Fun Hidden Hacks — How To

1. God Mode folder
Right-click Desktop → New → Folder. Rename it exactly: GodMode.{ED7BA470-8E54-465E-825C-99712043E01C}. Icon changes to Control Panel — double-click to see 200+ settings in one master list.

2. Snap layouts
Hover your mouse over any window’s maximize button (don’t click) → a grid of layout options pops up. Click a zone to snap the window there; repeat for other windows to fill the rest. Or press Win+Z to trigger the same menu via keyboard.

3. Clipboard history
Press Win+V once to enable it the first time. Copy multiple items throughout your session → Win+V shows the list → click any to paste, or click the pin icon to keep an item permanently.

4. Emoji/symbol picker
Click into any text field → press Win+. (period) or Win+;. Tabs at top switch between Emoji, Kaomoji, Symbols, and GIFs.

5. PowerToys install
Search “Microsoft Store” → search “PowerToys” → Install (or download from Microsoft’s GitHub). Open PowerToys Settings → enable FancyZones (custom window layouts), PowerRename (regex-based bulk file renaming), Color Picker (Win+Shift+C to grab any color’s hex code), and PowerToys Run (Alt+Space universal launcher).

6. Virtual desktops
Press Win+Tab → click “New Desktop” at top, or press Ctrl+Win+D to create one instantly. Ctrl+Win+Left/Right arrows to switch between desktops. Ctrl+Win+F4 to close the current virtual desktop.

7. Instant Task Manager
Right-click empty taskbar space → Task Manager, or press Ctrl+Shift+Esc (skips the Ctrl+Alt+Del screen entirely).

8. Storage Sense
Settings → System → Storage → Storage Sense → toggle on. Click “Configure Storage Sense” to set how often it runs and whether it empties Recycle Bin/Downloads automatically.

9. Quick Assist
Search “Quick Assist” in Start Menu → open it. Click “Give assistance” to generate a code for someone to help you, or “Get assistance” to help someone else by entering their code.

Hardening — Step by Step

1. BitLocker (full-disk encryption)
Settings → & Security → Device Encryption (Home) → toggle on. Pro/Enterprise: Control Panel → System and Security → BitLocker Drive Encryption → Turn on BitLocker → choose to save the recovery key to Microsoft account, a file, or print it.

2. Windows Hello
Settings → Accounts → Sign-in options → set up PIN, Fingerprint, or Facial Recognition (needs compatible hardware). Once set, Windows lets you log in without typing your full password each time.

3. Windows Update
Settings → Windows Update → Advanced options → enable “Receive updates for other Microsoft products” and keep automatic download/install on. Check manually monthly if you’ve paused updates.

4. Microsoft Defender
Search “Windows Security” → Virus & threat protection → confirm Real-time protection is On. Click “Quick scan” periodically, or schedule a Full scan under Scan options.

5. Firewall check
Windows Security → Firewall & network protection → confirm all three profiles (Domain, Private, Public) show “Firewall is on.”

6. Standard user account
Settings → Accounts → Family & other users → Add account (if you don’t have a second one). Then go to your daily account → Accounts → change Account type to Standard User. Use the admin account only when a UAC prompt requires it.

7. Strong passwords + 2FA
Install Microsoft Authenticator or a password manager (1Password, Bitwarden). Go to account.microsoft.com → Security → Advanced security options → turn on Two-step verification.

8. App permission audit
Settings → Privacy & Security → scroll through Camera, Microphone, Location → review which apps have access and revoke unused ones.

9. Find My Device
Settings → Privacy & Security → Find My Device → toggle on. Locate/lock remotely later via account.microsoft.com/devices.

10. SmartScreen + trusted sources
Windows Security → App & browser control → confirm Reputation-based protection is on (blocks unrecognized apps/files). Stick to Microsoft Store or verified publisher installers when possible.

11. Secure Boot + TPM
Restart → enter BIOS/UEFI (often Del, F2, or F10 at boot — check your manufacturer). Confirm Secure Boot is Enabled and TPM 2.0 is Enabled (required for Windows 11, blocks many rootkit/bootkit attacks).