The nearly ultimate windows hardening guide

revision 0.1 here be dragons

This guide is a compilation of resources found on the internet that aims at increasing the overall security, safety and privacy of a windows 11 computer. The threat model is based on both general and untargeted malware as well as targeted attacks (for example in the case of espionage or censorship), it also aims at protecting the user privacy at all cost and as such may break certain features that allows for telemetry or fingerprinting. It is provided with no guarantee on it's actual effect and I strongly advise that you do your own research before doing anything. Furthermore due to the ever evolving nature of cybersecurity and of the various softwares that you may use this guide or parts of it may be out of date when you read it.

Windows installation and debloating

Install Windows 11 with a local account :
Don't give Microsoft what they want... by JayzTwoCents.
Bypass security questions during setup :
Remove or skip Security Questions when setting up Local User Account in Windows 11/10 By thewindowsclub.
Bloatfree install using english world :
Debloat Windows 11 Installations With Just 2 Clicks by ThioJoe.
Debloating Windows 11 :
Windows 11: Debloat and Optimize for Ultimate Performance by TechSocket.

General security hardening

Powershell hardening :
Disable These 3 Windows Settings Now! (For Security) by ThioJoe.
Applocker setup :
How to Virus-Proof Your Computer With Windows AppLocker (Ultimate Guide) by ThioJoe.
TLS cypher and ECC curves :
Manage Transport Layer Security (TLS) by Microsoft, I recommend addingTLS_CHACHA20_POLY1305_SHA256 (but keep the other ones) as well as only using curve25519 as the NIST curves are known to be backdoored by the NSA.
IPsec key exchange :
Configure Key Exchange (Main Mode) Settings by Microsoft, I recommend using SHA-387 AES-CBC 256 ECDH P-384.

Browser hardening

Remove edge :
permanently uninstall edge by Tom's guide.
Advanced user.js config :
Arkenfox by
Introduction to firefox hardening :
Hardened Firefox by gofoss.net.
Advanced firefox hardening guide :
Firefox Hardening Guide by brainf+ck.