Microsoft's Hidden Device Tracker Exposed, Windscribe Releases Anti-Tracking Script
A recent court filing revealed that Microsoft uses a unique identifier called GDID to track Windows installations across its services. This identifier, known as Global Device Identifier, is generated on Microsoft's servers and stays attached to a Windows installation through software updates.
The complaint charged Peter Stokes with conspiracy, computer intrusion, and fraud over an alleged May 2025 ransom demand. Prosecutors identified Stokes as an alleged member of the Scattered Spider hacking group. A Microsoft representative described GDID as 'a persistent, device-level identifier' designed to identify a single Windows installation across the company's services.
Windscribe tested whether signing into Windows with a local account instead of a Microsoft account would keep the identifier from appearing. It did not work. The VPN provider also found that deleting the registry value that stores the identifier would remove it for good, but only temporarily.