How to Secure Windows Bluetooth Access

Difficulty
Intermediate
Tested on
Windows 11 Build 22631
You will need
Administrator account access

Step by step

  1. 1 min

    Disable device discoverability

    Open Settings and navigate to Bluetooth & devices. Select Devices, then expand Device settings. Set Bluetooth devices discovery to Default to prevent your computer from broadcasting its presence to unknown peripherals.

    Note: Setting this to Advanced exposes your device to all nearby Bluetooth signals.
  2. 2 min

    Audit paired peripherals

    Within Bluetooth & devices, review the list of active connections. Click the ellipsis icon next to any unrecognized or legacy device and select Remove device to terminate its system-level access permanently.

  3. 2 min

    Apply Group Policy restrictions

    Press Win + R, type 'gpedit.msc', and press Enter. Navigate to Computer Configuration > Administrative Templates > Bluetooth > Bluetooth Settings. Double-click Allow Bluetooth and select Disabled to block unauthorized radio usage across the system.

    Note: This policy change requires a system restart to take effect.
  4. 1 min

    Toggle radio power state

    Access the Action Center by pressing Win + A. Toggle the Bluetooth icon to Off when the radio is not in use to physically minimize the attack surface of your wireless controller.

    Note: Turning off the radio is the most effective defense against proximity-based exploits.
  5. 2 min

    Check device manager drivers

    Right-click the Start button and select Device Manager. Expand Bluetooth, right-click your Bluetooth adapter, and select Properties. Ensure the driver is up to date and verify that no unauthorized virtual Bluetooth enumerators are active in the list.

    Note: Win + X