RENO, NV — In a significant move for digital privacy, VPN provider Windscribe has released an open-source PowerShell script, deGDID, designed to block Microsoft’s Global Device Identifier (GDID)—a persistent, hidden tracker embedded deep within the Windows operating system.
What Is the Windows GDID?
The Global Device Identifier (GDID) is a unique, device-level identifier that follows a Windows installation throughout its entire lifecycle. Unlike IP addresses or browser cookies, which can be masked by VPNs or cleared, the GDID is tied to the hardware and software installation.
Recent federal court documents revealed that the GDID was a key tool used by investigators to track an alleged member of the “Scattered Spider” hacking group. The case demonstrated that even when a user employed a VPN to change their network location, the persistent GDID allowed authorities to link online activities across different services back to a single, specific Windows machine.
How the ‘deGDID’ Tool Protects Users
Windscribe’s deGDID tool aims to mitigate this tracking by combining local cleanup with network-level blocking. According to the company, the script performs several critical functions:
-
Network Restriction: It adds entries to the Windows “hosts” file and applies firewall rules to block the specific Microsoft domains responsible for generating and reporting the GDID.
-
System Cleanup: It clears known GDID-related data from the Windows Registry, Credential Manager, and other identity stores.
-
Audit Capabilities: The script provides a read-only mode, allowing users to check their systems for the identifier before applying any changes.
Important Considerations and Risks
While the tool offers a way to regain control over device-level tracking, Windscribe warns that it is an experimental utility and comes with significant trade-offs. By blocking the communication paths required for the GDID, users may experience the following:
-
Broken Authentication: Sign-ins for Microsoft accounts, including Outlook and OneDrive, may fail.
-
Service Degradation: Access to the Microsoft Store, Xbox services, and Windows Hello features linked to a Microsoft account may be restricted.
-
Irreversibility of Historical Data: The tool cannot retroactively remove data that Microsoft has already collected and stored on its servers.
A Growing Privacy Debate
The discovery of the GDID has reignited a fierce debate regarding user privacy in Windows. Critics argue that because the identifier is hidden, lacks a clear “opt-out” mechanism, and persists regardless of user settings or network configuration, it effectively functions as built-in surveillance.
As of August 2026, Microsoft has not issued a formal response regarding the public release of deGDID or whether they intend to provide users with native controls to view or reset their GDID. For privacy-conscious power users, the deGDID script represents a growing demand for transparency and control over the telemetry data collected by modern operating systems.
Comment