
Windows GDID: The Persistent Device ID Linked to FBI Case Sparks Privacy Debate
Microsoft has confirmed the Global Device Identifier (GDID), a permanent Windows install ID created when Windows is provisioned with a Microsoft Account. The GDID persists through updates, is not visible to users, and cannot be disabled without breaking activation and Store apps; a new GDID can be generated on reinstallation, but signing back into the same Microsoft Account links it to prior activity. The FBI reportedly used the GDID to track a Scattered Spider member across VPNs and countries, showing how the ID ties activity to a Windows installation rather than a single device. Privacy researchers warn about the lack of user-facing controls or consent prompts, and practical steps to reduce tracking include using a local account, limiting diagnostic data, turning off personalized ads and launch tracking, and considering Linux/Tor for sensitive work; public documentation on GDID remains sparse beyond a brief Azure Monitor note.













