July 6, 2026

Windows caught wearing a name tag

Full Writeup of the Windows GDID

Windows has a secret device tag, and commenters are spiraling over what that means

TLDR: A researcher says Windows has a hidden ID tied to each installation, and it changes if you reinstall the system. Commenters are split between “this is creepy tracking” and “everyone already knew this,” with Microsoft account fears driving the loudest reactions.

Microsoft’s mysterious Windows “Global Device Identifier” just got the full detective-board treatment, and the real fireworks are in the comments. The writeup says this hidden device tag is very real, has been misunderstood online, and is tied to a specific Windows install rather than magically built from every serial number in your machine. In plain English: if Windows gets reinstalled, the tag changes. That instantly blew up one viral theory — and commenters wasted no time turning the story into a full-on privacy panic mixed with “well, duh” smugness.

The hottest reaction? A lot of people saw this as proof that Microsoft really, really wants you on a Microsoft account. One commenter flatly said, “this is why Microsoft is pushing so hard,” which pretty much captures the mood: suspicion, side-eye, and a dash of “I knew it.” Another commenter zoomed out and turned the whole thing into a surveillance thriller, arguing that if law enforcement can use this tag to track a suspect even through a virtual private network, then privacy fights around age checks and online identity are only going to get messier. That’s where the drama lives: is this a routine device ID, or a creepy digital name tag that follows you around?

There was also classic comment-section nerd combat. Some asked whether this is basically the old Windows identifier with a new name, while others shrugged and said the existence of this kind of ID has been public for years — even visible in Microsoft’s own Feedback Hub. And then came the funniest energy of all: the people reading a highly technical reverse-engineering post and responding like they’d just discovered their laptop has been wearing a tiny FBI ankle monitor the whole time.

Key Points

  • The article says Windows GDID is a real telemetry identifier referenced in the July 2026 complaint in United States v. Peter Stokes.
  • According to the writeup, GDID is a Microsoft Account device PUID written in the device graph as `g:<decimal>` and represented as a 64-bit value.
  • The article argues GDID is not 128-bit and not derived from hardware serial numbers, citing the complaint's statement that reinstalling Windows creates a new GDID.
  • It describes a component chain in which wlidsvc obtains a device PUID, stores it in the registry, Connected Devices Platform registers it into DDS, and Delivery Optimization surfaces it as `UCDOStatus.GlobalDeviceId`.
  • A correction note says devices can still have a GDID without a connected Microsoft account because CDP includes an anonymous device path.

Hottest takes

"this is why Microsoft is pushing so hard for Microsoft accounts at install" — xyst
"track the hacker via the user's GDID, which is a stable identifier unaffected by VPN usage" — stackghost
"the fact that the global ID exists is not a secret" — hyperrail
Made with <3 by @siedrix and @shesho from CDMX. Powered by Forge&Hive.