Microsoft’s quiet keystroke harvest
In a recent XDA Developers investigation, it was revealed that Windows 11 has been silently forwarding the text you type – from emails to search queries – to Microsoft’s servers. The data feed feeds the company’s AI‑enhanced services, including the new Copilot assistant, predictive typing, and on‑device speech‑to‑text models. While Microsoft frames the practice as a way to “enhance user experience,” the lack of a clear opt‑out has left privacy‑conscious users uneasy.
How the data collection works
When you type on a Windows device, the operating system captures the raw keystrokes and bundles them into telemetry packets. These packets are then uploaded to Microsoft’s cloud where they are aggregated with data from millions of other users. The aggregated set is used to train language models that power features such as:
- Copilot suggestions – context‑aware code and text completions.
- Smart predictive text – the next‑word suggestions you see in the on‑screen keyboard.
- Voice‑to‑text improvements – better recognition for dictation and Cortana.
The process is largely invisible; the Settings app does not display a dedicated “typing data” switch, leading many to assume the feature is either non‑existent or permanently enabled.
The newly discovered toggle
XDA’s authors traced the telemetry pathway back to a hidden flag in the Settings → Privacy → Speech section. By flipping the “Send typing data to Microsoft” option, users can immediately stop the upstream flow. The toggle is labelled in the UI as “Improve speech recognition and typing suggestions” and is turned on by default.
“Turning this off will stop Windows from sending your keystrokes to Microsoft’s cloud, but it will also disable certain AI‑driven conveniences,” the XDA article notes.
The change takes effect instantly and does not require a system reboot. However, the toggle only appears on builds released after the August 2026 cumulative update, meaning older installations may still be sending data without any visible control.
Why the discovery matters for UK users
Data protection regulations such as the UK’s GDPR place a heavy burden on companies to obtain explicit consent before processing personal information. By bundling keystroke telemetry under a generic “speech” setting, Microsoft skirts the spirit of the law, relying on the assumption that users will accept the default.
For consumers who primarily use Windows on a work laptop or a personal PC, the hidden data stream can expose sensitive details – passwords typed into password managers, private messages, or even confidential business information. Disabling the toggle restores a level of control that aligns with the expectations set by the Information Commissioner's Office (ICO).
Steps to turn the feature off
- Open Settings – press Win + I.
- Navigate to Privacy & security → Speech.
- Locate the switch labelled “Send typing data to Microsoft to improve speech recognition and typing suggestions.”
- Toggle it off.
- Restart any applications that rely on Copilot or dictation to see the change take effect.
If the option is missing, ensure your device is up‑to‑date:
- Settings → Windows Update → Check for updates.
- Install the latest cumulative update (version 22621.XXXX or later).
The broader privacy debate
Microsoft’s approach mirrors a trend across the tech industry: embedding data collection deep within core OS functionality while offering only a single, often obscure, opt‑out. Android, for example, provides a more granular permissions model, letting users deny “usage & diagnostics” at install time. Windows, by contrast, bundles telemetry under a handful of broad categories.
The XDA report has already sparked discussion on forums such as Reddit’s r/Windows11 and the Microsoft Community site. Many users are calling for a dedicated privacy dashboard that lists every data stream – from typing to location – and lets them toggle each one individually.
What to expect next
Microsoft has not yet issued an official comment on the XDA findings. Historically, the company has responded to privacy pressure by adding clearer toggles (e.g., the “Diagnostic data” switch introduced in Windows 10 2004). It is plausible that future Windows builds will surface the typing‑data setting more prominently, or even separate it from speech‑related permissions.
In the meantime, UK users should treat the newly discovered toggle as a quick win for privacy. Regularly reviewing Windows Update notes and the Settings‑>‑Privacy menu will help ensure that hidden telemetry does not creep back in after major OS upgrades.
Bottom line: Windows 11 has been sending your keystrokes to Microsoft by default, but a single switch in the Speech privacy settings now lets you stop the flow. Turning it off safeguards personal data and brings the OS more in line with UK privacy expectations – a crucial step for anyone wary of hidden telemetry.
