For many, including European Union policy makers, increased use of open source software is a key part of the answer, offering an alternative to proprietary platforms from a handful of large US vendors.
That’s the view of Frank Karlitschek, CEO of Nextcloud, the German software vendor that bills itself as an open-source alternative to software suites from the likes of Microsoft and Google.
Nextcloud CEO Frank Karlitschek speaking at the German software company’s Nextcloud Summit 2026.
Nextcloud
Karlitschek founded the company in 2016, forking OwnCloud’s open-source file-sharing software. Since then, Nextcloud has expanded its products to include a range of productivity and collaboration tools that organizations can install and run on their own servers or access via cloud providers.
More recently, Nextcloud helped develop the Euro-Office application suite, which launched last week as an open source alternative to Microsoft Office and others, and continues to build out its Nextcloud Hub with AI assistant and agent features. The company now says revenues are growing at between 50% to 100% year over year.
Computerworld spoke to Karlitschek at Nextcloud Summit about momentum around digital sovereignty, the European Commission’s Tech Sovereignty Package proposals, and how Nextcloud hopes to evolve in the coming years.
The following interview was edited for length and clarity.
When Nextcloud launched, there was a big push in Europe away from on-premise software towards US cloud providers. How have attitudes towards open source and awareness of alternatives providers changed since then? “I’ve been doing open source since the ‘90s; at the time it was mostly for a nerdy audience — a very small group of people who really care about software and being in control. The sovereignty part was always there. It’s the core idea behind open source that you can understand what the software is doing, you can deploy it wherever you want, you can study it and change it, and so on.
“At the time, it was very niche, and since then it’s really growing and growing. There are certain points in time that really accelerated the growth; something like the Snowden revelations, for example, or the whole discussion about GDPR and certain legislation. And then, of course, the current geopolitical situation.
“I personally find it interesting that it grew from something that is just interesting for software developers, and now it’s on the geopolitical stage. I have meetings with big politicians who really care about it now, and I personally find it interesting that it’s increasingly understood by — I wouldn’t say the mainstream, but more and more people.
“At the beginning of Nextcloud, we mostly talked with IT managers looking for a solution; they care about how it works, the price and other things. But now we are also talking with the C-level people. It’s part of an overall strategy of a company, to say, ‘Hey, we need to look into the dependencies, we want to have a solution that fits into the strategy of the company.’
“In the past, it was like a commodity – it’s just some software, who cares? Now, it’s really part of the company strategy. That’s really interesting.”
There’s been a lot of interest around digital sovereignty over the past couple of years. To what degree is this translating into action, with organizations migrating away from US cloud providers? “The interest is gigantic. Everybody’s talking about it, we have so many contacts and people coming to us. Not everybody is doing it — a lot of people are just exploring and seeing what the options are.
“Obviously, we hope that this will translate into actions in a few months. At the moment, it’s a lot of talking and exploring the options. As a company, we are also growing a lot in customer base. But the interest in this space is even bigger; we see it as the beginning of a funnel.
‘In defense we see a lot of interest, then also everything around education is very important for us, then other regulated markets like the healthcare, for example. Finance is an interesting one.”
A lot of the conversations around digital sovereignty are tied to the current geopolitical situation and even the US administration. Do you see demand for sovereign technology as a structural change or are some organizations holding back to see how the situation improves in the future? “I see it as a long-term trend. If you look at the IT budgets and projects in the ‘90s, it was some something unimportant. It was, of course, important that the printer works and the fax machine works, but it was not definitely not strategic for the company.
“And then in 2000, the whole cloud trend came up, and there was the big hope that this will save money. It was always the narrative with cloud computing that you can just outsource it and save money and it’s great.
“Nowadays, people realize that it’s not something that you can just ignore. I wouldn’t say that everything comes back on premise, but people care about it now. They understand it’s not just a commodity, like water, or electricity that comes out of the wall and you don’t care what’s behind it. People realize that it’s something that has an impact on the future of an organization, from a vendor lock-in perspective, from a cost perspective, from an industry espionage perspective, and competitiveness. With open source, you’re more flexible. So, I think the trend that this is all more strategic and important for the future, this will go on.”
The European Commission recently published its Tech Sovereignty Package, including its open source strategy. Are these proposals sufficient to address the concern around digital sovereignty and support the open source ecosystem in Europe?
“It’s great, I really like it. I was actually surprised they listened so well. But now the real challenge is to actually do it; this still needs to happen. The description of the problem and a possible solution, this is all very good. I’m surprised, I’m happy about it, but to put this into actually binding law, this still needs happen.”
Would you like to see any changes to the current proposals before they’re gets passed into legislation? “At the moment, they have these four different risk levels, and the most critical one — No. 4 — is one where they accept only open source and European solutions. This is the highest risk level, but this is only for 1% of the market. I hope that it’s better understood that more than 1% should care about this more.
“If you have something which is completely not critical, maybe doesn’t possess any personal data at all — sure, it’s totally fine [to use non-EU suppliers]. But if you have GDPR requirements, espionage protection, no vendor lock-in, and so on, then there should be more of that [the highest requirement level].”
US firms have attempted to address European customers’ concerns in different ways, with sovereign marketed cloud services and joint ventures with European providers. Microsoft 365 Local is designed to run on premise. Where do you draw the line between what’s actually a sovereign solution and what some call ‘sovereignty washing? “Sovereignty has different dimensions, of course. But if you look at the problem of the CLOUD Act alone, which gives foreign agencies full access to the data here, then the whole idea that it’s enough to have European data centers — that’s not enough. It’s clearly written in the CLOUD Act, that even with [European] data centers, or subsidiaries, it still applies.
“Microsoft tries to find a solution there with its Delos idea; a company that is owned by SAP — a German company — and Microsoft delivers only the software. But even then, you have this dependency, because software needs updates and software security updates. And if they’re not available, or if someone puts a backdoor into the software, which is possible, then you still have a problem.
“So, they’re trying really, really hard to find a way around the problem, but it’s not easy for them.”
To look ahead a bit in terms of the product strategy, there were announcements for Nextcloud Hub this week around AI agents, and the program to work with independent software vendors. What do these say about Nextcloud’s future? “The overall product strategy will not change so much; it’s about having state-of-the-art collaboration software — but with a lot more control, security and safety — that’s open source and independent where you host it. So this will always stay, but of course, there’s some additional factors that come into play now, like the AI impact that we see and want to leverage with our agent strategy.
“We’ve had this for one and a half years already, but we are expanding that. In the future, you might still use an interface in a classic way that you open documents and type in text and so on. But there are also a lot of operations that can be automated in the future with AI. And this is something we really invest a lot into.
“Another aspect of AI is how easy it is to build custom software around it. The coding models are getting better all the time, which means there will be more and more custom business software. This is what we want to capture with our ISV program. Software development will become easier, but you don’t want to deploy just random software in your company, you want to have something that is tested, certified and secured, and that somebody’s accountable for it. This can be something we can provide at Nextcloud.”
Editor’s note: NextCloud paid for Matthew Finnegan’s travel and hotel costs for NextCloud Summit 2026, but had no editorial role in the creation of this story.
Apollo astronauts trying to rest on the way to the Moon kept noticing the same thing in the dark. With the cabin lights down and their eyes adjusted, they saw brief flashes and streaks of light, dots and lines that no one else could see and that were not there in any ordinary sense. The cause, worked out over the missions that followed, was cosmic rays from deep space passing through the visual system. The broad cause is now well supported, even if the exact biophysics of how a passing particle turns into a flash of light is still not fully pinned down.
The flashes are an example of a phosphene, a sensation of light produced by something other than light entering the eye.
In this case, the something was radiation.
What the astronauts saw
The reports began on Apollo 11. After a period of dark adaptation, with eyes open or closed, crew members saw flashes they described as pinpoints, thin streaks, or small clouds of light. They were almost always colourless. They came at a rate of roughly one-half to two a minute, often enough to be a distraction when someone was trying to sleep.
This was not confined to one crew or one flight. Flashes were reported across the Apollo missions, and later by astronauts on Skylab, on Mir, and on the International Space Station. The phenomenon even had a kind of forecast. As early as 1952, the biophysicist Cornelius Tobias had suggested that people exposed to cosmic radiation in space might see exactly this sort of thing, and the team that investigated the Apollo reports traced them back to that idea.
How they tied it to cosmic rays
Suspecting a cause and demonstrating it are different tasks. To test whether the flashes really were caused by particles passing through the head, the Apollo 16 and 17 crews carried a device called the Apollo Light Flash Moving Emulsion Detector, worn on the head during the coast to and from the Moon. It used stacked photographic emulsion to record the tracks of charged particles, so that the path of a particle could be matched against the moment an astronaut reported a flash.
The numbers were small but telling. The detector was worn for about an hour on each of the last two Apollo missions. On Apollo 17, seventeen flashes were reported during the session, and two of them were matched to heavy cosmic-ray nuclei passing through an eye. Combined with the geometry of the eye and statistical modelling, that was enough for the investigators to attribute the flashes to cosmic rays. Ground experiments pointed the same way: when volunteers had their dark-adapted eyes exposed to beams of heavy ions, they saw comparable flashes.
What is still uncertain
The confirmed part is that cosmic rays cause the flashes. The unconfirmed part is the step in between, the biophysics of how a single fast particle produces a perceived point of light. Several mechanisms have been proposed, and more than one may contribute.
The leading idea is that the particle ionises tissue directly in the retina, stimulating the light-sensing cells or the neurons behind them as it passes through. This fits the ground experiments, where heavy ions produced flashes at intensities too low for any light to have been generated. A second idea is Cherenkov radiation: a particle moving through the clear jelly of the eye faster than light moves through that medium emits a faint glow, real photons generated inside the eye itself. The trouble is that Cherenkov light should look bluish and diffuse, and most astronauts described sharp white dots and streaks, which do not match. A third possibility is that some flashes come from particles striking the optic nerve or the visual centres of the brain, bypassing the eye altogether.
Decades on, reviews of the phenomenon still describe the specific mechanism as undefined, and note that the effects on the different parts of the visual system have not been fully separated.
The cause is well established; the wiring is not.
Why it still matters
On Earth’s surface, we are mostly shielded from this by the atmosphere and the magnetic field. In low Earth orbit the shielding is reduced but not gone, which is why astronauts on stations such as Mir and the ISS have also reported the effect. The Apollo crews saw the flashes more strongly still because they left that protection behind, travelling beyond the magnetosphere. The flashes were, in effect, the radiation environment of deep space made briefly visible inside a human head.
That is why they are treated as more than a curiosity. They are a perceptible sign that high-energy particles are passing through the body, the brain included, and the same radiation is a serious concern for long missions beyond Earth. On the International Space Station, experiments have used the visual system as a way to study how cosmic radiation affects the central nervous system. For a crew bound for Mars, who would spend months outside the magnetosphere, the dose to the brain over that time is one of the open problems of the trip.
What to watch
The people who travel back to lunar distance under Artemis and later missions will almost certainly see the flashes again. They will also carry better instruments and a sharper reason to use them. Pinning down how the flashes are produced would be a small result. Understanding what months of that radiation does to the brain behind the eye is the one that matters.
Apple’s executives have been taking questions, hosting seminars, seemingly working around the clock to stress one very important thing: Apple is not using a white label version of Google Gemini to make Siri AI happen. They just pooled resources to get there.
The new Siri AI is faster, more accurate, offers powerful contextual capabilities and shows how Apple has leap-frogged into a good peer position in an AI race critics felt it had already lost. Its market scale — even without the EU — is huge. For most consumers, Apple Intelligence and Siri will continue to be their primary/first engagement with artificial intelligence on a device.
Getting there took a lot of work, and Apple needed Google to get it done. Though there is still some confusion about what that means, Apple’s software chief tried to explain it this week. “We use none of the models that Google deploys to their customers, nor do we use the infrastructure and means by which they employ models to their customers,” Craig Federighi said in a presentation at WWDC.
Apple is not even using Google Search as the foundation of its system, he said. “This is the amount of Google Assistant we use,” Federighi said, pointing at an empty chart. “Nothing.”
Apple not Gemini, Siri AI is not Google’s
What makes this hard to understand is that we all know Apple partnered with Google to build Siri AI; back in January, we were told the next generation of Apple Foundation Models would be based on Gemini models and cloud technology. So, how can we have moved from partnership hero to usage zero?
The answer is, we didn’t. What happened is that Apple built its new Apple Frontier Models (AFMs) (the AI inside Siri AI) by training them using proprietary Apple data and reinforcement learning and then refined those models using “outputs from Google’s Gemini Frontier models.”
In other words, Apple used Google Gemini to help improve its own models, which means the models themselves, the AI in Siri AI, are Apple’s — but they were trained with help from Gemini. They are not white label iterations of those Google models.
Apple also hit a second snag. Its very best model (AFM 3 Cloud Pro) requires more processor power to run than Apple could deliver using its own cloud-hosted Private Cloud Compute servers. Now, we know Apple doesn’t like using other people’s stuff. But it’s a realistic company that understands it sometimes must, and just as it uses AWS to support some of its services, it moved to adopt Google cloud services and Nvidia processors to drive the most demanding requests.
Apple also developed a technological solution that means it can claim the interaction remains just as private as if it were run on your device. Apple has made it possible for independent security experts to confirm this and says it is the only company that can deploy software on those servers, with strong security to ensure your device only interacts with those servers when you want it to. So far, no one has broken this protection.
I came across an interesting report in which Tekonyx Founder and Chief Research Officer Sid Nag explained the significance of Apple finding a way to expand its Private cloud Compute infrastructure beyond its own data centers.
“Apple is effectively arguing that trust in AI systems should come from cryptographic and architectural guarantees rather than trust in the cloud provider itself,” he told Fierce. Where enterprises have faced a choice between access to powerful AI or privacy, Apple has introduced a new solution he called “portable trust.” This could conceivably become a new IaaS offering from the companies involved over time.
Working together for the benefit of all
So, while Apple’s models were built with Google’s help, and while its most advanced models run with support from Google and Nvidia, the models are Apple’s alone.
It’s good for Google, of course. Apple is paying for this use, which helps the search giant claw back some of the value of its massive, muti-billion-dollar AI infrastructure investment. It’s not clear how much Apple is paying; earlier this year, the $1 billion figure was bandied around. But Apple’s decision to tie usage to iCloud subscriptions in some hitherto undisclosed way hints that the deal may also see some token-based usage charges on top of the basic Apple fee. I’ve not come across any details, but that’s what I surmise based on the size of Apple’s ecosystem and the growing realization of how quickly users can consume AI capacity.
What AI models is Apple running?
AFM 3 Cloud Pro is one of five Apple Frontier Models driving Siri AI. Here’s how Apple describes those five models:
On-device models
AFM 3 Core, the next generation of Apple’s 3-billion-parameter dense model. You’ll use this for basic text generation, summaries, conversational replies, all the standard uses. It can also handle indexing, search, App Intents, basic dictation and contextual awareness.
AFM 3 Core Advanced, the most powerful on-device model. This is what makes Siri’s voice match mood or context, does all the high-accuracy dictation, and can process various data to handle tasks across different apps. It’s the AI driving your more involved Siri conversations.
AFM Core Advanced is impressive in its own right, because Apple has managed to cram a 20-billion-parameter model onto a smartphone. It has done this by using a sparse architecture, which means it activates just 1 to 4 billion parameters at a time depending on the request. It is, however, only available to Apple’s most powerful systems — iPhone 17 Pro, iPhone 17 Pro Max, iPhone Air, M4 or later iPad, M3 or later Mac with 12GB+ memory.
Server-based models
AFM 3 Cloud, which Apple calls its server-side workhorse, optimized for speed, efficiency, and performance.
ADM 3 Cloud (Image), for image generation and editing, which unlocks advanced photo-editing tools, the all-new Image Playground, and more.
AFM 3 Cloud Pro, the most capable server-based model, which powers the most demanding use cases, like agentic tool use and complex reasoning.
All five were built using the same common foundation, which was then specialized to reflect the proposed use of that model. It’s interesting to look at the human evaluation tests Apple ran to test how well these models performed; they demonstrate impressive improvement on the company’s original models, effectively justifying the decision to work with Gemini.
Several trends are now converging that threaten to pit tech companies against the general public.
Miniaturization has finally enabled companies to build AI glasses that look and function like normal glasses, but with microphones and cameras. People are increasingly talking to AI, rather than typing. And multimodal input, especially video, is on the rise.
Put all of these trends together and you get a nascent industry pushing toward all-day, everyday AI glasses with cameras — and a worried public already pushing back at the idea.
Let’s look at how we got here.
Meta started it with a surprise hit: its second-generation Ray-Ban Meta glasses, which later gained multimodal AI capability. Its Meta Ray-Ban Display glasses add one in-lens screen — but both versions of the glasses have cameras. (The company is working on a third generation that will probably ship next year.)
Google provides the AI and software platform through Android XR and Gemini, partnering with hardware makers to put its AI on other companies’ glasses. At Google I/O last month, Google unveiled frames from Gentle Monster and Warby Parker running Android XR with Gemini AI; they’re scheduled to launch this fall. Google is working on two types of AI glasses, one with screens and one that is audio-focused. Both types have cameras, though.
Samsung is working to launch AI-powered smart glasses, too, code-named “Jinju.” The company offered up details at Google I/O alongside Google. The glasses feature a 12-megapixel camera with autofocus; run on Android XR with Gemini AI; are co-designed with Gentle Monster and Warby Parker; and are slated to launch in July at the Samsung Unpacked event.
(As with Meta and Google, Samsung is working on AI glasses with and without screens, but both of its models have cameras.)
Tech giant Apple is also on the glasses train, based on reporting from anonymous insiders. Codenamed N50, the Apple glasses could have two cameras, one for pictures and videos, the other for multimodal AI input and hand-gesture control. (Apple is also working on a pendant and next-gen AirPods, both of which have cameras.)
There’s Amazon, which is reportedly developing a new line of consumer AI glasses with a camera after its earlier, camera-less Echo Frames and Carrera Smart Glasses lines failed. (My guess is the problem was Alexa, not the lack of cameras.) Although its Echo Frames have been effectively discontinued — displayed as sold out online — the company is already testing AI glasses with cameras for enterprise use on hundreds of US-based Amazon drivers.
Amazon Smart Delivery Glasses
Amazon
Huawei in April launched its AI Glasses for the Chinese market — the lightweight glasses sport a dual-engine AI architecture and integration with its HarmonyOS ecosystem. It’s joined there by Xiaomi’s AI Smart Glasses, which are powered by the company’s HyperOS ecosystem and have cameras for photos and videos and for for reading QR codes.
Beyond those well-known firms, other companies are making daily-wear AI glasses with cameras in them, including XREAL, Rokid, TCL, Solos, and Brilliant Labs.
A minority of other companies is focused on glasses without cameras, including Even Realities (G1 and G2); MIRA (MIRA glasses); Dymesty (Dymesty AI glasses); Lucyd (Lucyd Lyte); and Huawei (Eyewear 2).
Get the picture?
Clearly, by the end of the year, the market will be flooded with all manner of AI glasses designed for everywhere, everyday wear. They can use prescription lenses or serve as sunglasses — and most of them will have cameras built in for photos, videos and multimodal AI.
There’s just one problem: The public hates AI glasses with cameras.
Return of the ‘Glassholes’?
As we learned from Google Glass, a lot of people feel uncomfortable with a camera pointed at them while they’re talking to someone. And that backlash is back with the current generation of AI glasses.
Because Meta is the market leader in the US, its Ray-Ban Meta glasses have borne the brunt of early disaffection.
Texas Attorney General Ken Paxton recently launched a formal investigation into Meta’s AI glasses, calling them “a privacy nightmare for Texans,” claiming the devices “can easily invade personal privacy by collecting biometric data and recording Texans without their knowledge or consent.”
Paxton also claimed the LED light on the glasses, which is designed to alert others that the camera is taking pictures or videos, can be easily defeated. In fact, some modders-for-hire charge up to $100 to physically destroy the LED and TikTok videos describe how to disable or cover the light.
The pushback is happening elsewhere. Philadelphia courts banned smart Meta AI glasses with recording features from city courthouses and a petition is circulating to ban them from New York City bars and restaurants. MSC Cruise Line banned smart glasses in all public areas. And restaurants, gyms, and workplaces have begun banning smart glasses because of the camera.
Uncertainty drives some of the concern. People don’t know whether they’re being recorded, and if they are, they don’t know who will see the video. It turns out, those suspicions might be warranted.
The New York Timespublished an internal Meta memo in February describing plans to add facial recognition (“Name Tag”) to Ray-Ban Meta glasses. The memo said the “political tumult in the United States would distract critics from the feature’s release.”
Then earlier this month, WIRED discovered dormant facial-recognition code called “NameTag” hidden inside Meta’s AI companion app. The code would let Ray-Ban Meta glasses identify strangers by face, a feature Meta publicly claimed “does not exist.” Meta quietly erased the code with an update one day after the exposé was published.
A coalition of civil society organizations wrote Congress to demand that Meta abandon its Name Tag facial recognition plans, calling it a “creepy and unacceptable escalation of surveillance.” The letter warned the technology could be adopted by law enforcement to surveil immigrants, people of color, and nonviolent protesters.
On one hand, all the biggest consumer electronics companies are either shipping AI glasses with cameras in them or planning to do so — and many smaller companies are looking to do the same. The industry expects AI glasses with cameras to go totally mainstream.
On the other hand, a growing public, legal and legislative backlash has erupted in opposition to AI glasses with cameras in them.
One possible outcome is that the public disdain for the cameras will fade, overwhelmed by widespread enthusiasm for the benefits they offer. A new social norm might emerge that mirrors the broad acceptance of everybody having cameras in their phones and pointing them in random directions.
Another possibility is that companies will be forced by consumer disdain and legal action to abandon cameras in glasses and focus instead on AI glasses that can’t take pictures or use video for multimodal AI input.
For the past few days, I’ve been immersed in Google’s latest vision of the future — an AI-infused dashboard that taps into info from all of your Google app activity and then uses that data to cook up a series of daily “stories” designed to “connect you with what matters.”
And — believe me, I don’t say this lightly — the experience of interacting with this system has me longing more than ever for the past.
I won’t beat around the bush: Using the app really has been an eye-opening, enlightening experience for me. Just not in the way that Google had presumably wanted.
[Get level-headed knowledge in your inbox with my free Android Intelligence newsletter. Something new and useful every Friday — from my keyboard to your email.]
Google Dreambeans and the next phase of AI
In many ways, Dreambeans feels like the ultimate example of everything Google’s been gunning for — and AI in general has been building up to — over the past several years.
With your permission, the app accesses your ongoing activity data from Google Workspace (including such services as Gmail, Google Calendar, and Google Drive) along with Google Search, Google Photos, and YouTube to create an evolving profile of your life and interests. That means everything from who you email to what’s on your agenda, what you’re writing or saving files about, and what sorts of subjects you’re searching for, videos you’re watching, and activities you and your friends, family, and other associates are appearing in throughout photos (and even how you all look in those photos) gets constantly analyzed and processed and used as fodder for a personalized feed that updates a few times a day.
On the surface, it sounds a little like Google Now — the excellent and all-too-short-lived proactive intelligence feature Google added into Android for a while back around 2012.
In practice, though, lemme tell ya: It feels dramatically different. Whereas Google Now felt almost magical in its ability to anticipate what you needed before you ever asked for it — with proactive cards on things like flight statuses based on itineraries in your inbox or flight-related searches you’d performed, traffic alerts based on your typical daily routes or appointments in your agenda, and links to maps for businesses you’d been researching — Dreambeans takes those same basic concepts to a whole other level that ends up feeling creepy and invasive, both in the info it’s offering and in the way it’s presenting it.
And, more broadly, it feels indicative of the way AI is heading in general — not just with this one app or with Google but across the industry and in a style that I think most people are increasingly finding off-putting and will only find ever more intrusive in time.
Now, let’s be clear: I’m no technophobe. Far from it: I love clever tech creations and thoughtful new touches that make our lives easier. Heck, I’ve spent much of my life searching for and writing about such feats. And that’s precisely why my reaction to Dreambeans strikes me as so significant: If I’m this put off by this concept, how will average tech users — most of whom are far less tuned into tech trends and intrigued by interesting new options then I am — react?
I’ll tell you more about what I’ve heard so far in a second. First, let me show you exactly what I’ve been seeing, so you can assess this thing for yourself and see how it comes across to your spidey senses.
Here’s a handful of the Dreambeans “story” suggestions that appeared in the app upon its first day working for me, with a few names and personal details blurred for privacy purposes:
Some of Dreambeans’ custom “stories” throughout my first day with the app.
JR Raphael, Foundry
I’m honestly not even sure where all of these suggestions came from, but what jumped at me right away were the (occasionally flattering) caricatures of me and my wife and the general sense of invasion from all the slightly too personal stuff and too familiar integration of family members’ names and interests integrated into the material.
For the record: I had been looking into speaker stuff at some point in the not-too-distant past; I’ve never once typed, uttered, or even considered the phrase “hand-loomed textiles” until just now; we had been looking at the arts festival it mentioned; I’ve never specifically searched for or expressed any interest in Scary Movie 6; and I am not into the band Genesis — though, to be fair, I can’t dance.
I showed all this same material to my wife as well as to several other friends and family members I’d categorize more as typical tech users — not tech professionals or card-carrying geeks but just regular people who own and use a variety of devices, as we all do, and rely on ’em for both personal and professional purposes with varying levels of dread, excitement, and/or indifference. Without exception and without any prompting or personal opinions presented to sway them, every single one of ’em responded the same basic way: “Oh. That’s creepy.” And: “I do not like that.” Without fail.
It doesn’t get much better from here, either. Most of the app’s subsequent suggestions have continued to veer just a touch too far onto the “ick” side of the spectrum, as well as occasionally being off-base in some pretty perplexing ways. For instance:
Nice AirPods, Mr. Apple fan!
JR Raphael, Foundry
For the record on this set: I do love the show Seinfeld — SERENITY NOW! more than ever — though it’s been some time since I’ve actively watched it; I somewhat famously am allergic to Apple products and avoid ’em whenever possible (notice the name of this column, anyone?); I don’t live in the same city as my brother but do find it creepy to have him pictured in ghoulish caricature form and brought randomly into a discussion about Plex (something he wouldn’t even remotely be interested in hearing from me about); and my various editorial newsletters are all powered by a service called Kit — not Beehiiv — which is mentioned in plenty of places both on my websites and throughout my emails.
Also, while my hairline may not be what it once was, I’m (ahem) not that bald yet — thankyouverymuch, Dreambeans.
Another example that I won’t show here was an item that pictured me in overalls working on installing some “coated stainless steel wire for [my] gallery canvases” — a reference to a community art gallery (with all sorts of details wrong and in some cases flat-out fabricated) connected to my mother’s recent passing. It casually mentioned her by name, too, alongside that eerie illustration of me performing a skill I definitely don’t have in my nonexistent home workshop. I don’t think I have to elaborate on how unsettling, unappreciated, and — again — invasive it felt to have that pop up in this feed.
More than anything, what I’ve been feeling while seeing all of this is a combination of (a) egad, it knows too much — especially when it casually name-drops and caricature-pics my wife, kids, and other family members — and (b) at the same time, the info it’s giving me isn’t especially helpful or insightful. It’s mostly just flat, generic, and — well, more or less exactly what you’d expect from something AI-generated.
Seeing caricatures and personal details about my kids is odd — and, at the same time, neither of my kids actually plays or has any interest whatsoever in soccer.
JR Raphael, Foundry
More than anything, in other words, it’s a combination of creepy and not particularly useful.
Some of what I’ve seen when opening Dreambeans’ personal “stories.” Yay?
JR Raphael, Foundry
And it’s the “creepy” part that really sticks with me the most.
The fine line Google forgot to avoid crossing
Maybe if the info I’m being served up here were exceptionally useful, this could be a tradeoff I’d be at least a little more likely to accept. Maybe. But in this scenario, it just feels odd and a little too invasive — which I’ve come to realize is a common theme surrounding much of what seems to be the next level of our forced-upon-us AI future.
Take Google’s Gemini Spark, for instance — the “agentic” AI assistant announced at Google I/O that’s meant to be a “proactive” helper tackling tasks on your behalf. David Pierce from The Verge got an early look at the tool in action and called it “the most impressive and terrifying AI experience” he’s had to date, also bringing that “creepy” word into the equation:
I can’t shake the deeply creepy feeling I get from the whole thing. What Spark did feels sort of magical, and very invasive. It’s weird that Spark is so casually telling me the names and ages of my children, reminding me that it knows where I live, and finding information I know for a fact I’ve never volunteered to Google. Intellectually, I know that Google knows an incredible amount about me — add up my emails, my calendar, my photos, and my search history, and you’ve pretty much got me pegged. But seeing Spark treat all that data not as something to be protected, but as something to be mined, just feels bad.
And that, I think, mirrors the exact reaction I’ve been experiencing with Dreambeans. We’ve all always known that Google knows a lot about us, but we’ve also — at least intellectually — understood how all of that data is and isn’t being used. And it’s never been rubbed in our faces just how much the company can figure out about us by putting all the various pieces together and creating an awkward sense of robotic intimacy.
I remember years ago, being in a Google press briefing where someone from the company talked about how much more their systems and services could accomplish but how they deliberately held back on going that far and overdoing the personalization — ’cause even though they had all that info and could make all those connections, they knew (at the time) that people wouldn’t respond well to seeing all their personal activity put together in such shocking ways. They knew (at the time) that most of us weren’t looking for an artificial BFF who knew too much about us. They knew (at the time) that giving us that sensation would cross the line into being creepy.
Well, this just in: That line’s officially been decimated. We’re in AI’s creepy era. And seemingly no one is worrying anymore if it’s actually something any of us want or will appreciate.
It kinda feels now like tech companies are actively rubbing in our faces how much they know about us — and even if there’s nothing truly nefarious going on with what they’re doing, it sure doesn’t feel good. It feels creepy. And at a time when trust in tech titans is shockingly low and most folks outside of the Silicon Valley bubble are feeling more and more frustrated with AI and all of the effects it’s foisting upon us, that isn’t a great look to be giving off.
Put those sensations alongside the sigh-inducing explosion of AI “content creators,” the proliferation of lifeless AI-generated “writing” (been on LinkedIn much lately?), and the troublingly blurry line between photorealistic AI-generated images and actual real-world photographs — not to mention the maddening experience of interacting with an AI bot support agent or encountering the ever-expanding array of AI-powered scams and security threats and AI-generated job cuts, just to name a few other problematic consequences this movement is imposing — and it’s hard not to question if all this purported progress is ultimately more helpful or harmful for us, as living, breathing humans in the real world.
A few months ago, at the three-year mark of Gemini’s launch, I posed the question: Did anyone actually ask for this? And, more pressingly: Is this the future we wanted? As we’re moving now into yet another era of AI innovation and seeing how it’s affecting our lives, it gets tougher every day to imagine many folks outside of the tech industry who’d answer with an emphatic yes.
And, unfortunately, you don’t need any fancy-schmancy AI chatbots to tell you that things are only gonna get more extreme — and, yes, more creepy — from here.
Find the tips and tools that’ll *actually* help you with my free Android Intelligence newsletter. No hype, no nonsense — just useful new stuff in your inbox every Friday, from one (alleged) human to another.
MUNICH — Nextcloud has integrated Euro-Office into its workplace application suite, one of several updates to Nextcloud Hub unveiled on Tuesday that include a new compliance app for large organizations and a program to support developers building for its platform.
Euro-Office, announced in March, is billed as an open source, sovereign alternative to Microsoft Office for European organizations keen to reduce their reliance on US tech providers. It consists of four browser-based applications: a document editor, spreadsheet program, presentation tool, and a PDF editor — each enabling collaborative editing. Euro-Office documents can also be opened directly from the Nextcloud Files mobile app.
Nextcloud is one of several European companies that support Euro-Office, which is built on the open-source code base of OnlyOffice and distributed under the GNU Affero General Public License v3 (AGPL v3).
The integraton means Nextcloud users can now choose between two options in Nextcloud Office: Euro-Office and the existing Collabora integration.
“Euro-Office uses a different architectural approach that can result in a better performance in the browser, a different user experience…, so it’s important that this option is available,” Jos Poortvliet, Nextcloud co-founder and vice president of communications, said at the Tuesday event.
Other changes in the Nextcloud Hub 26 Spring release include updates to Nextcloud‘s Talk video and voice meeting app, including AI noise suppression and the ability to start a call from any Nextcloud Hub app – an addition that will make collaborative editing easier, said Poortvliet.
For Nextcloud Assistant, there are new AI agent capabilities. In addition to existing capabilities such as managing calendars and tasks, AI agents can now create cards in Nextcloud’s Deck task management app and update information in the Forms app.
There are also improvements to the AI assistant’s interface, which can be moved around to avoid blocking other applications and allow users to copy and paste text more easily without opening another tab. To meet EU AI Act requirements, Nextcloud will make it easier to see which provider supplies the large language model (LLM) the Assistant runs on.
Nextcloud will also integrate the AI assistant directly into its Nextcloud Office suites via a sidebar chat interface, allowing users to address problems such as errors in the spreadsheet app.
NextCloud’s AI chat assistant is integrated into the company’s Office suites.
NextCloud
There’s also a new Governance app that helps large organizations — particularly governments and highly regulated industries — meet regulatory requirements with compliance tools to manage data held in Nextcloud Hub. It contains several features, including sensitivity labels to control access rights; data retention and archive capabilities; and a legal hold option that preserves documents for legal purposes such as a court case.
The Governance app includes a Compliance Manager that provides a compliance score based on an organization’s regulatory requirements, and measures progress towards certain targets. Admins can also search and review documents shared by employees and generate audit reports for compliance. The Governance app is available to Nextcloud Enterprise customers.
Nextcloud also launched a program to support independent software providers interested in building apps on its platform.
With AI making it easier for developers to build software that integrates with its platform, Nextcloud expects a 10-fold increase in the number of available apps — from 600 now to 6,000 over the next 12 months, according to Nextcloud CEO Frank Karlitschek.
Nextcloud promised to promote apps developed by partners in its App Store and sell subscriptions as part of the ISV program, as well as provide documentation and technical help to customers. In return, developers would provide guarantees to customers around security processes and long-term support.
“We can strengthen our ecosystem, the developers also make some money — because obviously we do a revenue share here — and we leverage the dynamics that we expect from AI coming very soon,” said Karlitschek.
Editor’s note: NextCloud paid for Matthew Finnegan’s travel and hotel costs for NextCloud Summit 2026, but had no editorial role in the creation of this story.
Everybody is watching to see what comes from Apple at its annual Worldwide Developer Conference (WWDC) today. There’s a great deal at stake, as when it comes to artificial intelligence (AI) today’s event represents an existentially important moment for the company.
Apple execs absolutely must convince developers, industry watchers, users — all of us — that it has learned from its well-publicized mistakes of the past two years and put together a serious proposition for AI across its platforms.
What we think we know
Right now, we think Apple intends to offer a hybrid of its own self-developed AI tools and services combined with others made with Google Gemini — all supported by an open approach to using AI services from third-party providers such as Anthropic or OpenAI.
When it comes to implementation, this should mean a contextually sensitive Siri that can respond to what you have on the screen of your device, or in the viewfinder of your camera app. The idea here is that you’ll be able to do contextual tasks like book restaurants or send a message to your granny, translate a sign, or even navigate around a room. More than this, you should also be able to combine tasks giving Siri complex — agentic AI — tasks it can then transact on your behalf.
Many of these functions will take place on device. Some will rely on Apple’s own fleet of Private Cloud Compute servers, supported by additional capacity from Google and Nvidia. When Apple Intelligence/Google Gemini can’t accomplish a task, you’ll be able to request that another service handle it on your behalf outside Apple’s managed garden. Siri itself will also gain a brand new interface.
What developers expect and how we got here
As discussed here, developers expect Apple will make access to many of its new Apple Intelligence APIs available to them. This will let them deploy useful functionality in their apps at no charge, in part because the intelligence takes place on the device.
It will also be possible for developers to permit their apps to run without being opened, which means a user should be able to ask Siri to do complex tasks that also include functionality from their apps. During this past weekend, we were warned that some or all of the new Siri functionality might be introduced on a staggered basis using a waiting list.
Apple has come a long way since that tense meeting in early 2025 when the company’s senior leadership established a new approach to AI. With Apple CEO Tim Cook taking an uncharacteristic interest in driving his teams to pull their act together, Apple developed a new, partnership-based approach to try to recapture lost ground.
Has Apple achieved it? That’s the test
Has Apple finally regained the initiative?
To a great extent, that will be the big focus across the industry once the company tells us what it’s done. Cook’s final WWDC as CEO sees a company at the absolute top of its game in so many ways, including soaring Mac sales. But to some extent he will be judged on how successfully Apple’s AI pivot comes across.
Weekend analyst notes summed it up, with bears and bulls tossing insights along. In one camp, you’ll find the true believers who argue that if Apple does come to us with something convincing, it has a chance to absolutely dominate consumer AI. “Siri/Apple Intelligence 2.0 has the potential to become the ultimate AI resource offload and deliver a form of Agentic AI to the consumer at a lower cost than incumbents,” said Morgan Stanley analyst Eric Woodring.
Cynics, however, warn that Apple really must demonstrate the kind of contextual, agentic AI it first announced (and failed to ship) two years ago; they want a chatbot with muscle, and will see right through any attempt to place a PR veneer over something weaker than what others already provide. If Apple fails to deliver on this, it can expect its stock to be utterly savaged over the next few days, though some analysts believe that Apple’s previous missteps mean the damage is already priced in.
A chance to shine, but can it?
Ultimately, of course, in addition to convincing industry watchers, Apple will need to find a way to deliver the kind of AI power consumers have been told to expect — while also protecting privacy. If it does get that right, particularly if it truly exploits its powerful hardware to ensure the most common tasks take place directly on the device, it has a major opportunity to deliver a form of Agentic AI at a lower cost than incumbents can. And it can do so while leaving the core AI bubble to burst as and when it will.
Will Apple succeed? We’ll know in a few hours, when you should check back for first takeaways on what Apple has to share. Join me on the Core for the headline summaries.
Windows 11 does a lot under the hood to speed up a PC’s performance, but PCs tend to slow down over time as they accumulate apps, files, drivers, and other detritus. Even zippy new Windows 11 devices can be sped up — and protected against future slowdowns — with a few minor system tweaks.
It’s simple to make your Windows PC run faster. Just follow these tips.
Note: This story covers Windows 11 version 25H2. If you have an earlier release of Windows 11, some things may be slightly different. If you have Windows 10, see our Windows 10 speed tips.
1. Disable programs that run on startup
Your Windows 11 PC could be a laggard if programs you rarely or never use are running in the background. Your PC will run faster if you stop them from running.
To do it, first launch the Task Manager in one of these ways:
Press Ctrl-Shift-Esc.
Right-click the lower-right corner of your screen and select Task Manager.
Type task manager into the Windows 11 search box and press Enter.
There’s a lot you can use Task Manager for, but here we’re focusing only on killing unnecessary programs that run at startup.
Click the Startup apps icon on the left side of the screen. (It’s the fifth icon from the top.) It displays a list of the programs and services that launch when you start Windows. The list includes each program’s name as well as its publisher, whether it’s enabled to run on startup, and its “Startup impact,” which is how much it slows down Windows 11 when the system starts up. Note, though, that the screen doesn’t show how much each program will impact your performance after startup, during normal PC operations.
You can use the Windows Task Manager to get information about programs that launch at startup and disable any you don’t need.
Preston Gralla / Foundry
Also note that not all apps will have useful information about their startup impact — many show up as “Not measured” in Task Manager. There are multiple reasons you might see this. For example, some apps don’t provide the Windows metadata required to measure their startup impact, and others start up too late in the boot process to be measured. Still others may not have been started a sufficient number of times for Windows to measure their impact. (The Windows Club has an article with tips and workarounds for “Not measured” apps.)
To stop a program or service from launching at startup, right-click it and select Disable. This doesn’t disable the program entirely; it only prevents it from launching at startup — you can run the application after launch. Also, if you later decide you want it to launch at startup, you can return to this area of the Task Manager, right-click the application and select Enable.
Many of the programs and services that run on startup may be familiar to you, like Microsoft OneDrive or Spotify. But you may not recognize many of them. (Anyone who immediately knows what “bzbui.exe” is, please raise your hand. No fair Googling it first.)
The Task Manager can find information about unfamiliar programs. Right-click an item and select Properties for more information about it, including its location on your hard disk, whether it has a digital signature, and other information such as the version number, the file size, and the last time it was modified. (Note that not all programs provide this information when you right-click them — the Properties button may be grayed out.)
You can also right-click the item and select Open file location. That opens File Explorer and takes it to the folder where the file is located, which may give you another clue about the program’s purpose.
Finally, and most helpfully, you can select Search online after you right-click. Bing will then launch with links to sites with information about the program or service. With Task Manager’s help, I easily discovered that bzbui.exe is Backblaze backup software, something I want to run automatically during startup.
If you’re worried about one of the listed applications, you can go to a site run by Reason Software called “Should I Block It?” and search for the file name. You’ll usually find very solid information about the program or service.
Now that you’ve selected all the programs that you want to disable at startup, the next time you restart your computer, the system won’t launch those unnecessary programs automatically, and your PC may run faster.
2. Turn off unused apps with high resource usage
It’s easy to forget just how many apps you’ve got running at the same time in Windows. Sometimes your PC’s sluggishness can be due to running too many apps you’re not currently using — or a single app that’s taking up a lot of resources.
First launch Task Manager using one of the methods covered in the previous tip. If you’re already in Task Manager, click the Processes icon on the left side of the screen (three squares in a grid, second from top) to get to the Processes screen. You’ll see a list of every app or process you’re currently running.
Look for apps you’re currently running but not actively using, and also look for any not running with high memory or CPU usage. Right-click any app you want to close and select End task.
Use Task Manager to identify and shut down unused apps using lots of system resources.
Preston Gralla / Foundry
3. Use Efficiency Mode
Task Manager has another trick up its sleeve for juicing Windows 11 performance. Efficiency Mode can speed up your PC and improve laptop battery life. It lowers the process priority of background applications, among other efficiency tricks.
The term is a bit of a misnomer, because you can’t put your entire PC into Efficiency Mode. Instead, you use Task Manager to put individual apps and processes into it. There’s one caveat: You’ll only be able to use it on some apps and processes.
On the Processes screen in Task Manager (see previous tip), look through the list of currently running apps and processes. Click the app or process you want to put into Efficiency Mode, click the Efficiency mode icon at the top right of the screen, and then confirm that you want to turn on Efficiency Mode for the app.
Note that if the Efficiency mode icon is grayed out when you click an app or process, you won’t be able to use it. Also, some apps, including Microsoft Edge, automatically work in Efficiency Mode by default, and the mode can’t be turned off.
Turning on Efficiency Mode for an app.
Preston Gralla / Foundry
4. Use automatic Windows maintenance
In the background, Windows 11 constantly performs maintenance on your PC, doing things like security scanning and performing system diagnostics to make sure everything is up to snuff. It automatically fixes problems it finds, which helps your PC run at peak performance. The automatic maintenance runs every day at 2:00 a.m. if your device is plugged into a power source and is asleep.
However, that feature may have been accidentally turned off, or it may not have run recently if you shut down your PC at night (rather than putting it in Sleep mode) or you haven’t had your laptop plugged in for a while. You should make sure it’s turned on and runs every day. You can also run it manually if you’d like.
Type control in the search box on the taskbar and select Control Panel from the results to run the Control Panel app. In the app, select System and Security > Security and Maintenance. In the Maintenance section, under Automatic Maintenance, click Start maintenance if you want it to run now.
To make sure that it runs every day, click Change maintenance settings, and on the screen that appears, select the time you’d like maintenance to run and check the box next to Allow scheduled maintenance to wake up my computer at the scheduled time. Then click OK.
Here’s how to set a time each day for Windows 11 to run its maintenance tasks.
Preston Gralla / Foundry
5. Kill adware and bloatware
It may be that what’s slowing your PC down isn’t Windows 11, but bloatware or adware that takes up CPU and system resources. Adware and bloatware are particularly insidious because they may have been installed by your computer’s manufacturer. (This is generally not a problem for business PCs but is very common on consumer devices.) They typically run automatically at startup without you even knowing it. You’ll be amazed at how much better your PC will run if you get rid of it.
Start by running a system scan to find adware and malware. If you’ve already installed a security suite such as Norton Security or McAfee LiveSafe, you can use that. Microsoft Defender Antivirus, the anti-malware tool built into the Windows Security app, also does a great job. Type windows security in the search box, press Enter, and on the screen that appears, click Virus & threat protection and then click Quick scan. Windows Security will look for malware and remove any it finds.
You should get a second opinion, though, so consider a free tool like Malwarebytes. The free version scans for malware and adware and removes what it finds; the paid version offers always-on protection to stop infections in the first place.
Malwarebytes scans for and removes malware.
Preston Gralla / Foundry
Now that you’ve done all that, check for bloatware and uninstall it. A good free anti-bloatware tool is Bulk Crap Uninstaller. You can also go to the website Should I Remove It? — it offers recommendations on what software is useful, and what you can uninstall.
There’s a section of the website devoted to advice on how to remove bloatware on PCs from specific manufacturers. I highly recommend going there, because it lists all the bloatware different manufacturers install on their PCs. That section of the site also compares how much bloatware major manufacturers ship on their PCs. It rates Toshiba as having the most and Acer as having the least.
Finally, when you buy a new PC online, check whether there’s an option to leave off trial software and software you don’t need to run your PC. That will stop bloatware from getting on your system in the first place.
6. Turn off search indexing
Windows 11 search performs indexing in your hard disk in the background, allowing you to search your PC more quickly than if no indexing were being done. That’s good for fast searches, but not so good for slower PCs, because indexing can cause a performance hit. You can give a slower machine a speed boost by turning off indexing. Even if you have an SSD disk, turning off indexing can improve your speed, because the constant writing to disk that indexing does can eventually slow down SSDs.
To turn it off, type services.msc into the search box on the taskbar and press Enter. The Services app appears. Scroll down to either Indexing Service or Windows Search in the list of services. Double-click it, and on the screen that appears, click Stop. Then reboot your machine. Your searches may be slightly slower, but you also may not notice the difference. You should, though, get an overall speed boost.
Here’s how to turn off Windows 11 indexing.
Preston Gralla / Foundry
Alternatively, you can turn off indexing only for files in certain locations. In this way, you can still index files and folders you often search for but turn off indexing for the rest of your hard disk. So you’d still get fast searches for files you use often, while increasing your PC’s performance.
To do it, type index in the Windows 11 search box and click the Indexing Options result that appears. The Indexing Options page of the Control Panel appears. Click the Modify button, and you’ll see a list of locations that are being indexed, such as Microsoft Outlook, your personal files, and so on. Uncheck the box next to any location, and it will no longer be indexed.
7. Clean out your hard drive
A bloated hard drive filled with files you don’t need can slow down your PC. Taking a few minutes to clean it can give an immediate speed boost. A built-in Windows 11 tool called Storage Sense will do the job for you.
Launch the Settings app, select System > Storage, scroll down to the “Storage management” section, and next to Storage Sense, move the toggle from Off to On. From now on, Windows will constantly monitor your PC and delete old junk files you no longer need — temporary files, files in the Downloads folder that haven’t been changed in a month, and old Recycle Bin files.
Here’s where to turn on Storage Sense.
Preston Gralla / Foundry
You can also customize when Storage Sense runs and what should be deleted automatically — for example, whether to delete files from the Downloads folder after they’ve been there for more than 30 days. To do it, click the right-facing arrow next to the Storage Sense On/Off slider.
8. Disable shadows, animations, and visual effects
Those who like eye candy are probably big fans of Windows 11’s shadows, animations, and visual effects. They typically don’t affect performance on fast, newer PCs. But they can exact a performance hit on older, slower machines.
If you’ve got a slower PC, turn them off. To do it, in the Windows 11 search box, type sysdm.cpl, press Enter, and then click the sysdm.cpl icon. That launches the Control Panel’s System Properties dialog box. Click the Advanced tab and click Settings in the Performance section. That brings you to the Performance Options dialog box. (Make sure you’re on the Visual Effects tab of the dialog box.) You’ll see a varied list of animations and special effects.
The Performance Options dialog box lets you turn off visual effects that might be slowing down Windows 11.
Preston Gralla / Foundry
If you love to tweak, you can turn individual options on and off. These are the animations and special effects you’ll probably want to turn off, because they have the greatest effect on system performance:
Animate controls and elements inside windows
Animate windows when minimizing and maximizing
Animations in the taskbar
Fade or slide menus into view
Fade or slide ToolTips into view
Fade out menu items after clicking
Show shadows under windows
However, it’s a lot easier to just select the Adjust for best performance option at the top of the screen and click OK. Windows 11 will then turn off the effects that slow down your system.
9. Disable transparency
To get an even bigger speed boost, go beyond turning off shadows, animations, and visual effects. Also disable the transparency effects in the taskbar and other Windows 11 locations. Windows does a surprising amount of heavy lifting to create transparency effects, and turning them off can make a difference in system performance.
To do it, run the Settings app and select Personalization > Colors, then move the Transparency effects slider to Off.
Turning off Windows 11’s transparency effects can help speed up performance.
Preston Gralla / Foundry
10. Change your power settings
Your Windows 11 PC’s power settings let you balance its energy use with its performance. If you’re using the most power-efficient setting, you’re slowing down your PC, because the setting reduces your PC’s performance to save energy. (Even desktop PCs typically have a power-saving setting.) Changing your power setting to one of the less power-efficient options will give you an instant performance boost.
To do it, run the Settings app, then choose System and click the right-facing arrow next to Power. Depending on whether you’re using a laptop or a desktop PC (and if you’re using a laptop, whether it’s plugged in), you’ll see either a “Plugged in” or “On battery” setting that lists the power mode you’re using. Click the drop-down arrow next to it and choose the setting you want.
Change your power settings to give your PC a performance boost.
Preston Gralla / Foundry
Best Performance gives you the most oomph but uses the most power. Balanced finds a happy medium between power use and better performance, and Best Power Efficiency does everything it can to give you as much battery life as possible. Desktop users have no reason to choose Best Power Efficiency, and even laptop users should consider the Balanced option when unplugged.
11. Turn off Windows tips and tricks
Windows 11 constantly watches what you’re doing on your PC and gives you tips about things you might want to do with the operating system. I’ve never found these tips helpful. And I don’t like the privacy implications of Windows constantly taking a virtual look over my shoulder. (Also see: How to protect your privacy in Windows 11.)
Beyond that, this monitoring can also make your PC run more sluggishly. So to speed things up, tell Windows to stop being so nosy and giving you advice. To do it, run the Settings app and select System > Notifications. Scroll down to Additional settings and click the down arrow. From the options that appear, uncheck the box marked Get tips and suggestions when using Windows.
Turn off Windows’ suggestions to help things run more smoothly (and regain a measure of privacy).
Preston Gralla / Foundry
12. Disable Game Mode
Windows 11’s Game Mode optimizes your PC for playing games. When it detects that you’re playing a game, it prioritizes system resources for gaming, taking them away from other apps and background processes. That’s great for serious gamers, but when you’re not playing games, it can slow down your system because it keeps some system resources in reserve in case you start playing a game. It occasionally causes stability issues as well. So turning off Game Mode may be able to give your PC a quick boost. (You can always turn it back on again when you want to play a game.)
Game Mode is turned on by default, so even if you’ve never played a game on your PC, it’s probably enabled. To turn it off, go to Settings > Gaming > Game Mode and move the Game Mode slider to Off.
Game Mode can sometimes cause stability and performance issues, so turning it off may give your PC a boost.
Preston Gralla / Foundry
13. Update device drivers
Your Windows 11 PC can become a slowpoke if its drivers are old and in the way. Outdated drivers can exact a big performance hit. Graphics drivers are often the biggest culprit in driver-related slowdowns. To check whether your graphics driver is outdated, and to update to the latest one:
In the Windows search box, type device manager and click on the Device Manager icon that appears.
Scroll to the Display Adapters entry and click the side-facing arrow to expand it.
Right-click the driver, and from the context menu that appears, select Update Driver.
You’ll be asked whether to have Windows search for an updated driver, or whether you want to find one and install it manually. Your best bet is to let Windows do the work. Follow the on-screen instructions to get the driver installed.
You can use the Device Manager to update all your drivers this way. That’s time-consuming, so consider asking Windows to do the work for you. To do it, launch the Settings app (pressing the Windows key + I is a good shortcut for doing it) and select Windows Update from the left pane. Select Advanced Options > Optional Updates. You’ll see a list of all the updates Windows has found but hasn’t installed. Select any of the drivers you want to install, then click Download & install.
Tell Windows Update to update your drivers.
Preston Gralla / Foundry
14. Turn off background app permissions
Some apps run various processes in the background even if you don’ t launch them. You’ll likely never know they’re doing it, and they can cause unexpected slowdowns and a sluggish PC. Microsoft says these background processes do things such as syncing or sending notifications. That can slow your PC down, especially if more than one app is doing it.
You can head off performance problems by not allowing the apps to run in the background. To do it:
Go to Settings > Apps > Installed apps.
Click the three horizontal dots on the right of any app whose permissions you want to turn off and select Advanced options.
Click the dropdown under “Background app permissions,” and choose Never if you want to stop the app from ever running a process in the background, or Power optimized if you want to let Windows decide whether to let the processes run when they won’t cause your PC to take a performance hit.
Managing background app permissions properly can give your PC a performance boost.
Preston Gralla / Foundry
15. Roll back your PC to a previous state
Sometimes your PC will slow down for no apparent reason, and stay slow. It could be a new driver slowing your system down. Perhaps accidentally you changed a system setting that caused the problem. It can be difficult, and often impossible, to get to the root of these kinds of problems and fix them.
If you’ve noticed that your computer has become sluggish recently, there’s something that might solve the issue: Restore your PC to the state it was in before the problem began. You can easily do this via System Restore.
To do it:
Make sure System Restore is turned on by going to Settings > System > About, and under the “Device info” section, click System protection.
From the screen that appears, click Configure and select Turn on system protection if it’s not already turned on. Click OK.
You’ll be sent back to the System Protection screen. Click System Restore.
On the screen that appears, select Recommended restore and click Next if you want to revert to the most recent restore point. Select Choose a different restore point if you want to choose one yourself, and click Next.
Restart your PC. It will revert to its previous state. Note that when you do this, your documents, pictures, and personal data won’t be deleted.
Here’s how to turn on System Restore.
Preston Gralla / Foundry
16. Restart Windows
Here’s one of IT’s not-quite-secret weapons for troubleshooting and speeding up a PC: shut it down and restart it. Doing that clears out any excess use of RAM that otherwise can’t be cleared. It also kills processes that you might have set in motion and are no longer needed, but that continue running and slow your system.
If your Windows 11 PC has turned sluggish over time for no apparent reason, you may be surprised at how much more quickly it will run when you do this. I can vouch for it, and I restart my Windows 11 PCs regularly even if they’re not sluggish, just as a precautionary measure.
This article was originally published in February 2023 and most recently updated in June 2026.
One of the best parts about using Android is the good old-fashioned geeky fun that comes with finding new ways to improve your digital environment — and improve your day-to-day efficiency.
Perhaps the most classic example of advanced Android customization, though, is a splendid little somethin’ called the home screen launcher — a fancy way of saying the system that controls how your home screen and app drawer look and work. Your phone has a built-in process that handles that by default, but here in the land o’ Googley matters, you can always replace that with something completely different and make your device adapt to the way you like to work instead of the other way around.
The real beauty of this ecosystem, though, is how much power it gives to Android developers — and subsequently to us, as Android-appreciating animals who embrace these creations! — to experiment and try out all sorts of new concepts. Sometimes, an Android launcher approach speaks to you for its practicality. Other times, it’s just a refreshingly interesting take on how you can get around your phone and get stuff done.
Today, I’ve got a perfect example to share with you. It’s a whole new approach to the Android home screen that’s both unlike anything else I’ve ever seen in this arena and delightfully familiar, in a retro-tech sense.
My friend and fellow enlightened Android phone owner, allow me to introduce you to a creative little concoction called Key Launcher.
Key Launcher has only been out and available on the Play Store for a matter of weeks now, but it’s impressively polished — and, even more important, impressively original while also having some fantastic geek-tech throwback vibes.
To that end, the core distinctive element of Key Launcher is the T9-style dialpad that sits front and center on the lower third of its primary panel. It is quite literally the same set of letter-packin’ numbers and characters you’d see on an old-school phone — or in the dialer of your favorite Android phone app.
width="1024" height="1022" sizes="auto, (max-width: 1024px) 100vw, 1024px">The T9 keypad is the centerpiece of the Key Launcher Android home screen experience.
JR Raphael, Foundry
And in this context, it serves some pretty interesting purposes:
In true T9 style, you can find and access any app or contact on your phone simply by tapping the letter that corresponds with its name — and if you want to narrow down the list even further, you can keep typing letters to refine the results.
You can long-press any number to create and then access a custom “super shortcut” — anything from a single specific action (opening a particular app or calling or texting a certain contact) to launching a group or category of apps or contacts, launching an on-demand pop-up widget or swipeable stack of widgets, or even launching a pre-filled search query.
One press, and poof: Any widget you want — or series of swipeable widgets, even — is right there and ready.
JR Raphael, Foundry
If you tap the # key (known as “pound” in this context — not “hashtag” — for any non-olds among us), you can set up and then access a special “vault” area, where apps are hidden and only visible and accessible with authentication.
And, in an especially nifty touch, you can also just use the dialpad as an actual dialpad — to punch in any number you want to text or call, even if it isn’t already in your contacts.
Your phone dialer is always right in front of you with Key Launcher as your home screen.
JR Raphael, Foundry
Function-packed as all of that may be, that dialpad is still just one piece of the Key Launcher puzzle. Above it sits a grid of app shortcuts that includes both your own pinned favorites and a dynamic selection of recently opened items. And above that is a handy built-in widget that shows a rotating array of upcoming calendar events from your agenda along with the local time and weather — and, in an especially neat twist, can also be customized to act as an interactive stack that lets you flip through your own set of standard Android widgets right then and there as well.
Key Launcher’s primary widget spot can be configured to hold numerous widgets in a swipeable stack.
JR Raphael, Foundry
Speaking of widgets, if you swipe toward the left on Key Launcher’s dialpad, you’ll reveal the launcher’s built-in “Widget Center” panel — which is an entire screen dedicated to holding however many widgets you want, in any configuration you like, for easy ongoing access.
The Widget Center is another interesting way to access widgets within Key Launcher.
JR Raphael, Foundry
A swipe in the other direction will take you to an enlarged view of your active notifications, meanwhile, while a swipe downward can be set to launch either a quick search (of Google or whatever provider you prefer), a search of your apps, or a direct Android app shortcut within any app on your device.
Swiping down on your home screen can trigger a shortcut of your choice.
JR Raphael, Foundry
And if all of that seems like a lot of productivity-boosting possibilities, just wait ’til you get into this thing’s settings. Key Launcher is overflowing with options to customize and control practically every facet of its operation, ranging from basic visuals to the specifics of how the dialpad works and even a toggle for optimizing the interface for left- or right-handed use.
Key Launcher is no slouch when it comes to settings.
JR Raphael, Foundry
Key Launcher is free on its base level with an optional Pro upgrade that unlocks certain limitations and more advanced features. That path is available for five bucks a year or $10 as a single lifetime purchase, and you get a month-long trial the first time you install the app so you can check it out in its full form.
The Pro path adds in lots of extras, but even Key Launcher’s free version is quite pleasant and functional.
JR Raphael, Foundry
Even if you just stick to the free version, though, this thing has an awful lot to offer — and it really is unlike anything else out there, with so many clever and potentially useful touches.
It’s that kind of creativity and constant discovery that keeps Android so interesting and advantageous, even after all this time — and that’s true whether you end up sticking with Key Launcher for the long haul or just giving it a go for a few hours and appreciating the deliciously original thinking it offers.
In the ever-evolving cybersecurity landscape, Microsoft has introduced various new features in Windows 11 designed to protect users from modern workplace threats. Among such features, Smart App Control (SAC) changes how Windows devices handle, and occasionally block, unwanted or potentially malicious applications.
But what exactly is Smart App Control? How does it work, who benefits most, and are there any caveats? In this story we’ll share some history and explain why SAC has been something of a stealth feature in Windows 11.
What is Smart App Control?
Smart App Control is a security feature in Windows 11 designed to block untrusted or potentially dangerous applications from running on a PC. Built directly into the operating system (through Windows Security), SAC leverages code signing, Microsoft’s intelligence cloud, and artificial intelligence to make real-time decisions about whether an app or application should be allowed to run. Its goal is to minimize the risk that malware, ransomware, and unwanted software could run on users’ systems — with minimal user intervention.
At its heart, Smart App Control is a kind of gatekeeper. When you attempt to run an app, SAC evaluates its trustworthiness. That evaluation is based on numerous criteria: Is the app digitally signed? Is it widely used and recognized as safe by Microsoft’s threat intelligence network? Has it been flagged previously for questionable behavior?
If an app fails one or more such checks and is found suspicious or untrustworthy, SAC blocks its execution, silently preventing a potential security event before it starts.
How does Smart App Control work?
SAC operates using a combination of cloud-based intelligence, local analysis, and digital signatures. Here’s a step-by-step breakdown of how it functions:
App verification: When a user attempts to launch an application, SAC inspects the file. It first checks if the app is digitally signed by a trusted publisher, an important indicator of legitimacy.
Cloud intelligence search: SAC then consults Microsoft’s extensive security databases in the cloud. These aggregate threat data from millions of Windows devices worldwide. If the app has been flagged already or is recognized as part of any malware campaign, it is blocked.
AI-based analysis: For less clear-cut instances, SAC uses AI to evaluate an app’s behavior. That is, it looks for telltale signs of malware or unwanted code. Such a dynamic analysis helps catch emerging threats not yet known to the cloud.
When an app is blocked, the user gets a clear, informative notification. Usually, there’s no way to override SAC’s decision, which puts security ahead of convenience. It also ensures that users will quickly report false positives.
Smart App Control is designed to be simple and automatic. Unlike conventional antivirus or endpoint security, it requires no updates to definitions, nor manual scans. SAC works behind the scenes to block threats in real time. Because it uses both local and cloud-based intelligence, it’s always current.
On the downside, some legitimate apps, especially older or custom business software, may not be digitally signed, resulting in false positives. If SAC decides an app is unsafe, the only way to run the app is to turn SAC off.
Working with Smart App Control
Notably, Smart App Control is enabled by default — but only on “clean installs” of Windows 11 version 22H2 or later. Systems upgraded from older versions of Windows 11 will always show SAC in the “Off” state.
Microsoft made this decision to avoid potential compatibility issues with legacy or line-of-business applications. That means users can’t benefit from SAC unless they have a newer PC or somebody reinstalls Windows 11 from scratch on an older one. (See my Windows clean install tutorial for complete instructions.)
SAC prerequisites
To get granular: SAC requires that the following be present as Windows 11 comes up for the first time:
Secure Boot, a security feature that allows only trusted, digitally signed software to run as Windows boots up
A working chain of trust, including current CA-2023 boot certificates in Unified Extensible Firmware Interface (UEFI) and a CA-2023 compliant bootloader
Newer PCs — namely, those built in 2018 or later, with Windows 10 or 11 installed prior to delivery — routinely include UEFI-only boot and support Secure Boot from the get-go. Indeed, Secure Boot was introduced with Windows 8, and the original certificates came along in 2011 (Production PCA 2011, UEFI CA 2011, and KEK CA 2011). They’ve been shipped in firmware ever since.
As long as such machines get updated through Windows Update (or some managed equivalent, such as Microsoft Intune, Windows Autopilot, or Microsoft Configuration Manager), the new certificates and a proper chain of trust should be established on those PCs. (See FAQ: What you need to know about expiring Windows Secure Boot certificates for more information.) All this said, only Windows 11 imposes a working Secure Boot environment as a hard and fast system requirement as of 2021.
In short, Secure Boot and the chain of trust provide the essential foundation for SAC to start with a clean bill of health, security wise, and keep things that way. To learn more about Secure Boot and its various certificates and trappings, consult the Secure Boot and Windows Secure Boot Key Creation and Management Guidance pages on Microsoft Learn.
Modes of operation
SAC has three distinct modes:
On: SAC actively monitors and blocks untrusted apps.
Evaluation: SAC quietly observes your usage patterns and system needs before fully activating.
Off: SAC is disabled and will not intervene.
SAC will normally start in Evaluation mode for up to a month, then turn itself On or Off depending on observed system behavior. Once turned on, SAC cannot be set back into Evaluation mode. Organizations or users who run custom software or specialized workflows should leave SAC in Evaluation mode to ensure that business functions keep working.
To check SAC’s status:
Open the Windows Security app.
Navigate to App & browser control.
Look for the “Smart App Control” section. You’ll see the current status: On, Off, or Evaluation mode, as shown in Figure 1.
Figure 1: On this PC, the evaluation period is over and Smart App Control is enabled.
Ed Tittel / Foundry
Until recently, SAC could not be toggled off and on again — once it was turned off, you had to reinstall or reset Windows 11 to re-enable it. But with the April 2026 Patch Tuesday release of Windows 11 (KB5083769), admins and elevated users can turn SAC on or off as they see fit, as long as the initial setup conditions described above are met.
This toggling capability is a step forward for usability and safety, because it lets users with administrative privileges temporarily disable SAC in order to install, update, or uninstall certain unsigned apps, such as those that rely on Windows Installer Transform (MST) files, and then turn SAC back on immediately.
Note that this feature is being gradually rolled out, so you may not have access to it yet.
Smart App Control compared to other Windows 11 protections
Microsoft has long offered security features like Windows Defender, Controlled Folder Access, and Application Control. SAC differs in its general, automated approach. Rather than relying on static definitions, group policies, or user input, SAC leverages real-time intelligence and AI.
In many ways, SAC takes the best bits of Application Control (previously available through Device Guard and Windows Defender Application Control) and makes them accessible to a wider audience. It also involves little or no manual setup and few, if any, policy issues. Then again, as covered earlier in the story, SAC also functions as a black box: one either lives with its judgments, or does without it.
Real-world impact and industry reception
Feedback from the IT community has been mostly positive. Security researchers note SAC’s ability to block emerging threats before traditional antivirus solutions can respond. But SAC is hardly bullet-proof: a number of studies cite focused exploits or workarounds to bypass or trick SAC. For instance, Elastic Security Labs documented multiple techniques to break SAC in 2021, with follow-ons from Hacker News and TechRadar.
As always, a proactive approach to cybersecurity that includes teaching users to avoid trouble remains a key ingredient in establishing and maintaining a strong security posture.
For end users, SAC’s presence may go largely unnoticed — until, that is, it intercepts a malicious download or prevents installation of a suspicious or malicious program. Or, as the case may sometimes be, when users try to run old, unsigned software that SAC won’t allow.
Tips for IT administrators
For IT professionals considering deploying devices with SAC, certain best practices are worth implementing:
Test SAC in Evaluation mode before rolling out widely, especially if your organization relies on custom or legacy software, or if anything important is unsigned.
Educate users about SAC’s presence and purpose so they understand why certain apps may be blocked. Set up a procedure to request support and/or fixes, particularly if important software gets blocked. Possible workarounds include restricted VMs with SAC turned off to run unsigned applications.
Maintain an up-to-date inventory of critical applications and ensure as many as possible are digitally signed by trusted publishers.
Monitor Microsoft resources Learn, Support, and Answers forums for SAC updates, compatibility lists, and troubleshooting tips.
The future of Smart App Control
As threats continue to evolve, Microsoft should continue to expand SAC’s capabilities. Undoubtedly it will use more advanced AI models and deeper integration with Windows Defender and Microsoft 365 security. Future updates may introduce more granular controls for enterprise environments, including managed exceptions and better reporting tools.
For now, SAC represents a useful additional tool for Windows security. It’s intended to shift the balance in favor of the good guys in the ongoing war against malware. So far, it’s been a modest step forward. But it’s not unthinkable that SAC could offer more and better protection in upcoming Windows releases.
CryptoLocker. WannaCry. DarkSide. Conti. MedusaLocker. Qilin. The ransomware threat has exploded over the past decade, and it isn’t going away anytime soon; the news brings constant reports of new waves of this pernicious type of malware washing across the world.
Ransomware gained in popularity in large part because of the immediate financial payoff for attackers: It works by encrypting the files on your hard disk, then demanding that you pay a ransom, frequently in Bitcoin or other cryptocurrency, to decrypt them. Now many ransomware gangs are switching tactics, stealthily infiltrating enterprise systems, collecting sensitive corporate data over time, and later threatening to expose that data if the organization doesn’t pay up.
Nevertheless, individuals and businesses are still at risk from traditional ransomware attacks. In this article, I’ll show you how to keep yourself safe in Windows 11 — and Windows 10 too, for those who haven’t yet moved to Windows 11 — including how to use an anti-ransomware tool built into both versions of Windows.
This article assumes that you’re already taking the basic precautions against malware in general, including running anti-malware software and never downloading attachments or clicking links in email from unknown senders and suspicious-looking email. Also note that this article has been updated for Windows 11 25H2 and Windows 10 22H2. If you have an earlier Windows release, some things may be different.
Use controlled folder access
Microsoft is concerned enough about ransomware that it built an easy-to-configure anti-ransomware tool directly into Windows 10 and 11. Called controlled folder access, it protects you by letting only safe and fully vetted applications access your files. Unknown applications or known malware threats aren’t allowed through.
By default, the feature is not turned on, so if you want to protect yourself against ransomware, you’ll have to tell it to get to work. And you can customize exactly how it works by adding new applications to its whitelist of programs that can access files, and adding new folders in addition to the ones that it protects by default.
To switch it on, you’ll need to access Windows Security. To get to it in Windows 11, click Start > Settings to open the Settings app, then select Privacy & Security > Windows Security.
In Windows 10, click Start > Settings to open the Settings app, then select Update & Security > Windows Security.
In Windows Security, select Virus & threat protection. On the screen that appears, scroll down to the “Ransomware protection” section and click Manage ransomware protection. On the next screen, under “Controlled folder access,” toggle the switch to On. You’ll get a prompt asking if you want to make the change. Click Yes.
Switch the toggle to On to turn on controlled folder access.
Preston Gralla / Foundry
You shouldn’t leave it at that and feel safe yet, because there’s a chance that you have folders you’d like to protect that the feature ignores. By default, it protects Windows system folders (and folders underneath them) like C:\Users\UserName\Documents, where UserName is your Windows user name. In addition to Documents, Windows system folders include Desktop, Music, Pictures, and Videos.
But all your other folders are fair game for any ransomware that makes its way onto your PC.
To add folders you want protected, click the Protected folders link that appears after you switch on controlled folder access. A prompt appears asking if you want to make the change. Click Yes. Click the Add a protected folder button that is on top of the list of protected folders that appears, then navigate from the screen that appears to the folder you want to protect and click Select Folder.
Click Add a protected folder to protect more of your folders with controlled folder access.
Preston Gralla / Foundry
Continue to add folders in this way. Remember that when you add a folder, all folders underneath it are protected as well.
If you decide at any point to remove a folder, get back to the “Protected folders” screen, click the folder you want to remove, and then click Remove. Note that you won’t be able to remove any of the Windows system folders that are protected when you turn the feature on. You can only remove the ones that you’ve added.
Microsoft determines which applications should be allowed access to protected folders, and unsurprisingly, among them are its own Microsoft Office apps. Microsoft hasn’t published a list of which apps are allowed, though, so consider taking action to let apps you trust access your files.
To do it, go back to the screen where you turned on controlled folder access and click Allow an app through Controlled folder access. A prompt appears asking if you want to make the change. Click Yes. From the screen that appears, click Add an allowed app, navigate to the executable file of the program you want to add, click Open, and then confirm you want to add the file. As with adding folders to the list of protected folders, you can remove the app by getting back to this screen, clicking the application you want to remove, then clicking Remove.
Hint: If you’re not sure where executable files are located for programs you want to add to the allow list, look for the folder name with the program’s name in the “WindowsProgram Files” or “WindowsProgram Files (x86)” folders, then look for an executable file in that folder.
Note: In Windows 11, OneDrive folders are automatically protected by controlled folder access when you turn it on. However, they may not necessarily be protected in Windows 10. In Windows 10, on the “Ransomware protection” page, you’ll be notified in the Ransomware data recovery section whether your OneDrive files are protected. If they’re not protected, click the Set up OneDrive button there.
Back up… but do it properly
The whole point of ransomware is to hold your files hostage until you pay to unlock them. So one of the best protections from ransomware is to back up your files. That way, there’s no need to pay the ransom, because you can easily restore your files from the backup.
It’s a good idea to not just back up to a local drive but additionally use a reputable cloud-based storage and backup service. If you back up to a drive attached to your PC, when your PC gets infected with ransomware, the backup drive will likely be encrypted along with any other disks inside or attached to your PC. Cloud backups are generally less vulnerable but not wholly immune to ransomware attacks.
Make sure that your backup service uses versioning — that is, it keeps not just the current version of each of your files, but previous ones as well. That way, if the most current version of your files gets infected, you can restore from previous versions. Most popular backup and storage services, including Microsoft OneDrive, Google Drive, Carbonite, Dropbox, and many others, use versioning. It’s a good idea to get familiar with the versioning feature of whichever service you use now, so you can easily restore files in a pinch.
Some services, including OneDrive and Google Drive, now offer ransomware detection. Users are notified of suspicious activity and can use the vendors’ tools to remove infected files and restore older versions.
Stay patched
Microsoft regularly releases Windows 10 and Windows 11 security patches, and they’re automatically applied via Windows Update. But if you hear about a ransomware outbreak, you shouldn’t wait for Windows Update to work — you should immediately get the update yourself so that you’re protected as soon as possible. And it’s not just Windows updates you want to get. You also want to make sure Windows Security, Microsoft’s built-in anti-malware tool, has the latest anti-malware definitions.
To do both in Windows 10, go to Settings > Update & Security > Windows Update and click the Check for updates button. In Windows 11, go to Settings > Windows Update and click the Check for updates button. (If updates are already waiting for you, you’ll see them listed instead of the Check for updates button.) If Windows finds updates, it installs them. If it requires a reboot, it will tell you.
Checking for Windows 11 updates.
Preston Gralla / Foundry
You need to worry not just about Windows staying patched, but other software as well. If you use an anti-malware program other than Windows Security, make sure it and its malware definitions are up to date.
And the other software on your PC should be kept up to date as well. So check how each piece of software gets updated and make sure to update each one regularly. For help keeping all your apps up to date, consider setting up an automated tool like Patch My PC Updater or Software Update Monitor (see our tutorial “How to keep your apps up to date in Windows 10 and 11”) — or, if you’re comfortable using the command line, try the WinGet command (see “WinGet: The best way to keep Windows apps updated”).
Disable macros in Microsoft Office
Ransomware can be spread via macros in Office files, so to be safe you should turn them off. Microsoft now disables macros from the internet by default, but that doesn’t necessarily mean that they’re turned off in your version of Office, depending on when you installed it and whether you’ve updated it.
To turn them off, when you’re in an Office application, select File > Options > Trust Center > Trust Center Settings and select either Disable all macros with notification or Disable all macros without notification. If you disable them with notification, when you open the file you’ll get a message warning that the macros were disabled and letting you turn them on. Only turn them on if you’re absolutely sure they’re from a safe, trusted source.
Here’s how to disable macros in Office.
Preston Gralla / Foundry
Get ransomware protection and/or mitigation tools
Just about any anti-malware program includes built-in anti-ransomware protections, but there are several programs that promise to specifically target ransomware. Most are paid, but there are also some free options.
Bitdefender offers free decryption tools that can unlock your data if you’ve been attacked by ransomware and it’s being held ransom. They can only decrypt data that’s been encrypted with certain specific pieces or families of ransomware, including REvil/Sodinokibi, DarkSide, MaMoCrypt, WannaRen, and several others. Avast offers its own set of free decryption tools.
What IT needs to know about ransomware and Windows
Many Microsoft 365 and Windows commercial plans, especially at the enterprise level, include ransomware detection and protection tools. Advanced products such as Microsoft Defender XDR are also available under separate licenses.
Even without those tools, there’s plenty that admins can do to protect Windows systems from ransomware. The most obvious: Apply the latest security patches to not just all PCs in an organization, but all servers and any other enterprise-level hardware. Also lock down application permissions, train users to spot phishing attempts, and, of course, securely back up all corporate data.
IT also needs to make sure the notoriously insecure SMB1 Windows networking protocol is disabled in all devices. Multiple ransomware attacks have spread through the 30-year-old protocol; even Microsoft says it should be used by no one, ever.
The good news is that Windows 10 version 1709, released in October 2017, finally did away with SMB1. (It’s not in Windows 11, either.) But that’s only for PCs with clean installs of version 1709 or later. Older PCs that were updated from earlier versions of Windows still have the protocol built in.
The Microsoft support article “Detect, enable and disable SMBv1, SMBv2, and SMBv3 in Windows” offers details about how to turn off the protocol. It recommends killing SMB1 but keeping SMB2 and SMB3 active, and only deactivating them for temporary troubleshooting.
Administrators can use the controlled folder access feature (covered earlier in this article) to stop ransomware from encrypting files and folders of PCs running Windows 11 or Windows 10 version 1709 or later. They can use the Group Policy Management Console, the Windows Security Center, or PowerShell to turn on controlled folder access for users on a network, customize which folders should be protected, and let additional applications access the folders beyond the Microsoft defaults, as detailed in the Microsoft articles “Enable controlled folder access” and “Customize controlled folder access.”
One potential issue with controlled folder access is that it might block apps that users typically use from accessing folders. So Microsoft recommends using audit mode first, to see what will happen when controlled folder access is turned on. For information about how to do it, go to Microsoft’s “Evaluate exploit protection” documentation.
Over the past decade, there’s something I’ve hinted at, mentioned in passing as a part of broader discussions, and told more people than I can count privately via email and other one-on-one conversations.
And now, as the writer of the internet’s longest-standing Android column and newsletter — a fancy way of saying someone who is apparently now old as molasses — I feel like I’d be doing a disservice if I didn’t just come out and say it as prominently and plainly as possible:
There is no valid reason anyone should be buying Motorola Android devices in 2026. None.
It’s a shame, too, ’cause Motorola has a heck of a history within Android and the mobile realm in general. And, to its credit, the company does still make some impressive-looking and at times quite interesting hardware.
But the compromises that come with that package are just too serious and consequential to be forgiven. That’s been the case for some time now, truth be told — but with yet another facepalm-inducing infraction being added onto the list now, it’s time to say it loud and clear:
Please stop buying Motorola Android phones. And please join me in telling everyone you know the same thing.
Trust me: You’ll be doing them a major favor. And here, with no punches pulled and absolutely no sugarcoating, is exactly why.
[Get level-headed knowledge in your inbox with my free Android Intelligence newsletter — three new things to try every Friday and tons of other tasty treats.]
The Motorola Android compromise: Part I
I won’t beat around the bush: The most pressing reason Motorola Android phones are completely inadvisable to buy is the reason that’s been present for the longest — and that’s the company’s complete and utter disregard for even minimally acceptable post-sales software support.
It’s something I’ve noted in my data-based Android Upgrade Report Cards for more years than I can even remember at this point, and it’s almost comically consistent: Year after year, upgrade cycle after upgrade cycle, Motorola simply does not give a damn about investing the time or the money to bring current Android versions to its existing customers in anything close to a timely manner. Once you’ve forked over your phone and put away your wallet, good luck: You’ll be lucky if you get a single software update from Motorola after that, half a year to a year after the fact — and you almost certainly won’t hear a single peep from the company about the progress (or lack thereof) at any point along the way.
Motorola has managed to score an almost impressive number of back-to-back “F” scores on my annual analyses; no other Android device maker even comes close to that record. And lest you think this is purely about pokiness in providing polish and surface-level progress, remember that practically every Android software update is packed with critically important changes around privacy, security, and performance — and the way apps are able to interact with both your data and your hardware.
Running outdated software isn’t just dangerous — it’s downright irresponsible, especially if you’re a professional using your phone for business purposes but even if you’re just a regular ol’ schmoe focused purely on personal stuff. No one who understands a thing about security would ever recommend that, and that’s exactly what you’re signing up for anytime you buy a Motorola-made device.
So that’s part one, and that’s the biggest problem with Motorola’s Android products. But it isn’t the end of this tale nor the reason I was finally moved to write this missive, with the hopes that it’d eventually reach any Android-interested phone-buyers with Motorola on their minds.
Motorola’s more recent Android offenses
All update-related issues aside, the problem with Motorola’s Android products is that they make all sorts of compromises that are all about lining Motorola’s pockets at the expense of your experience.
The most recent example and the straw that broke the Android columnist’s (increasingly creaky) back is the new discovery that Motorola had seemingly been indirectly hijacking the Amazon app on its devices and sneakily injecting an affiliate code into links. The end result of such actions, according to observations published this week, is generating unearned revenue from your day-to-day purchases.
That’s an underhanded and shady-seeming practice, to say the very least. It just feels icky and ethically reckless. And clearly, what was demonstrated was intended to go unnoticed, which is always a pretty apparent sign in my mind that someone’s doing something shifty.
Following the discovery and subsequent outcry, Moto released a statement saying that the behavior was “unintended” and the result of its partnership with a company called Device Native. According to Moto, it had teamed up with that organization to develop “an app search and suggestion experience for the Moto App Launcher.” You can choose to interpret that how you will, but the reality is that Device Native is a company that exists to inject personalized, native-seeming ads directly into the core Android software experience, as its website plainly establishes — with “no user opt-in required,” allowing for easier “scale” of “monetization globally.”
On some level, at least, Motorola evidently decided to work with this company and integrate its ad technology into the Android experience on its phones. Regardless of whether the Amazon code injection was truly deliberate, which organization caused it to happen, and who was or wasn’t aware of the actions, Motorola opted to place this ad-serving system into the phones it was selling and to allow the company behind it to exert this kind of control over its customers’ experiences — as well as, one would imagine, likely leaning on it for other forms of invasive system-level ad integration.
And sure, maybe Moto will back down from this practice and perhaps even distance itself from the partnership entirely if the outrage grows loud enough. But does someone stopping a shady-seeming practice simply because they got caught and people complained make for the kind of company you want to trust in general?
It’s similar to the way Moto lards up its devices with so much preinstalled bloatware that you actually have to fight to get through it or — Goog forbid — remove it and reclaim the product you paid hundreds of dollars to purchase. Heck, even the company’s top-of-the-line, nearly $2,000 folding Razr Fold phone is guilty of this sin, and that’s just embarrassing for a device of that price and caliber.
Even with Motorola’s lower-level phones, though, we’re talking about devices that often cost $500 or close to that. These aren’t bottom-of-the-barrel, heavily subsidized garbage gadgets. You could get one of Google’s Pixel 10a phones for that same price or often even less — without any of the bloatware, the link-hijacking and potential ad-injecting shenanigans, or the unforgivable software support failures. You’d get a full seven years of guaranteed timely and reliable software updates, from major Android versions to monthly security patches and the quarterly feature drops that accompany those. And that’s to say nothing of the superior camera experience and other assorted advantages.
You could go with one of Samsung’s midrange models, too, imperfect as those are in their own ways, and it’d still be a massive step up from the Motorola madness.
We’ve reached a point where there really is just no comparison — and, again, no reason why anyone should be buying a Motorola phone anymore. The issue, unfortunately, is that most of the people who are buying Moto devices are the same people who aren’t reading columns like these. They’re the people who waltz into a carrier store, see whatever model is featured on the shelf or pushed by a commission-earning, partnership-promoting salesperson, and walk out with whatever caught their eye or had the best promotional pricing on that particular day.
Make no mistake about it: These types of devices give Android a bad name and propagate the myth of the entire platform being a second-rate dumping ground for “folks who can’t afford iPhones.” Android is so much more and so much better than that. You deserve so much better than that.
Plain and simple, this isn’t the Motorola of yesterday. At this point, there’s no excuse — and no reason to keep setting yourself up for failure when so many better options exist.
Say goodbye, Moto. And make sure everyone you know who won’t be reading this column knows why they should do the same.
Google’s shiny new Android 17 update may be on the brink of making its way out into world, but one of the most consequential Android notification upgrades I’ve seen in ages is actually available for anyone, on any device, this instant.
It’s one of those things you don’t even realize is missing — and awkwardly has been, all this time — until you have it in front of you and see just how helpful and at times even invaluable it is.
And that’s the ability to have any or all of your notifications saved and restored whenever you restart whatever Android device you’re using — so that nothing important gets awkwardly tossed aside, lost, and forgotten, likely without your ever even noticing or being aware of what you’ve missed.
How many potentially important pending alerts have you lost as a result of that reboot trash chute? I couldn’t even begin to count, myself, and am slightly terrified to think of the answer. But with this easy new improvement in place, it’ll never happen again.
And best of all? It’ll take you roughly two minutes, once, to set up and then forget about and just know it’s working on your behalf from that moment forward.
Lemme show ya how.
[Keep the off-the-beaten-path knowledge coming with my free Android Intelligence newsletter — three new things to try every Friday and my Android Notification Power-Pack as a special welcome bonus!]
Your new Android notification safety net
The secret sauce that makes this sorcery possible comes not from Google itself but from a crafty independent developer who’s been expanding our Android notification smarts for many a moon now.
Whether you already have BuzzKill on your device or this is your first time encountering it, though, it’s well worth your while to take note of this new capability that snuck into the app not long ago.
First, a quick primer/refresher on what BuzzKill is, in case you aren’t already familiar: BuzzKill is essentially a way to create Gmail-like filters for your Android notifications. You use it to create simple custom rules for what happens when different types of notifications arrive — in an intuitive “if this, then that”-style form — with all kinds of interesting and advanced options for making your alerts more effective.
The latest addition to the app is an experimental option called, appropriately enough, “Restore after reboot.” And it does exactly what you’d expect: Anytime your device restarts, it automatically swoops in to save any active notifications that fit the parameters you select and then instantly restores ’em back into active status once your phone is back up and running.
Without such a system in place, any notifications that you either hadn’t yet looked at or maybe had glanced at and left pending as a reminder to deal with later would more often than not just vanish entirely — and you’d have no easily visible record of their presence or any real indication that they’d been there at all. That’s a dangerous recipe for forgetting something important, whether it’s an email you intended to engage with, a Slack message you needed to acknowledge, or even a task of some sort that had popped up for you to ponder.
The beauty of the BuzzKill approach to fixing this is that it really is a “set it and forget it” sort of system: You just create whatever rule you want now, get it up and running, and then rest easy knowing it’ll always find and restore any active notifications anytime your device restarts — as Android itself should but for whatever reason does not.
2 minutes to auto-restored Android notifications
All right — here are the specific steps to getting your new notification safety net in place:
The app costs four bucks as a one-time purchase, which — believe me — is nothing compared to the ongoing value it’ll give you with this and its many other notification-enhancing possibilities.
It doesn’t require any unusual permissions, doesn’t collect any form of data from your phone, and doesn’t have any manner of access to the internet — meaning it’d have no way of sharing your information even if it wanted to.
Once you’ve gone through the app’s initial setup and made your way to its main screen, tap on the circular button in the lower-right corner of the screen to create a new rule.
On the screen that comes up next, consider which specific sorts of notifications you want to have restored whenever your device restarts.
You could always start with any and all notifications and then go back in to refine and limit the rule more once you see how it works. You might eventually want to ask it to avoid restoring alerts from certain low-priority apps — like, say, Google Photos — so that it doesn’t bother bringing back stuff that you don’t actually need.
If/when you want to create any such restrictions, tap the text that says “any app” to change which apps will be included and/or tap the text that says “contains anything” if you want to restrict based on what specific text a notification does or doesn’t include.
If you don’t want to create any limitations and just want all of your active notifications to be restored, at least to start, leave those lines alone and mosey on down to our next step.
BuzzKill’s simple “if this, then that” formatting gives you lots of flexibility with how and when your rule works.
JR Raphael, Foundry
Tap the line that says “do nothing” and scroll down to find the “Restore after reboot” option. It’ll be toward the bottom of the list, within the “System actions” section.
The “Restore after reboot” action is described as experimental, but it seems to work quite well in my experience so far.
JR Raphael, Foundry
Tap that, then tap “Pick action” to confirm.
And last but not least, tap “Save rule” to, y’know, save your rule and set it into action.
The BuzzKill notification restoration equation, in its simplest possible form.
JR Raphael, Foundry
You should then see the rule showing up as active and running on the main BuzzKill screen.
Notification restoration — active and ready to spring into action whenever your phone restarts.
JR Raphael, Foundry
And that really is all there is to it: Whenever your phone next restarts, any notifications that were visible and active at the time of the restart should just show back up via BuzzKill as soon as things boot back up. If you want to get fancy, you could even make certain especially important notifications “sticky” in general, so that if you inadvertently swipe ’em away while your phone is running normally, they’ll automatically come right back even in that scenario.
It’s not the flashiest feature you’ll see this year, and it doesn’t have any whizbang AI shenanigans to make it seem headline-worthy by current-day standards. But it will work and quite possibly be one of the most practical, actually helpful additions you make to your phone all year — even if and arguably especially if you only think about it once in a great while, when you notice it working its magic and saving you from losing something significant.
Discover even more life-enhancing Android treasures with my free Android Intelligence newsletter— three new things to try every Friday and my free Android Notification Power-Pack today.
Login
