest Assessment

Copilot is genuinely useful — for users who engage with it regularly. Natural language file search, AI-assisted writing in Word, and system diagnostics are real, time-saving features. The question is whether those benefits outweigh the Windows 11 Copilot memory cost for your specific situation.

The honest answer is: it depends on your RAM. Microsoft built Copilot on a web-rendering stack because it enables faster iteration and richer AI capabilities. The trade-off is a memory footprint that rivals a full browser tab. As AI features mature, it is reasonable to expect Microsoft to optimise the underlying architecture — but right now, in 2025 and 2026, the 1 GB idle footprint is a real-world consideration that every user with 8 GB or less needs to manage consciously.

FAQ

How much RAM does Windows 11 Copilot use?

Windows 11 Copilot RAM usage sits at approximately 500 MB when idle in the background and climbs to around 1 GB during active AI interactions. In some heavy-use scenarios, users have reported peaks well above that figure. These numbers come from multiple independent measurements shared on Microsoft’s Q&A forums and community tech publications.

Why does Copilot use so much memory?

Copilot is built on a dedicated instance of Microsoft Edge using the WebView2 runtime — essentially a browser running inside the app. This “browser-in-a-box” architecture gives Microsoft flexibility to push AI updates rapidly without OS patches, but it carries the full memory overhead of a Chromium-based browser engine, including a JavaScript runtime and rendering pipeline.

Will disabling Copilot speed up my PC?

If your system has 8 GB of RAM or less, disabling Copilot can produce a noticeable improvement in day-to-day responsiveness. Recovering 500 MB to 1 GB of RAM reduces memory pressure, lowers the likelihood of disk paging, and gives foreground apps more headroom. On 16 GB systems, the difference is less likely to be perceptible during standard tasks.

Does Windows 11 Home let you fully disable Copilot?

Windows 11 Home allows you to remove Copilot from startup apps or uninstall the app entirely, but it does not include the Group Policy Editor needed for a policy-level block. Users who want permanent, update-proof control over Copilot should consider Windows 11 Pro, which includes Group Policy tools. Windows 11 Pro also gives broader control over Windows Update behaviour, a useful bonus for managing AI feature rollouts.

Can Windows Update re-enable Copilot after I disable it?

Yes — Microsoft has been known to restore Copilot through feature updates, particularly on Windows 11 Home. The most reliable way to prevent this on Home edition is to uninstall the Copilot app after each update cycle. On Pro edition, enforcing the Group Policy setting “Turn off Windows Copilot” provides much stronger protection against automatic re-enablement.

Is the Copilot performance drain worth it for the features?

For users who actively use Copilot — for writing assistance, document summarisation, or natural language search — the performance trade-off is reasonable on systems with 16 GB or more. For users who open Copilot rarely or never, paying a 500 MB idle tax with no benefit makes little sense. The practical rule: if you have not used Copilot in a week, disable it and reclaim the memory.

Windows 11 clean install setup wizard running from bootable USB drive

July 3, 2026

Windows 11 Clean Install: The Complete Step-by-Step Guide

Post By administrator Microsoft, Windows Windows 11, Windows 11 features, Windows 11 Home, Windows 11 Pro, Windows operating system, Windows upgrade No Comments

A Windows 11 clean install wipes the slate entirely — no leftover drivers, no bloatware, no upgrade baggage. Whether you’re setting up a new build, salvaging a sluggish PC, or deploying multiple machines, installing from ISO gives you the cleanest, fastest result possible. This guide covers every stage: getting the verified ISO, building a bootable USB, navigating BIOS/UEFI, stepping through setup, and locking down a lean post-install configuration.

Why Choose a Clean Install Over an In-Place Upgrade?

An in-place upgrade carries forward everything already on the drive — old registry entries, conflicting drivers, and accumulated junk. A Windows 11 clean install starts from a blank partition, so you get the performance you’d expect from new hardware without any inherited problems. IT pros use it for predictable, repeatable deployments; power users use it to strip out the noise before day one.

Better performance — no fragmented app data or orphaned services from a previous install
Full control — you decide exactly what software goes on the machine
Predictable activation — a valid licence key activates cleanly on a fresh install every time
Ideal for repurposing — old business laptops become like-new endpoints

Before You Start: Hardware Requirements and Licence Keys

Microsoft requires specific hardware for Windows 11, and skipping this check is the number-one reason installs stall or fail activation. Your system needs at least a 64-bit dual-core CPU running at 1 GHz or faster, 4 GB RAM, 64 GB storage, UEFI firmware with Secure Boot, and — critically — TPM 2.0. If you’re unsure whether your machine qualifies, read our detailed Windows 11 system requirements check before continuing.

You’ll also need a valid product key. Buy Now Key offers genuine retail and OEM licences at competitive prices — for example, Microsoft Windows 11 Pro Retail is available from €17.90, while Windows 11 Home OEM starts at €9.65. Have the key ready before you start — you can skip entry during setup and activate afterwards, but knowing which edition you’ve bought determines which ISO branch to download.

Step 1 — Download the Official Windows 11 ISO

Always download the ISO directly from Microsoft. Third-party mirrors carry risks of tampered files and bundled malware. Head to the Microsoft Windows 11 download page and choose the Download Windows 11 Disk Image (ISO) option. Select your edition (Home or Pro multi-edition is fine — the key you enter later determines which version activates), choose your language, and download. The ISO for Windows 11 24H2 is approximately 6.5 GB.

Verify the ISO Integrity

Once downloaded, verify the SHA-256 hash before writing anything to USB. On Windows, open PowerShell and run:

Get-FileHash C:\path\to\Win11.iso -Algorithm SHA256

Compare the output against the hash listed on Microsoft’s download page. A mismatch means a corrupted or tampered file — re-download it. This single step has saved countless failed installs.

Step 2 — Create a Bootable USB Drive for Your Windows 11 ISO Install

The Windows 11 ISO install requires a bootable USB drive of at least 8 GB. The two most reliable tools are the Microsoft Media Creation Tool and Rufus. Rufus is the preferred choice for IT pros because it offers GPT/MBR control and optional TPM bypass for older hardware.

Using Rufus (Recommended)

Download Rufus (free, open-source) from its official site.
Insert your USB drive and launch Rufus.
Under Boot selection, click SELECT and point it at your downloaded ISO.
Set Partition scheme to GPT and Target system to UEFI (non-CSM) for any modern machine.
Click START. Rufus will present a Windows User Experience dialog — here you can optionally disable TPM/Secure Boot checks or skip the Microsoft account requirement during setup.
Rufus erases the USB and writes the bootable image. This takes 5–10 minutes.

Using the Microsoft Media Creation Tool

If you prefer Microsoft’s own tool, download the Media Creation Tool from the same download page, run it, and select Create installation media (USB flash drive, DVD, or ISO file). The tool handles download and USB writing in one step, but gives less control over partition format.

Step 3 — Configure BIOS/UEFI to Boot from USB and Perform the Windows 11 clean install

Plug the USB into the target machine and restart. Enter BIOS/UEFI by pressing the key shown on your splash screen — commonly F2, F12, DEL, or ESC depending on the manufacturer. Once inside, make these changes:

Set Boot Mode to UEFI (not Legacy/CSM)
Enable Secure Boot — required for a compliant Windows 11 install
Confirm TPM 2.0 is enabled (sometimes listed as PTT on Intel or fTPM on AMD boards)
Move your USB drive to the top of the Boot Order

Save changes and exit. The machine should boot directly into Windows Setup.

Step 4 — The Fresh Install of Windows 11 Setup Walkthrough

A fresh install of Windows 11 via the setup wizard is straightforward, but a few screens trip people up. Here’s what to expect and how to handle each stage cleanly.

Language, Time, and Keyboard

Select your locale settings and click Next, then Install now. When prompted for a product key, you can click I don’t have a product key to skip — this doesn’t affect the installation, only activation afterwards. You’ll select your edition (Home or Pro) on the next screen.

Partitioning the Drive

On the Where do you want to install Windows? screen, select your target drive. For a true clean install, delete all existing partitions on the drive (the installer will warn you — that’s expected) and click on the resulting Unallocated Space. Windows setup will create the correct system, MSR, and recovery partitions automatically. Never try to install onto a pre-existing partition unless you know why.

Microsoft Account vs. Local Account

Windows 11 Home tries to force an online Microsoft account during Out-of-Box Experience (OOBE). To bypass this on a clean install, disconnect from the internet before the setup reaches this screen, then choose I don’t have internet followed by Continue with limited setup. Windows 11 Pro offers a more direct Domain join instead option that skips Microsoft account sign-in entirely.

Step 5 — Post-Install Configuration: Building a Bloat-Free Windows 11

Setup completes and you hit the desktop. Before installing anything, run through these steps to establish a clean, fast baseline.

Install Drivers in the Right Order

Open Device Manager and note any yellow warning icons. Install drivers in this order to prevent conflicts: (1) chipset, (2) GPU, (3) audio, (4) network/Wi-Fi, (5) peripherals. Download drivers only from the manufacturer’s site — never from third-party driver aggregators.

Run Windows Update Immediately

Go to Settings → Windows Update and install every available update, including optional ones. Restart when prompted, then check again — it often takes two rounds for all cumulative updates and firmware patches to land. As of May 2026, Windows 11 24H2 is the current feature release.

Remove Pre-Installed Apps

Even a clean ISO ships with some Microsoft apps you may not want. Open Settings → Apps → Installed apps and remove anything you won’t use — Clipchamp, Tips, Xbox Game Bar (if it’s a work machine), and the various pre-pinned taskbar shortcuts. For a deeper debloat, PowerShell’s Get-AppxPackage and Remove-AppxPackage cmdlets give you surgical control.

Configure Privacy Settings

Navigate to Settings → Privacy & security and review each category. Turn off diagnostic data beyond Required, disable advertising ID, and restrict background app permissions to only what you need. For business deployments, Group Policy (available on Windows 11 Pro) handles this at scale — another reason to choose Pro over Home for professional contexts.

Activate Windows

Go to Settings → System → Activation and enter your product key. For genuine licences purchased from Buy Now Key, activation is instant and permanent — the key ties to your hardware profile on Microsoft’s servers. If you need a step-by-step walkthrough, the Windows 11 Pro download, install, and activate guide covers the process in full detail.

Frequently Asked Questions

Can I do a Windows 11 clean install without losing my files?

A clean install deliberately erases the target partition — that’s the point. Back up everything to an external drive or cloud storage before you begin. If you need to keep files in place, an in-place upgrade is a better option, though it won’t give you the same clean-slate benefits.

Do I need a product key to perform the Windows 11 ISO install?

No — you can skip the product key screen during setup and install without one. Windows will run in an unactivated state with minor UI restrictions (a watermark and inability to change some personalisation settings). You’ll need a valid key to fully activate. Buy Now Key delivers genuine licences by email within minutes of purchase.

What if my PC doesn’t meet TPM 2.0 requirements?

Rufus includes an option to create a bootable USB that bypasses TPM 2.0 and Secure Boot checks. This lets you install Windows 11 on older hardware, but Microsoft does not officially support or guarantee updates on non-compliant machines. Use the bypass only when you understand and accept that limitation.

How large should my USB drive be for a fresh install of Windows 11?

A minimum of 8 GB is required. In practice, a 16 GB USB is safer — the Windows 11 24H2 ISO is approximately 6.5 GB, which leaves little headroom on an 8 GB drive after formatting overhead. USB 3.0 drives are strongly recommended; writing with a USB 2.0 stick can take over an hour.

Should I choose Home or Pro for my fresh install of Windows 11?

Home covers the needs of most individual users. Pro adds BitLocker encryption, Hyper-V virtualisation, Remote Desktop hosting, and Group Policy — essential for business use or IT environments. Check our Windows 11 Pro vs Home comparison if you’re undecided, then pick up the right licence before you begin setup.

Windows 11 Pro deals showing OEM and Retail licence comparison with security badges

June 29, 2026

Windows 11 Pro Deals: OEM vs Retail and How to Spot Safe Discounts

Post By administrator Microsoft, Windows BitLocker, Microsoft Windows, Windows 11, Windows 11 features, Windows 11 Pro, Windows upgrade No Comments

The best Windows 11 Pro deals can save you a significant amount versus Microsoft’s full retail price — but only if you know what you’re buying. Cheap listings flood search results and marketplaces daily, and not all of them deliver a legitimate, working activation key. This guide cuts through the noise: we explain the real difference between OEM and Retail licences, flag the warning signs of grey-market resellers, and show you exactly how to verify that your Windows 11 licence is the real deal.

What Do Windows 11 Pro Deals Actually Include?

When you buy a Windows 11 Pro key online, you’re purchasing a 25-character alphanumeric product key that unlocks the operating system on one device. What changes between vendors is the licence type attached to that key — and that type determines how flexible and secure your purchase actually is.

There are three main licence categories you’ll encounter when shopping for a cheap Windows 11 Pro copy:

Retail — Sold by Microsoft directly or authorised retailers. Transferable between devices, linkable to a Microsoft account, and backed by full Microsoft support.
OEM (Original Equipment Manufacturer) — Traditionally bundled with new PCs by manufacturers. Tied to the first device it’s activated on and not intended to be transferred to new hardware.
Volume Licensing — Designed for businesses with multiple machines. Not intended for individual consumer sale; reselling these keys to end users is a grey-market practice.

According to Microsoft’s official Q&A documentation, OEM versions are tied to the first computer they’re installed on and cannot be transferred, while Retail versions give you the freedom to move the licence to new hardware. Understanding this distinction is the first step to shopping safely.

OEM vs Retail Windows 11 Pro: Which Licence Should You Choose?

The right licence type depends entirely on how you plan to use it. Here’s a straightforward breakdown:

Choose a Retail Windows 11 Pro Licence If You:

Are upgrading an existing PC and may want to transfer the key to a new build later
Want your licence linked to your Microsoft account for easy recovery
Require full Microsoft telephone support for activation issues
Need the most flexibility for long-term use

Choose an OEM Windows 11 Pro Licence If You:

Are building a brand-new PC that won’t change its core hardware for years
Want the lowest possible upfront cost for a permanent, lifetime activation
Are a system builder fitting out one or more new machines
Don’t need to transfer the licence to a different device

At BuyNowKey, you can pick up a Microsoft Windows 11 Pro OEM licence for just €12.90 — a lifetime activation for one device. If you’d prefer the full flexibility of a Retail copy, the Microsoft Windows 11 Pro Retail licence is available from €17.90, still a fraction of the cost of a boxed copy from a high-street store.

Why Do Windows 11 Pro Deals Vary So Wildly in Price?

You’ve probably noticed that Windows 11 Pro key prices range from under €5 to over €200. That enormous gap isn’t random — it reflects the source and legality of the key being sold.

€150–€260+: Microsoft Store full Retail price. You get full support, guaranteed authenticity, and easy licence transfers.
€12–€25: Legitimate OEM or discounted Retail keys from authorised resellers. Genuine keys, correctly classified, with transparent descriptions of what you’re getting.
Under €5: Almost always Volume Licensing keys sold without authorisation, stolen keys, or keys purchased with stolen payment details. These activate initially but are frequently revoked by Microsoft, leaving you with an unactivated system.

The sweet spot for safe Windows 11 Pro deals sits in that middle band — and that’s exactly where BuyNowKey operates. Prices below €5 should be an immediate red flag, not a bargain.

How to Spot a Grey-Market or Risky Windows 11 Licence

Not every discounted Windows 11 license listing is a scam, but knowing what red flags to look for protects your investment and your system.

Warning Signs of a Grey-Market Windows 11 Key

No licence type stated — Legitimate sellers always specify Retail or OEM clearly. Vague listings like “genuine key” with no further detail are suspicious.
Price below €5 — At this price point, the key is almost certainly a leaked Volume licence or one purchased with fraudulent payment details.
No refund or support policy — Reputable resellers stand behind their keys. If there’s no stated support or dispute process, walk away.
Marketplace listings with no business identity — Random eBay or Amazon Marketplace sellers with no reviews, no brand name, and no contact details.
Keys delivered via a screenshot or social media message — Legitimate vendors use automated, secure email delivery systems.
No way to verify activation post-purchase — Good resellers give you a clear path to confirm activation and offer support if something goes wrong.

Green Flags That Signal a Safe Windows 11 Pro Deal

Licence type (OEM or Retail) stated explicitly in the product listing
Transparent pricing above the grey-market floor (generally €10+)
Secure checkout, real business contact details, and a clear returns/support policy
Instant encrypted email delivery of the key
Positive verified customer reviews

How to Verify Your Windows 11 Licence After Activation

Once you’ve activated your Windows 11 Pro key, it takes less than a minute to confirm everything is above board. Here’s how:

Open Settings → System → Activation. A genuine Retail key will show “Digital licence linked to your Microsoft account”.
Press Win + R, type cmd, and run: slmgr /dlv. This command shows your full licence description, type (OEM, Retail, or Volume), and activation status.
If the Description field shows “VOLUME_KMSCLIENT” but you paid for a Retail or OEM key, you’ve received a Volume licence — contact the seller immediately.
Check the Activation Status field — it should read “Licensed”, not “Notification” or “Out-of-tolerance grace period”.

Running slmgr /dlv in Command Prompt is the fastest, most reliable method to verify any Windows 11 license — the output is detailed, unambiguous, and pulled directly from Microsoft’s activation servers.

OEM Bulk Deals: A Smart Option for Builders and IT Teams

If you’re equipping multiple machines, look for OEM multi-licence options. BuyNowKey’s Windows 11 Pro OEM 2-PC bundle starts at €12.50 per key — each activating one device permanently. For IT administrators or small businesses rolling out new workstations, this is one of the most cost-effective cheap Windows 11 Pro options available, without compromising on legitimacy.

Bulk OEM purchasing is a well-established practice for system builders. The key is sourcing from a reseller who clearly states the key type, provides support, and has a verifiable track record — not an anonymous marketplace listing promising the same product for €2.

Windows 11 Pro Deals: What You Get Beyond the OS

Beyond the licence itself, Windows 11 Pro includes a meaningful feature set that justifies the small premium over Windows 11 Home. Pro unlocks BitLocker drive encryption, Windows Sandbox, Remote Desktop, Hyper-V virtualisation, and domain join capabilities — all features that matter to professionals, home-office users, and small business owners. If you’re comparing licence types across editions, BuyNowKey’s guide on Windows 11 Pro vs Home breaks down every key difference so you can buy the right edition first time.

Bundle Deals: Even Better Value Than a Standalone Windows 11 Pro Key

If you need both a new OS and a productivity suite, combination bundles offer excellent value. At BuyNowKey you can get a Windows 11 Pro + Office 2021 Professional Plus bundle for just €36.80 (regularly €46.80) — that’s two lifetime licences for the price most retailers charge for Office alone. Both licences are clearly identified, instantly delivered, and backed by BuyNowKey’s customer support team.

Frequently Asked Questions

Are cheap Windows 11 Pro deals actually legal?

They can be, yes — but only when the licence type matches the legal channel for that key. OEM keys sold to system builders or individual PC builders are legitimate. Retail keys sold by authorised resellers at a discount are legal. The illegal grey-market keys are Volume Licensing keys sold to end consumers, or keys obtained through fraudulent means. Always confirm the licence type before purchasing.

What happens if my Windows 11 Pro key gets deactivated?

If Microsoft revokes a key — typically because it was a Volume licence sold outside its authorisation, or was purchased with stolen payment details — your system will enter “Notification mode,” displaying a watermark and limiting some personalisation settings. The system itself remains functional, but you’ll need a replacement legitimate key to restore full activation. This is why buying from a reseller with a support policy matters.

Can I transfer an OEM Windows 11 Pro licence to a new PC?

Officially, OEM licences are tied to the first device they activate on and are not intended to be transferred. Retail licences, by contrast, can be deactivated on one machine and reactivated on another. If you think you’ll be changing hardware in the near future, a Retail licence is the better investment, even at a slightly higher price point.

How do I know BuyNowKey’s Windows 11 Pro deals are genuine?

BuyNowKey clearly states the licence type (OEM or Retail) on every product listing, delivers keys securely via encrypted email, and provides customer support for activation issues. You can also verify any key yourself in under a minute using the slmgr /dlv command in Windows — legitimate keys show the correct licence channel and an active “Licensed” status with no surprises.

Is a Windows 11 Pro Retail key worth the extra cost over OEM?

For most home PC builders who don’t plan to change their hardware frequently, an OEM key offers excellent value — it’s permanent, genuine, and significantly cheaper than a boxed Retail copy. If you build or upgrade PCs regularly, or want your licence linked to your Microsoft account for easy recovery across hardware changes, a Retail key is worth the modest additional spend. At BuyNowKey, the price gap between the two is small enough that you can make the right choice for your needs without breaking the budget either way.

Windows laptop setup 2026 showing first boot configuration screen

June 26, 2026

Windows Laptop Setup 2026: The No-Fluff First-Hour Guide

Post By administrator Windows BitLocker, Microsoft Windows, PC optimisation, Windows 11, Windows 11 features, Windows 11 Pro No Comments

A proper Windows laptop setup in 2026 can be done in under an hour — if you know which steps matter and which defaults you can safely skip. Whether you’ve just unboxed a brand-new machine or performed a clean reinstall, this guide gives you a straight-line path from first boot to a fast, secure, and productive desktop.

Step 1: Begin Your Windows 11 Setup at the Out-of-Box Experience (OOBE)

The first screen you see is Microsoft’s OOBE — the setup wizard that guides you through language, region, and account creation. In 2026, Windows 11 strongly pushes a Microsoft Account sign-in, and for most people that’s the right call: it unlocks BitLocker device encryption, syncs settings across machines, and ties into Windows Hello. However, if you’re setting up a business workstation that uses a domain or Azure Active Directory, skip the personal Microsoft Account at this stage and join the domain instead.

Personal use: Sign in with your Microsoft Account to enable device encryption and seamless OneDrive backup.
Work/IT use: Choose “Set up for work or school” to connect Azure AD or a local domain.
Privacy-first users: A local account remains possible via the OOBE command-line bypass, though Microsoft has tightened this in recent Insider builds.

Before you click past it, turn off every optional telemetry, advertising ID, and location-sharing toggle on the privacy screens. These are on by default; switching them off now saves you hunting through Settings later.

Step 2: Run Windows Update — All of It

Your new Windows 11 setup almost certainly shipped with an older build. Microsoft released the KB5089549 cumulative update on 12 May 2026, patching over 120 vulnerabilities — you want those fixes before you do anything else online. Go to Settings > Windows Update > Check for updates and install everything, including optional driver updates. Expect at least one reboot. Then check again — Windows often staggers updates across multiple passes.

While you’re in Settings, flip to Windows Update > Advanced options > Receive updates for other Microsoft products and toggle that on. This ensures Office, Edge, and other Microsoft software update through the same channel, so nothing gets left behind.

Step 3: Choose the Right Edition Early in Your Windows Laptop Setup

If your machine came without a licence key, or you performed a clean install, now is the time to decide between Windows 11 Home and Windows 11 Pro. For the majority of home users and freelancers, Home covers everything. Pro is worth the upgrade if you need BitLocker full-disk encryption management, Remote Desktop hosting, Hyper-V virtual machines, or Group Policy control. At Buy Now Key, a Microsoft Windows 11 Pro – Retail licence is available from €17.90 — a one-time purchase with lifetime activation, no annual subscription required. If you want the OS and a full productivity suite together, the Windows 11 Pro & Office 2021 Professional Plus bundle brings both for €36.80, saving you over €10 compared to buying separately.

Step 4: Activate Windows and Verify

After entering your licence key, head to Settings > System > Activation and confirm the status reads “Windows is activated with a digital licence.” If activation fails, ensure you’re running the correct edition that matches the key — a Pro key won’t activate a Home installation without a feature upgrade. Microsoft’s official activation troubleshooter at Microsoft Support walks through every known error code.

Step 5: Harden Security Settings During Your Windows Setup

A new Windows setup is at its most vulnerable before security layers are in place. Work through this checklist before you browse or install anything else.

Enable BitLocker (Pro) or Device Encryption (Home)

On Pro, go to Control Panel > BitLocker Drive Encryption and turn it on for your system drive. On Home, check Settings > Privacy & Security > Device encryption — if the toggle exists, switch it on. Either way, save your recovery key to your Microsoft Account or print it. Losing this key means losing access to your data permanently.

Set Up Windows Hello

Windows Hello — facial recognition or fingerprint sign-in — is faster and more secure than a typed password. Go to Settings > Accounts > Sign-in options and enrol your face or fingerprint. You’ll still set a PIN as a fallback; make it at least 6 digits.

Review App Permissions

Under Settings > Privacy & Security, audit which apps have access to your camera, microphone, location, and contacts. Revoke access for any app that doesn’t need it. Pre-installed OEM software is a common offender here.

Turn On Find My Device

Navigate to Settings > Privacy & Security > Find my device and enable it. This is the single step most people skip and most regret when a laptop goes missing.

Step 6: Remove the Bloatware

OEM manufacturers and Microsoft itself ship software you’ll never use. A clean set up Windows PC routine means going to Settings > Apps > Installed apps and uninstalling anything you don’t recognise or want — games, trial antivirus suites, media players, and manufacturer utilities that phone home in the background. Also open the Start menu, right-click pinned tiles for apps like TikTok or Candy Crush, and choose Uninstall. This frees RAM, reduces background CPU usage, and shrinks your attack surface.

For a deeper clean, the free tool Winget (built into Windows 11) lets you list and remove packages from the command line in bulk. Run winget list in an elevated PowerShell window to see everything installed, then winget uninstall <package-id> for anything you want gone.

Step 7: Install Your Essential Software Stack

With a clean base in place, install software purposefully rather than by habit. A practical 2026 stack for most users looks like this:

Browser: Firefox or Brave for privacy; Edge if you stay in the Microsoft ecosystem. Install uBlock Origin immediately.
Productivity suite: Office 2021 Professional Plus gives you Word, Excel, PowerPoint, Outlook, and more with a one-time licence — no Microsoft 365 subscription needed. Buy Now Key stocks it from €19.10 for an OEM key.
Password manager: Bitwarden (free, open-source) or 1Password. Do not reuse passwords across sites.
Backup solution: Windows Backup (built-in) for system images; a cloud solution like Backblaze or OneDrive for document versioning.
PDF reader: The built-in Edge reader handles most tasks, but Sumatra PDF is a lightweight alternative with no telemetry.
Communication: Teams (if your organisation uses it) or Signal for personal messaging.

Use Winget to install most of these in one go: winget install Bitwarden.Bitwarden, for example, pulls the latest verified version directly from the Windows Package Repository.

Step 8: Configure Performance and Power Settings

Windows 11 ships in Balanced power mode, which is fine for battery-powered laptops but throttles desktop machines unnecessarily. On a plugged-in desktop or a laptop you mainly use docked, switch to High Performance or Best Performance under Settings > System > Power.

Also disable startup programmes you don’t need: open Task Manager (Ctrl+Shift+Esc), go to the Startup apps tab, and disable everything with a high startup impact that you don’t actually need at boot. Spotify, Discord, and Teams are common culprits that add 5–15 seconds to your boot time each.

Step 9: Set Up Backup Before You Need It

The most overlooked step in any Windows laptop setup guide is backup — and yet it’s the one that saves you when everything else goes wrong. In 2026, a practical two-layer backup strategy means: OneDrive (or another cloud service) for documents and photos with continuous sync, and a periodic local image backup to an external drive using Settings > System > Storage > Backup options. Set the local backup to run weekly at minimum. If you’ve enabled BitLocker, your backup drive should also be encrypted.

Step 10: Run Final Windows Setup Checks Before You Start Working

Before you consider your Windows 11 setup complete, run through this final checklist:

Windows Update shows “You’re up to date.”
Windows Security (built-in Defender) shows a green tick on all four protection areas.
BitLocker or Device Encryption is active and recovery key is saved.
Windows Hello is enrolled and working.
At least one backup location (cloud or local) is configured and has run at least once.
All browser extensions apart from an ad-blocker are reviewed and necessary ones only are active.
Startup apps list shows only essentials.

If every item above is ticked, your machine is in better shape than the vast majority of Windows laptops in daily use — and you’ve done it in a single session.

FAQ

Do I need a Microsoft Account to set up a Windows 11 laptop in 2026?

Windows 11 Home now requires a Microsoft Account during the standard OOBE setup flow, and Microsoft has removed most of the easy bypass routes in recent 2025–2026 Insider builds. A Microsoft Account is genuinely useful — it enables device encryption, recovery options, and settings sync. If you strongly prefer a local account, the workaround involves entering a command at the network screen during setup, though this may stop working in future updates.

What’s the difference between Windows 11 Home and Pro for a new setup?

For personal use and most freelance work, Windows 11 Home covers everything you need. Windows 11 Pro adds BitLocker full-disk encryption management, Remote Desktop host capability, Hyper-V for running virtual machines, and Group Policy — features that matter mainly in business or IT contexts. The price difference is modest; check the Windows 11 Pro vs Home comparison guide to decide which edition fits your needs.

How long does a full Windows laptop setup take in 2026?

Allow 45–90 minutes for the complete process — including updates, which require at least one reboot and sometimes two. The OOBE itself takes around 10 minutes. Software installation time varies depending on what you need, but using Winget to batch-install common tools cuts that significantly. Bloatware removal and security configuration together add another 15–20 minutes.

Is Windows Defender enough, or do I need third-party antivirus?

Microsoft Defender Antivirus, which ships built into Windows 11, consistently scores in the top tier of independent antivirus tests (AV-TEST and AV-Comparatives both give it high marks). For the vast majority of home users in 2026, Defender combined with a good ad-blocker, regular updates, and sensible browsing habits provides strong protection without the overhead of a paid suite. Third-party antivirus makes more sense in regulated business environments with specific compliance requirements.

Should I create a recovery drive as part of my new Windows setup?

Yes, and it’s worth doing it on day one before any problems arise. Insert a USB drive of at least 16 GB, search for “Create a recovery drive” in the Start menu, and follow the prompts. This lets you boot into repair tools, reset Windows, or reinstall the OS if your machine stops booting — without needing a separate installer download. Keep the drive somewhere safe and label it clearly.

June 21, 2026

BitLocker Bypass Exploit: What Windows 11 Users Must Do Now

Post By administrator Microsoft, Windows BitLocker, Microsoft Windows, Windows 11, Windows 11 features, Windows 11 Pro, Windows security update No Comments

A working BitLocker bypass exploit has been publicly released, and it is already sending shockwaves through the security community. Tracked as CVE-2026-45585 and nicknamed YellowKey, this Windows 11 encryption flaw lets an attacker with brief physical access read your supposedly encrypted drive — no password, no PIN, no recovery key required. If you use BitLocker to protect sensitive data on a Windows 11 device, you need to understand exactly what has happened and what you can do about it right now.

What Is the YellowKey BitLocker Vulnerability?

Step-by-step diagram of the BitLocker bypass exploit attack chain using USB

YellowKey is an unpatched BitLocker zero-day that exploits a weakness inside the Windows Recovery Environment (WinRE). The attacker boots the target machine from a specially crafted USB drive, which loads a custom FsTx folder structure that manipulates WinRE’s startup sequence. Because Windows Recovery Environment runs before the main OS — and therefore before BitLocker’s full authentication layer is enforced — the exploit can extract volume data without ever prompting for a decryption credential.

The vulnerability is classified under CWE-77 (Command Injection) and carries a CVSS score of 6.8. It affects Windows 11 (all currently supported versions) as well as Windows Server 2022 and 2025. The researcher who discovered it disclosed it publicly after becoming frustrated with slow vendor response — meaning a working proof-of-concept tool has been available on GitHub for anyone to download and use. That public availability is what makes this a critical incident rather than a theoretical risk.

How the BitLocker Bypass Exploit Actually Works

Understanding the attack chain helps you appreciate why the standard advice — “just keep Windows updated” — is not enough this time, because no patch yet exists.

Step 1 — Physical access: The attacker needs the device in their hands for only a few minutes. Stolen laptop, unattended workstation, or a device seized at a border — all are realistic attack scenarios.
Step 2 — Boot from USB: The malicious USB drive is inserted and the machine is restarted, booting directly into the crafted WinRE environment. Most consumer laptops allow USB boot by default.
Step 3 — FsTx folder injection: The custom FsTx folder tricks WinRE into treating the USB environment as a trusted recovery context, bypassing the prompt for a BitLocker PIN or recovery key.
Step 4 — Drive access: The encrypted volume is mounted and its contents become readable. The attacker can copy files, exfiltrate credentials, or plant malware — all while BitLocker appears to be doing its job.

The entire process can take under ten minutes, which makes it practical in the real world. No special hardware is needed beyond an off-the-shelf USB stick.

Why This Windows 11 Encryption Flaw Is So Serious

Risk gauge highlighting Windows 11 encryption flaw severity for affected users

BitLocker has been the flagship full-disk encryption tool built into Windows since Vista, and millions of professionals, businesses, and individuals rely on it as their primary defence against data theft when hardware is lost or stolen. A confirmed BitLocker zero-day of this nature undermines that entire trust model.

According to the official CVE-2026-45585 record, Microsoft has confirmed the vulnerability and issued interim mitigation guidance while a permanent security update is developed. The CVE advisory explicitly states: “We are issuing this CVE to provide mitigation guidance that can be implemented to protect against this vulnerability until the security update is available.” In other words, there is no patch yet — only a workaround script.

The breach is particularly damaging for organisations operating under GDPR, HIPAA, or similar data-protection frameworks. Encrypted storage is a recognised technical safeguard; if that safeguard is neutralised by a publicly known exploit, regulators may treat any resulting data loss as a failure of due diligence.

Who Is at Risk From This BitLocker Vulnerability?

You are potentially exposed if any of the following apply:

You run Windows 11 Home, Pro, or Enterprise with BitLocker (or Device Encryption) enabled.
You run Windows Server 2022 or 2025 with BitLocker volume protection.
Your device’s BIOS/UEFI firmware allows booting from USB without a password — which is the factory default on most consumer laptops.
You have not yet applied Microsoft’s interim mitigation script.
Your BitLocker configuration relies solely on TPM without a PIN (the most common default setup).

Devices running Windows 10 appear to be unaffected by this specific exploit chain, though they carry their own separate security concerns. Windows 11 users are the priority audience for this guidance.

How to Protect Yourself From the BitLocker Bypass Exploit

Windows 11 laptop screen showing BitLocker bypass exploit protection steps

There are several concrete steps you can take today, before Microsoft ships a full patch. None of them require waiting.

Apply Microsoft’s Official Mitigation Script

Microsoft has published a PowerShell mitigation script that modifies WinRE’s trusted boot path to prevent the FsTx injection technique from working. Download it from your Windows Update advisory dashboard or from Microsoft’s Security Response Center. Run it with administrator privileges on every affected device. This is the single most important step.

Enable a BitLocker Pre-Boot PIN

By default, most Windows 11 devices use TPM-only BitLocker protection, which means the drive auto-unlocks at boot without a PIN. Switching to TPM + PIN mode adds an authentication step that runs before WinRE loads, significantly raising the bar for a physical attacker. To enable it:

Open Group Policy Editor (gpedit.msc) — available on Windows 11 Pro and above.
Navigate to Computer Configuration → Administrative Templates → Windows Components → BitLocker Drive Encryption → Operating System Drives.
Enable “Require additional authentication at startup” and set the PIN option to “Require startup PIN with TPM”.
Run manage-bde -protectors -add C: -TPMAndPIN in an elevated Command Prompt and follow the prompts.

Disable USB Boot in BIOS/UEFI

If an attacker cannot boot from a USB drive, the exploit cannot run. Enter your device’s BIOS/UEFI firmware settings (typically by pressing F2, F10, Del, or Esc at startup) and either disable USB boot entirely or set a BIOS administrator password that is required before the boot order can be changed. This is a strong compensating control while the patch is pending.

Enable Secure Boot and Keep It Enabled

Secure Boot verifies the integrity of each component in the boot chain. While YellowKey has been demonstrated even on machines with Secure Boot active, combined with the PIN and BIOS controls above it creates a layered defence that significantly complicates the attack. Windows 11 already requires Secure Boot by default — confirm it has not been disabled on your device via System Information → System Summary → Secure Boot State.

Audit Physical Access Controls

Because this BitLocker bypass exploit requires physical access, hardening the physical environment matters. Lock unattended devices with a cable lock, enforce screen-lock policies, and ensure that company devices are never left in vehicles overnight. For travelling workers, whole-device encryption combined with the pre-boot PIN and disabled USB boot provides the strongest protection available until a patch lands.

What Microsoft Has Said — and What Still Needs to Happen

Microsoft has acknowledged CVE-2026-45585 and confirmed it is working on a permanent fix. The interim mitigation script, updated in late May 2026, replaces earlier manual steps with an automated tool that is easier to deploy at scale via Intune or Group Policy for enterprise environments. Individual users should apply it manually. Microsoft’s Security Response Center is tracking the issue and has indicated that a formal security update will arrive in a future Patch Tuesday release — though no date has been confirmed at time of writing.

The disclosure method — a disgruntled researcher dropping a working exploit on GitHub — is a reminder of why the security community’s relationship with responsible disclosure matters. Once a proof-of-concept is public, defenders have a narrowing window before opportunistic attackers begin using it routinely. Acting now, not when the patch arrives, is the right posture.

Does This Mean BitLocker Is Broken for Good?

No. The BitLocker vulnerability exposed by YellowKey is real and serious, but it is exploitable only with physical access. An attacker cannot run this exploit remotely over a network. BitLocker remains highly effective against the most common threat — bulk data theft from lost or stolen hardware — provided you add the pre-boot PIN and disable USB boot. Those two changes alone close the attack vector that YellowKey depends on.

Full-disk encryption still matters enormously. Without it, a thief who steals your laptop has instant access to every file on the drive; with BitLocker + PIN active, the same thief faces an effectively impenetrable barrier until Microsoft’s patch closes the WinRE gap entirely.

Keep Your Windows 11 Licence Current and Up to Date

Security patches are delivered through Windows Update, and a genuine, activated Windows 11 licence is what keeps that channel open. If your copy of Windows 11 is unactivated or running on an unsupported licence, you may not receive critical security updates — including whatever patch Microsoft eventually releases for CVE-2026-45585.

At Buy Now Key, you can pick up a legitimate Windows 11 Pro licence starting from €17.90 — a small investment compared to the cost of a data breach. If you need Windows 11 for home use, the Windows 11 Home licence is available from €15.60 and ensures you stay on Microsoft’s supported update track. Staying licensed means staying patched — and right now, patching quickly is everything.

For a broader overview of how the May 2026 update cycle addressed other vulnerabilities, see our earlier coverage of the Windows 11 KB5089549 update, which patched 120 vulnerabilities and included a related BitLocker recovery fix.

FAQ

Does the BitLocker bypass exploit work remotely?

No. CVE-2026-45585 (YellowKey) requires physical access to the target device. An attacker must be able to insert a USB drive and restart the machine. There is no known remote exploitation vector for this specific vulnerability, which means devices in secured, locked offices face a considerably lower risk than laptops carried by travelling workers.

Does Windows 11 Home support BitLocker with a PIN?

Windows 11 Home includes Device Encryption (a simplified form of BitLocker) but does not include the full Group Policy controls needed to enforce a pre-boot PIN. The TPM + PIN configuration described in this article requires Windows 11 Pro or higher. Upgrading to Pro is the most straightforward way to gain full BitLocker management on a Home device.

Is Windows 10 affected by this BitLocker vulnerability?

Based on current researcher and vendor reporting, the YellowKey exploit specifically targets the WinRE implementation found in Windows 11 and Windows Server 2022/2025. Windows 10 does not appear to be affected by this particular attack chain, though it carries other end-of-support security risks as it approaches its October 2025 end-of-life date.

Will applying the mitigation script break anything on my PC?

Microsoft’s official mitigation script is designed to modify WinRE’s trusted boot configuration without affecting normal Windows operation. Most users will notice no difference in day-to-day use. However, it is good practice to ensure you have a current BitLocker recovery key backed up to your Microsoft account or printed and stored securely before running any boot-level changes.

How will I know when the permanent patch is released?

Microsoft will deliver the fix through Windows Update as part of a future Patch Tuesday release. Enable automatic updates in Settings → Windows Update to receive it as soon as it becomes available. You can also monitor the Microsoft Security Response Center advisory for CVE-2026-45585 for the latest status.

Should I stop using BitLocker until this is fixed?

Absolutely not. Disabling BitLocker entirely would leave your data far more exposed than leaving it enabled with the interim mitigations applied. A device without any encryption is trivially readable by anyone who removes the drive. The correct response is to keep BitLocker active, enable the pre-boot PIN, apply the mitigation script, and disable USB boot in firmware.

Windows 11 Microsoft account requirement sign-in prompt on laptop screen

June 18, 2026

Windows 11 Microsoft Account Requirement: What’s Forced and What’s Not

Post By administrator Microsoft, Windows digital sovereignty, Microsoft Windows, Windows 11, Windows 11 features, Windows 11 Pro, Windows operating system No Comments

The Microsoft account requirement in Windows 11 has gone from a mild inconvenience to a full-blown flashpoint — and in 2025, Microsoft has made it more unavoidable than ever. Whether you’re setting up a brand-new PC or simply trying to use everyday features, sign-in gates are appearing in places they never existed before. This guide breaks down exactly which features now demand a Microsoft account, how the setup requirements have changed, and what local account workflows still remain viable.

Why the Microsoft Account Requirement Is Getting Stricter

Timeline of Windows 11 Microsoft account requirement policy changes since launch

When Windows 11 launched in October 2021, the Windows sign-in requirement applied mainly to Home edition during the Out-of-Box Experience (OOBE). Pro users could skip past it by selecting “Set up for work or school” and choosing “Domain join instead.” That workaround, along with the popular OOBE\BypassNRO command, gave millions of users a route to a local account in Windows 11 without ever touching a Microsoft account.

As of early 2025 and continuing into Insider Preview builds released in October 2025, Microsoft has systematically removed those escape routes. According to reporting from Ars Technica, the latest Insider builds have patched out OOBE\BypassNRO, the start ms-cxh:localonly command, and several other well-known methods. The trajectory is clear: Microsoft wants your account, and it is narrowing the gap between wanting and having.

Which Features Now Require a Microsoft Account Login

Not every Windows 11 capability is locked behind a Microsoft account login — but the list of those that are keeps growing. Here is the current state of play:

Initial Setup (OOBE) — Home Edition: A Microsoft account is mandatory from first boot on Windows 11 Home. There is no in-box option to choose a local account.
Initial Setup (OOBE) — Pro Edition: Previously bypassable; newer Insider builds have closed most workarounds, though the “domain join” path still works in many current stable builds.
Microsoft Store: Browsing is possible without sign-in, but downloading any app, game, or media requires a Microsoft account login.
OneDrive Integration: File sync, automatic backup to the cloud, and the “Personal Vault” feature all require a signed-in account.
Windows Copilot (AI features): Basic Copilot interaction works without a sign-in, but features like Copilot Vision, chat history, and personalised suggestions are gated behind a Microsoft account.
Settings Sync: Syncing themes, browser favourites, passwords, and accessibility settings across devices requires an active Microsoft account session.
Xbox Game Pass / PC Game Pass: Fully tied to a Microsoft account — no exceptions.
Find My Device: The device location feature only works when the device is linked to a signed-in Microsoft account.
Backup and Recovery (Windows Backup): The Windows Backup app, introduced to help users migrate settings to a new PC, requires a Microsoft account to store and restore data.

What Still Works With a Local Account in Windows 11

Local account in Windows 11 versus Microsoft account features comparison diagram

Running a local account in Windows 11 does not cripple your machine — it just limits the connected ecosystem features. For many home users and small business owners who prioritise privacy or simply do not want another login to manage, local accounts remain genuinely functional for core tasks.

Full access to all installed desktop applications (Win32 apps — including Office, browsers, and productivity tools)
File Explorer, local printing, and all offline system settings
Local network sharing and mapped drives
Windows Defender and Windows Security (no account required for definitions updates)
Windows Update — critical security patches continue to install without a Microsoft account
Task Manager, Registry Editor, and all administrative tools

The honest reality: if your workflow centres on installed software, a local network, and offline storage, a local account covers most of what you need day-to-day.

How the Windows Sign-In Requirement Has Evolved Since 2021

Understanding the timeline helps frame just how quickly Microsoft has moved. At launch in 2021, the Windows sign-in requirement only applied to Windows 11 Home during OOBE — and even then, disconnecting the internet cable before setup was a reliable bypass. By 2023, Microsoft had begun closing that gap. By mid-2024, OOBE\BypassNRO was flagged for removal. In March 2025, Insider builds made the Microsoft account requirement significantly harder to skip for both Home and Pro. By October 2025, Microsoft had removed the ms-cxh:localonly workaround as well.

The Windows Central source that sparked widespread community discussion — noting that users are “tired of Microsoft account requirements and workarounds” — reflects genuine frustration that has been building for years. Hacker News threads on the topic regularly reach the front page, a sign that this issue resonates far beyond casual consumers and touches developers, IT administrators, and privacy-conscious power users.

Local Account Workarounds: What Still Works (and What Doesn’t)

Windows 11 settings screen showing how to switch Microsoft account login to local

The workaround landscape changes with every major build. Here is an accurate summary as of mid-2025 stable releases:

Methods That Work on Current Stable Builds

Windows 11 Pro — “Domain Join” path: During OOBE, select “Set up for work or school,” then choose “Domain join instead” on the next screen. This drops you into local account creation without requiring a Microsoft account or internet connection.
Post-install switch: Sign in with a Microsoft account during setup, then go to Settings > Accounts > Your info and select “Sign in with a local account instead.” This is still a supported, in-box route on stable builds.
Enterprise / Education editions: These editions have never required a Microsoft account at setup and remain fully controllable via Group Policy.

Methods That No Longer Work on Insider / Newer Builds

OOBE\BypassNRO — patched in current Insider builds and expected to be removed from stable in a future update
start ms-cxh:localonly — removed in October 2025 Insider Preview builds
Disconnecting the network cable during Home edition setup — now detected and blocked in newer builds

Third-Party Tools

Tools like Rufus (which can inject local account registry tweaks into a Windows 11 ISO) have remained functional for longer than official workarounds, but they require technical confidence and carry no official support. Use with care and always download from the project’s official source.

Why Microsoft Wants Your Account — And Why Users Push Back

Microsoft’s commercial incentive is transparent: a signed-in user is a user who can be shown personalised ads in the Start Menu, upsold OneDrive storage (15 GB free, with paid tiers above that), and retained within the Microsoft 365 ecosystem. The Microsoft account login is also the foundation for features like Recall and Copilot+ PC personalisation — AI-driven capabilities that require cloud-side processing tied to a specific identity.

Users push back for equally transparent reasons. Privacy advocates do not want Microsoft collecting activity data tied to a persistent identity. IT professionals managing fleets of machines need deterministic, offline-provisioned accounts. Parents setting up children’s PCs worry about connected accounts creating unexpected purchases or exposure to online content. And a significant number of users simply want to own their computing experience without a corporation sitting in the middle.

The frustration is legitimate on both sides — but the power balance has shifted decisively toward Microsoft with each successive Windows 11 build.

Choosing the Right Windows 11 Edition for Your Needs

If the Microsoft account requirement is a deal-breaker for you, edition choice matters enormously. Windows 11 Pro gives you meaningfully more flexibility than Home — including the “domain join” local account path at OOBE, Group Policy support, and BitLocker. For business deployments, Windows 11 Pro is the minimum sensible choice; for enterprise-scale control, Education or Enterprise editions remove account requirements entirely via policy.

If you are looking to get Windows 11 without paying full retail price, Buy Now Key offers genuine, activated licences for both editions. Windows 11 Pro is available from €17.90 — and for those who want the full productivity stack from day one, a Windows 11 Pro and Office 2021 Professional Plus bundle is available from €36.80. Both come with lifetime activation on one device and instant digital delivery.

It is also worth reading the Windows 11 Pro vs Home comparison guide before deciding, since the differences in account flexibility alone may tip the balance for privacy-focused users.

Practical Tips for Managing the Microsoft Account Requirement

Whether you ultimately sign in with a Microsoft account or find a path to a local account, there are steps that make the experience more manageable:

Use a “throwaway” Microsoft account at setup: Create a free Microsoft account with minimal personal information, complete setup, then switch to a local account via Settings > Accounts. The account costs nothing and can be ignored afterward.
Disable OneDrive auto-start: If you sign in but do not want cloud sync, go to OneDrive Settings > Account > Unlink this PC, then disable OneDrive from startup via Task Manager.
Turn off diagnostic data sharing: Even on a local account, go to Settings > Privacy & Security > Diagnostics & feedback and set diagnostic data to “Required only.”
Disable ad personalisation: Under Settings > Privacy & Security > General, toggle off “Let apps use advertising ID” to reduce targeted ads in the Start Menu.
Consider Windows 11 Pro if you value flexibility: The additional Group Policy controls are genuinely useful for long-term account management and telemetry reduction.

FAQ

Is the Microsoft account requirement the same on Windows 11 Home and Pro?

No. Windows 11 Home has required a Microsoft account at setup since launch, with very limited workarounds available. Windows 11 Pro historically allowed a “domain join” bypass, and this still works on current stable builds — but Microsoft has been closing these gaps in Insider Preview builds, suggesting it may disappear in a future stable release. Pro still gives you meaningfully more flexibility today.

Can I switch from a Microsoft account to a local account after setup?

Yes, on current stable builds this is still possible. Go to Settings > Accounts > Your info and select “Sign in with a local account instead.” Follow the prompts, set a username and password, and sign out. Your files and installed apps will remain intact. This is one of the most reliable local account paths available right now.

Which Windows 11 features will I lose on a local account?

You will lose access to the Microsoft Store (for downloads), OneDrive sync, Settings sync across devices, Windows Backup, Copilot personalisation features, Find My Device, and Xbox Game Pass. Core features — file management, installed desktop apps, Windows Update, Windows Defender, and all offline tools — continue to work normally.

Will Microsoft eventually remove the local account option entirely?

Microsoft has not announced the removal of local accounts from Windows 11. What it has done is remove workarounds that let users bypass the Microsoft account during initial setup. Once a device is set up, the post-install switch to a local account remains available on stable builds. Enterprise and Education editions are explicitly designed to avoid the consumer-account requirement. For home users, the option exists but keeps getting harder to reach during OOBE.

Does buying Windows 11 from a reseller like Buy Now Key change the account requirements?

No — the Windows 11 licence key activates the same Microsoft-distributed operating system regardless of where you bought it. The activation process itself does not require a Microsoft account; it simply validates your product key. It is the initial setup experience (OOBE) and certain post-install features that enforce the sign-in requirement, and those are controlled by Microsoft’s software, not the licence source.

Windows 11 virtual machine setup using Hyper-V Manager on a desktop

June 12, 2026

Windows 11 Virtual Machine Setup: Enable & Configure Hyper-V

Post By administrator Microsoft, Windows Microsoft Windows, tools, Windows 11, Windows 11 features, Windows 11 Pro, Windows operating system No Comments

Windows 11 virtual machine setup is easier than most people think — and it starts with a powerful tool that is already built into your operating system: Hyper-V. Whether you need to test new software, run a legacy application, or build a safe development sandbox, setting up a VM on Windows 11 Pro takes less than 15 minutes and costs nothing extra. This guide walks you through every step.

What Is Hyper-V and Why Use It for Virtual Machine Configuration?

Hyper-V virtual machine configuration architecture diagram for Windows 11

Hyper-V is Microsoft’s native Type-1 hypervisor, first introduced in Windows Server 2008 and later brought to desktop editions of Windows. Unlike third-party tools such as VMware Workstation or VirtualBox, Hyper-V runs at the hardware level, meaning it has direct access to CPU virtualisation extensions for near-native performance. For anyone serious about virtual machine configuration on Windows 11, Hyper-V is the most integrated and cost-effective choice available.

Key reasons to choose Hyper-V for your Windows 11 VM:

No extra cost — included free with Windows 11 Pro, Enterprise, and Education.
Hardware-level isolation — each VM runs in a completely separate environment from your host OS.
Snapshot support — take checkpoints before risky changes and roll back instantly.
Broad OS compatibility — run Windows, Linux, and older Windows versions side by side.
Integration with Windows 11 tools — manages from within the familiar Windows interface.

System Requirements for Windows 11 VM Setup with Hyper-V

Before enabling Hyper-V, confirm your machine meets the official Microsoft hardware requirements for Hyper-V. You will need:

Windows 11 Pro, Enterprise, or Education — Hyper-V is not available on Windows 11 Home by default.
64-bit processor with Second Level Address Translation (SLAT).
CPU virtualisation extensions (Intel VT-x or AMD-V) enabled in UEFI/BIOS.
Minimum 4 GB RAM on the host — 8 GB or more is strongly recommended so both host and guest can run comfortably.
Sufficient free disk space — a basic Windows 11 guest needs at least 20–30 GB for its virtual hard disk.

If you are still running Windows 11 Home and want Hyper-V, upgrading to Microsoft Windows 11 Pro (available at Buy Now Key from just €17.90) instantly unlocks Hyper-V alongside BitLocker, Remote Desktop, and a full suite of professional features.

How to Enable Hyper-V on Windows 11 Pro

Enabling Hyper-V feature in Windows 11 Pro for virtual machine setup

Enabling Hyper-V on Windows 11 Pro takes just a couple of minutes. There are two methods — the graphical approach and the PowerShell approach. Both work equally well.

Method 1: Enable Hyper-V via Windows Features

Press Win + R, type optionalfeatures, and press Enter.
In the Windows Features dialog, scroll to Hyper-V and tick the checkbox (expand it to confirm both Hyper-V Management Tools and Hyper-V Platform are selected).
Click OK and allow Windows to install the required components.
Restart your PC when prompted.

Method 2: Enable Hyper-V via PowerShell

Right-click the Start button and select Windows Terminal (Admin) or PowerShell (Admin).
Paste the following command and press Enter:
Enable-WindowsOptionalFeature -Online -FeatureName Microsoft-Hyper-V -All
Type Y when asked to restart, and your system will reboot with Hyper-V enabled.

After restarting, search for Hyper-V Manager in the Start Menu — its presence confirms Hyper-V is active and ready for Windows 11 VM setup.

Creating Your First Windows 11 VM in Hyper-V Manager

With Hyper-V enabled, Windows 11 VM creation is straightforward using the built-in New Virtual Machine Wizard.

Step 1: Open Hyper-V Manager

Search for Hyper-V Manager in the Start Menu and open it. In the left pane, click your computer name to select it as the host.

Step 2: Launch the New Virtual Machine Wizard

In the right-hand Actions panel, click New → Virtual Machine. The wizard will guide you through each configuration option.

Step 3: Name and Location

Give your VM a meaningful name (e.g. “Test-Lab-Win11”) and choose a storage location with enough free space. For a typical virtual machine configuration, a dedicated folder on a secondary drive keeps things organised.

Step 4: Choose Generation

Select Generation 2 for any modern OS (Windows 10, Windows 11, or a recent Linux distribution). Generation 2 supports UEFI, Secure Boot, and delivers better performance than the legacy Generation 1 option.

Step 5: Assign Memory

Assign at least 2048 MB (2 GB) of startup RAM for a Windows 11 guest. Enable Dynamic Memory so Hyper-V can share host RAM intelligently — this is especially useful if you run multiple VMs simultaneously.

Step 6: Configure Networking

Connect the VM to a virtual switch. If you have not created one yet, open the Virtual Switch Manager from the Actions panel and create an External switch tied to your physical network adapter. This gives the VM full internet and network access. Choose Internal if you want the VM isolated from external networks.

Step 7: Create the Virtual Hard Disk

Create a new VHDX file (the modern Hyper-V disk format). A 60–80 GB dynamically expanding disk is a sensible default — it only consumes as much physical space as data actually written to it.

Step 8: Attach an Installation ISO

Select Install an operating system from a bootable image file and browse to your Windows 11 ISO (downloadable free from Microsoft’s official site) or any other OS image. Then click Finish.

Configuring Your VM Settings After Creation

Windows 11 VM Hyper-V setup settings panel showing configuration options

Before starting the VM for the first time, right-click it in Hyper-V Manager and choose Settings. This is where fine-tuned virtual machine configuration happens.

Processors — allocate 2 or more virtual CPUs for a Windows 11 guest to ensure smooth performance.
Secure Boot — leave this enabled for Windows 11 (required by Microsoft). Choose the Microsoft Windows template.
Integration Services — keep all Hyper-V Integration Services enabled (Guest Services, Heartbeat, Time Synchronisation) for the best host-to-guest interaction.
Checkpoints — change checkpoint type to Production for a cleaner, application-consistent snapshot experience.
Enhanced Session Mode — enables clipboard sharing, audio redirection, and USB pass-through between host and guest.

Taking Checkpoints: The Real Power of Hyper-V VM Setup

One of the biggest advantages of Hyper-V VM setup over testing directly on bare metal is the checkpoint (snapshot) system. Before installing any untested software or making system changes:

Right-click the running VM in Hyper-V Manager.
Select Checkpoint.
Give the checkpoint a descriptive name.

If anything goes wrong, simply right-click the checkpoint and choose Apply to restore the VM to its previous state in seconds. This non-destructive workflow is exactly why developers, IT professionals, and software testers rely on Windows 11 VM configurations rather than risking their production machines.

Do You Need Windows 11 Pro to Run Hyper-V?

Yes — Hyper-V is exclusively available on Windows 11 Pro, Enterprise, and Education. Windows 11 Home does not include the Hyper-V feature in the standard Windows Features list. If you are currently on Windows 11 Home and want to unlock Hyper-V, the most cost-effective path is a licence upgrade.

At Buy Now Key, you can pick up a genuine Windows 11 Pro licence at a fraction of the retail price. Upgrading activates Hyper-V immediately — no reinstall required — along with BitLocker encryption, Remote Desktop hosting, and Windows Sandbox, another lightweight virtualisation tool ideal for quick testing sessions.

Not sure whether Pro is the right edition for your needs? Check out the Windows 11 Pro vs Home comparison guide for a full feature-by-feature breakdown.

Frequently Asked Questions

Can I run a Windows 11 VM inside Hyper-V on a Windows 11 host?

Yes, this is fully supported. You will need a Windows 11 ISO and must enable TPM 2.0 and Secure Boot inside the VM settings. Hyper-V supports virtual TPM (vTPM), which satisfies Windows 11’s hardware requirements inside the guest environment without needing a physical TPM chip for the VM.

Does Hyper-V slow down my host machine?

Simply enabling Hyper-V has a minimal impact on host performance — typically less than 1–2% overhead at idle. Performance impact grows only when VMs are actively running. Assigning Dynamic Memory and limiting virtual CPU counts to what the guest actually needs keeps the host responsive.

What is the difference between a Generation 1 and Generation 2 VM in Hyper-V?

Generation 1 VMs use legacy BIOS firmware and are best for older operating systems (Windows XP, Vista, some 32-bit OSes). Generation 2 VMs use UEFI firmware, support Secure Boot, and offer faster boot times and better performance. Always choose Generation 2 for Windows 10, Windows 11, and modern Linux distributions.

Can I move a Hyper-V VM to another computer?

Yes. Hyper-V stores each VM as a folder containing VHDX disk files and configuration XML files. You can copy the entire folder to another Windows 11 Pro machine and import it via Hyper-V Manager using Import Virtual Machine. This makes lab migrations and backups very straightforward.

Is there a RAM minimum for running a Windows 11 VM in Hyper-V?

Microsoft recommends at least 4 GB RAM for a Windows 11 guest, but in practice 2 GB of assigned startup memory with Dynamic Memory enabled can work for light tasks. For a comfortable Windows 11 virtual machine setup and configuration experience — especially for software testing — a host with 16 GB total RAM and 4 GB assigned to the VM is the sweet spot most professionals target.

Cart

What Is the LegacyHive Windows Zero-Day Exploit?

Which Windows Systems Are Affected by This Zero-Day Vulnerability?

How Does the LegacyHive Windows Security Flaw Actually Work?

Windows Privilege Escalation Risks: Why This Is Especially Serious

How to Protect Yourself Against the Windows Zero-Day Exploit

1. Limit Standard User Account Exposure

2. Keep Windows Updated — Even Now

3. Enable and Monitor Windows Defender

4. Restrict Local User Account Privileges

5. Watch for Microsoft’s Out-of-Band Patch

6. Be Sceptical of Phishing and Social Engineering

Is Your Windows Version Running at Full Security Potential?

What Is Microsoft Doing About the LegacyHive Zero-Day Vulnerability?

Frequently Asked Questions

Does LegacyHive affect fully patched Windows 11 machines?

Does the attacker need physical access to exploit this Windows security flaw?

What is the difference between a zero-day exploit and a patched vulnerability?

Should I upgrade from Windows 10 to Windows 11 because of this?

How will I know when Microsoft releases a patch for LegacyHive?

What Is the Windows 11 PIN Requirement, Really?

Why Microsoft Enforces It on Windows 11

The PIN vs Password Windows Debate: Who Is Actually Right?

When Does the Windows 11 PIN Prompt Appear?

Your Actual Options for Managing the Windows 11 PIN Requirement

Option 1: Switch to a Local Account (Home & Pro)

Option 2: Use Group Policy (Windows 11 Pro and Enterprise Only)

Option 3: MDM / Intune Policy (Business Deployments)

Option 4: Registry Edit (Advanced Users, All Editions)

Option 5: Tolerate It and Use a Strong PIN

Windows 11 PIN Requirement in Business Environments

Does Removing the PIN Weaken Your Security?

What to Do If Windows 11 Keeps Re-Enabling the PIN Prompt

FAQ

Why is Windows 11 forcing me to use a PIN even though I never wanted one?

Can I completely remove the PIN requirement on Windows 11 Home?

Is a Windows Hello PIN actually more secure than a password?

How do IT admins stop Windows Hello PIN prompts for Entra ID-joined devices?

Will Microsoft ever make the Windows 11 PIN requirement optional by default again?

What Mozilla’s Report Actually Found

What Is a Dark Pattern and Why Does It Matter for Browser Choice Windows Users?

How to Fix Your Default Browser Windows 11 Settings Once and For All

Windows Browser Settings: What Changed in Windows 11 Compared to Windows 10

Browser Choice Windows: Which Alternatives Are Worth Switching To?

Why Your Windows Version Matters More Than You Might Think

What This Means for the Broader Fight Over Browser Choice Windows

Frequently Asked Questions

Why does Windows 11 keep defaulting back to Edge?

Is changing my default browser on Windows 11 safe?

What did Mozilla’s report actually recommend?

Does Windows 11 Pro give more control over browser settings than Home?

Will Microsoft ever fix this voluntarily?

Why Does Windows 11 Copilot Memory Usage Run So High?

Real-World Impact: Copilot Performance Drain on Different PCs

4 GB RAM Systems

8 GB RAM Systems

16 GB RAM and Above

The Diagnostic Irony: An AI That Slows Down Your PC

How to Measure Copilot RAM Usage on Your PC

How to Disable Copilot Windows 11 (Three Methods)

Method 1: Remove Copilot from Startup Apps

Method 2: Uninstall the Copilot App

Method 3: Group Policy Disable (Windows 11 Pro Only)

When Disabling Copilot Windows 11 Actually Makes Sense

Windows 11 Copilot Memory: Is Home or Pro Right for Your Setup?

Copilot RAM Usage vs. the Benefits: An Honest Assessment

FAQ

How much RAM does Windows 11 Copilot use?

Why does Copilot use so much memory?

Will disabling Copilot speed up my PC?

Does Windows 11 Home let you fully disable Copilot?

Can Windows Update re-enable Copilot after I disable it?

Is the Copilot performance drain worth it for the features?

Why Choose a Clean Install Over an In-Place Upgrade?

Before You Start: Hardware Requirements and Licence Keys

Step 1 — Download the Official Windows 11 ISO

Verify the ISO Integrity

Step 2 — Create a Bootable USB Drive for Your Windows 11 ISO Install

Using Rufus (Recommended)

Using the Microsoft Media Creation Tool