Major Privacy v0.99.2 Beta | Portable

Optimization, Security
11 November 2025, 13:14

Major Privacy is an advanced privacy tool for Windows. It is a continuation of the PrivateWin10 project. It brings a multitude of new functionality made possible through the use of a custom kernel isolation driver.

Conceptually, Major Privacy is a HIPS (Host Intrusion Prevention System). The driver can monitor and filter file/registry access as well as protect processes from being manipulated by other processes. It leverages the Windows built-in mechanisms to restrict network traffic, and brings a convenient collection of privacy-enhancing tweaks. It implements its own rule-based software restriction mechanism, i.e. the ability to prevent unauthorized or undesired applications from running. Using the process protection feature of the KernelIsolator driver, Major Privacy can protect unprivileged user processes from being compromised and their secrets exfiltrated, even from threads running with system or administrative privileges. Its ability to protect processes, in combination with its ability to restrict access to files and folders, helps to protect personal data. Furthermore, Major Privacy is capable of creating protected volumes located in encrypted container files, such that access to confidential data is only possible when the user provides the correct password and the tool is actively filtering filesystem accesses. The privacy agent logs file, registry, and network access, and provides comprehensive logs and visualizations of process activity on the host system. This enables the user to check if their applications are only doing what they want them to do. Major Privacy is designed to not only provide a line of defense against regular malware, but also to defend the user from legitimate — but overreaching — software, so that the software can be safely used and the companies behind it won't be able to access anything the user did not choose to make available.

Features

Process Protection — Protect user processes in secure enclaves from other processes including elevated and system processes.
Software Restriction — Block undesired processes from starting and undesired DLL's from loading.
File/Folder Protection — Protect selected files and folders from being accessed by unauthorized processes.
Registry Protection — like File/Folder Protection just for registry keys. (not enabled in beta build)
Network Firewall — Advanced network firewall to manage outbound and inbound communication.
DNS Inspection — Monitor DNS cache and trace events to determine which domains are being accessed by running processes.
DNS Fitlering — Filter all DNS requests with a set of pre-defined block lists (pi home compatible) and own custom rules.
Proxy Injection — Force arbitrary processes to use pre-defined network proxies. (not yet implemented)
Secure Drives — Create encrypted volumes stored in disk images fully guarded by File/Folder Protection to prevent unauthorized access to confidential data.(even from kernelmode,but not yet implemented)
Tweak Engine — Hardens Windows configuration by disabling undesired telemetry and cloud features.
Integrity level control — set the integrity level of processes in a secure enclave to «Protected» to isolate user objects, including their windows, from other processes.

Screenshots