Every Windows computer has a permanent ‘Global Device ID’: What users need to know

Microsoft's Global Device ID (GDID) is a permanent identifier assigned to Windows installations that has recently gained attention due to its use in cybercrime investigations. While the identifier helps Microsoft track specific installations, the company clarifies it is not a tool for monitoring user activity or bypassing privacy protections.
Why it matters
It highlights the tension between digital security, law enforcement capabilities, and user privacy in the age of persistent device tracking.
Millions of Windows computers around the world, including laptops used daily in Kenya, contain a permanent digital identifier that many users have never heard of. Known as the Global Device ID (GDID), the identifier is automatically created when Windows is installed and remains tied to the computer for its entire lifetime. GDID attracted public attention after Microsoft referenced it in a legal complaint related to an investigation into an alleged member of Scattered Spider, a loosely organised cybercrime group known for targeting major organisations through sophisticated social engineering attacks. Scattered Spider is not linked to any government and is believed to comprise primarily young, English-speaking hackers from the United States and the United Kingdom, although law enforcement agencies have arrested suspects in several countries. The group specialises in manipulating IT help desks and employees into granting access to corporate systems.
Get smarter about the news
Sign up free for a feed built around what you actually care about, Dive Deeper research on any story, and the full text of every article.
Create free accountAlready have an account? Sign in