Hardware Ocean

Every time you browse the web, post on social media, sign up for a service, or even just carry your phone around, you leave behind a trail of data. Over years, this trail builds into what is called your digital footprint: a detailed record of your habits, relationships, location history, purchases, and opinions. A digital detox is a deliberate effort to step back from constant online activity, while reducing your digital footprint means actively shrinking the amount of personal data that exists about you online. These two goals often go hand in hand, since spending less time online naturally slows the growth of your footprint, and cleaning up old data can make time online feel lighter and less overwhelming.

What Is a Digital Footprint

Your digital footprint is made up of two main types of data.

Active Footprint

This is data you knowingly and intentionally share, such as social media posts, comments, photos, reviews, forum posts, and information you enter into online forms.

Passive Footprint

This is data collected about you without direct input, such as your IP address, browsing history, location data, device information, and behavioral tracking through cookies and analytics tools. Passive data collection often happens silently in the background as you use apps and websites.

Together, these two types of data can paint a surprisingly complete picture of who you are, where you live, what you buy, who you know, and even your daily routine.

Why Reduce Your Digital Footprint

1. Privacy: Less data available online means fewer opportunities for companies, advertisers, or bad actors to build a profile on you.
2. Security: A smaller footprint reduces your exposure to identity theft, phishing, and social engineering attacks that rely on publicly available personal information.
3. Reputation management: Old posts, photos, or accounts can resurface at inconvenient times, affecting job applications, relationships, or your public image.
4. Mental well-being: Constant connectivity and the awareness of being tracked or watched can contribute to anxiety and stress. Reducing your footprint often comes with reduced screen time as a side effect.

Why Take a Digital Detox

Beyond privacy, a digital detox addresses the behavioral and psychological side of technology use. Many people report feeling more present, focused, and less anxious after intentionally reducing time spent on phones, social media, and constant notifications. A detox is not necessarily about quitting technology altogether, but about creating a healthier, more intentional relationship with it.

Step 1: Audit Your Digital Presence

Before you can reduce anything, you need to understand what currently exists. Start by taking inventory.

1. Search your full name, past usernames, phone number, and email address in a search engine to see what appears publicly.
2. List every online account you can remember, including old social media profiles, forums, shopping sites, and apps you no longer use.
3. Check your email inbox for old sign-up confirmations, which often reveal forgotten accounts.
4. Use a password manager's built-in account list, if you have one, since it often reveals accounts you had forgotten about.

Step 2: Delete or Deactivate Unused Accounts

Old, unused accounts are a major contributor to your digital footprint, especially if they still hold personal data. For each account you no longer use, log in and look for account deletion or deactivation options, usually found in account or privacy settings. If you cannot find a straightforward delete option, search "[service name] delete account" for instructions, as some companies intentionally make this process difficult. For accounts you cannot fully delete, at minimum remove personal information such as your real name, birthdate, address, and profile photo before abandoning them.

Step 3: Clean Up Social Media

1. Review old posts, photos, and comments, deleting anything that reveals sensitive personal information such as your address, workplace, children's names or schools, or travel plans.
2. Set profiles to private wherever possible, limiting visibility to approved followers only.
3. Remove location tags from old posts and disable automatic location tagging for future ones.
4. Review tagged photos and untag or request removal of ones that reveal more than you're comfortable with.
5. Trim your friends or followers list to people you actually know and trust.
6. Turn off features that let search engines index your profile.

Step 4: Remove Yourself from Data Broker Sites

Data brokers are companies that collect and sell personal information, often compiling details like your home address, phone number, relatives, and even income estimates into publicly searchable profiles. Removing your information from these sites is one of the most impactful steps you can take.

1. Search for your name alongside terms like "people search" to identify which broker sites list your information.
2. Visit each site's opt-out page and follow their removal process, which usually requires submitting a request with your name and the specific profile URL.
3. Keep in mind that some brokers repopulate your data periodically, so occasional repeat removal requests may be necessary.
4. Consider a data removal service if you want to automate this process across many broker sites at once, though this comes at a cost.

Step 5: Limit Ongoing Data Collection

Browser Habits

1. Use a privacy-focused browser or adjust your current browser's privacy settings to block third-party cookies and trackers.
2. Install a reputable ad and tracker blocking extension.
3. Regularly clear cookies and browsing history, or use private browsing mode for sensitive searches.
4. Switch to a privacy-respecting search engine that does not log your search history.

App Permissions

1. Review app permissions on your phone and revoke access to location, contacts, microphone, or camera for apps that do not need them to function.
2. Disable ad personalization and tracking settings in your phone's privacy menu.
3. Uninstall apps you rarely use, since each installed app is a potential data collection point.

Email and Newsletters

1. Unsubscribe from newsletters and mailing lists you no longer read.
2. Consider using alias or masked email addresses when signing up for new services, so your real email stays private.

Step 6: Adjust Your Online Habits Going Forward

1. Think before sharing personal details publicly, including your location, routine, or identifying information about family members.
2. Use strong, unique passwords and enable two-factor authentication to protect the accounts you keep.
3. Be selective about which apps and services you sign up for, and read privacy policies for anything that will handle sensitive data.
4. Regularly repeat your digital footprint audit, since new accounts and data traces accumulate over time even with good habits.

Step 7: Take a Structured Digital Detox

If your goal includes reducing screen time and constant connectivity, not just data exposure, consider structuring an actual detox period.

1. Set clear boundaries: Decide on specific times or days when you will not use your phone or check social media, such as during meals or the first hour after waking up.
2. Turn off non-essential notifications: Most notifications are designed to pull your attention away; disabling them reduces the urge to check your phone constantly.
3. Use app timers or grayscale mode: Many phones offer built-in tools to limit app usage or make the screen less visually engaging, reducing compulsive checking.
4. Designate phone-free zones: Keep phones out of bedrooms or away from the dinner table to create device-free spaces in your daily life.
5. Replace the habit: Identify what you typically do during idle moments, such as scrolling, and replace it with a different activity like reading, walking, or a hobby.
6. Try a longer break: Periodically take a full day, weekend, or week away from non-essential apps and social media to reset your relationship with technology.

Balancing Privacy with Practicality

It's worth noting that eliminating your online presence entirely is nearly impossible, and for most people, not even desirable. Many services, from banking to work communication, require some level of online engagement. The goal of reducing your digital footprint is not total disappearance, but intentional control: sharing what you choose to share, limiting unnecessary data collection, and cleaning up the parts of your online history that no longer serve you or that pose unnecessary risk.

Conclusion

A digital detox and reducing your online footprint work together to give you more control over your privacy, security, and mental well-being. Start by auditing what currently exists about you online, then systematically clean up old accounts, tighten your social media privacy, and remove yourself from data broker listings. From there, build habits that limit ongoing data collection and consider structured breaks from constant connectivity. None of this needs to happen overnight. Even small, consistent steps toward intentional technology use and data minimization can meaningfully shrink your digital footprint and give you back a sense of control over your online life.

A Virtual Private Network, commonly known as a VPN, is a technology that creates a secure, encrypted connection between your device and the internet. Instead of your data traveling directly and openly to websites and services, it first passes through a VPN server, which masks your real IP address and encrypts your traffic along the way. This makes it much harder for outsiders, including internet service providers, hackers on public networks, or even governments, to see what you are doing online.

How a VPN Works

When you connect to a VPN, your device establishes an encrypted tunnel to a server operated by the VPN provider. All your internet traffic is routed through this tunnel before reaching its final destination. To anyone monitoring the network, your traffic appears to come from the VPN server rather than your actual device. This has two major effects: your identity and location are hidden, and your data is protected from being read by anyone intercepting it along the way.

The process generally works like this:

1. You open your VPN application and connect to a server, often choosing a location such as a country or city.
2. The VPN client on your device encrypts your outgoing data.
3. The encrypted data travels through your internet connection to the VPN server.
4. The VPN server decrypts your data and forwards it to the website or service you are trying to reach.
5. Responses follow the same path back, encrypted from the VPN server to your device.

Why People Use VPNs

Privacy and Security

VPNs prevent your internet service provider from seeing which websites you visit. They also protect your data from being intercepted on unsecured networks, such as public Wi-Fi at cafes, airports, or hotels, where attackers can otherwise eavesdrop on unencrypted traffic.

Bypassing Geographic Restrictions

Many streaming services, news sites, and other platforms restrict content based on your location. By connecting to a VPN server in a different country, you can appear to be browsing from that location and access content that would otherwise be unavailable.

Avoiding Censorship

In countries with heavy internet censorship, VPNs allow people to access blocked websites and services by routing their traffic through servers located outside the censored network.

Safer Remote Work

Businesses often use VPNs to let employees securely access internal company networks and resources from outside the office, as if they were physically connected to the company's local network.

Avoiding Price Discrimination and Tracking

Some online retailers and services adjust pricing or ads based on your apparent location or browsing habits. A VPN can help reduce this kind of tracking-based targeting.

What a VPN Does Not Do

It's important to understand the limits of a VPN. A VPN does not make you completely anonymous online. Websites can still track you through cookies, browser fingerprinting, or account logins. A VPN also does not protect you from malware, phishing attacks, or viruses; that requires separate security software. Additionally, a VPN does not make illegal activity legal, and using one does not guarantee complete safety if you engage in risky online behavior.

Types of VPNs

Personal or Consumer VPNs

These are subscription services designed for individual users who want privacy, security, and the ability to change their apparent location. This is the most common type discussed when people talk about "getting a VPN."

Business or Corporate VPNs

These are set up by organizations to give employees secure access to internal systems, often called remote access VPNs or site-to-site VPNs, which connect entire office networks together.

Mobile VPNs

Designed to maintain a stable connection even as a device switches between networks, such as moving from Wi-Fi to cellular data, which is useful for mobile professionals.

How to Choose a VPN

With dozens of VPN providers on the market, choosing the right one can be overwhelming. Here are the key factors to consider.

1. Privacy Policy and Logging Practices

Look for a provider with a clear, published no-logs policy, meaning they do not record your browsing activity, connection timestamps, or IP addresses. Ideally, this policy should have been verified by an independent third-party audit. Also check where the company is legally based, since some countries have laws that could require data retention or sharing with authorities.

2. Encryption Standards and Protocols

A trustworthy VPN should use strong, modern encryption, typically AES-256, along with secure protocols such as OpenVPN, WireGuard, or IKEv2. WireGuard in particular has become popular for offering strong security with better speed than older protocols.

3. Server Network

Consider the number and location of servers offered. A larger, more geographically diverse server network gives you more options for bypassing restrictions and generally results in better speeds, since you can connect to a server closer to your physical location.

4. Speed and Performance

Encryption and rerouting your traffic can slow down your internet connection. Look for reviews and independent speed tests to gauge how much a provider affects browsing, streaming, and downloading speeds. This matters especially if you plan to stream video or play online games.

5. Device Compatibility

Make sure the VPN offers apps for all the devices and operating systems you use, such as Windows, macOS, Linux, iOS, Android, and possibly browser extensions or router-level support. Check how many simultaneous device connections are allowed under one subscription.

6. Kill Switch Feature

A kill switch automatically blocks your internet connection if the VPN connection drops unexpectedly, preventing your real IP address and unencrypted data from being exposed accidentally.

7. Streaming and Torrenting Support

If you plan to use a VPN for streaming services, check whether the provider reliably works with platforms like major streaming sites, since many services actively block known VPN server IP addresses. If you plan to torrent, confirm the provider explicitly allows peer-to-peer traffic.

8. Price and Subscription Terms

Compare pricing plans, but be cautious of free VPNs, since many free services make money by logging and selling user data, showing ads, or offering limited, slower servers. Paid VPNs typically offer better security and performance. Look for providers offering a money-back guarantee so you can test the service risk-free.

9. Customer Support

Reliable customer support, including live chat, detailed setup guides, and responsive troubleshooting, can be valuable, especially if you run into connection issues or need help configuring the VPN on a specific device.

10. Additional Security Features

Some VPNs bundle extra features such as ad and tracker blocking, split tunneling (which lets you choose which apps use the VPN and which do not), multi-hop connections that route traffic through multiple servers, and dedicated IP addresses.

Common Mistakes to Avoid

• Choosing a free VPN without researching how it makes money.
• Ignoring the provider's jurisdiction and legal obligations around data retention.
• Assuming a VPN alone provides complete anonymity or protection from malware.
• Not testing the service during a trial or refund period before committing long-term.
• Overlooking whether the VPN keeps connection or usage logs despite marketing claims.

Conclusion

A VPN is a valuable tool for protecting your privacy, securing your data on public networks, and accessing content that might otherwise be restricted based on location. However, not all VPNs are created equal. Choosing the right one means looking closely at the provider's privacy policy, encryption standards, server network, speed, device support, and additional security features. Taking the time to research and compare providers, rather than picking the first one you see advertised, will help ensure you get a service that actually meets your needs for security, performance, and reliability.

Windows includes a built-in command-line utility called cipher.exe that most users have never touched. Its primary job is to manage encryption on NTFS volumes, particularly the Encrypting File System (EFS). However, cipher.exe has a lesser-known but extremely useful feature: the ability to securely wipe deleted data from a drive using the /w switch. This article explains what the cipher /w:c command does, how it works, when to use it, and what to watch out for.

What Is cipher.exe?

cipher.exe is a command-line tool that has shipped with Windows since Windows 2000. It was originally designed to display or alter the encryption status of files and folders on NTFS drives, working hand-in-hand with the Encrypting File System (EFS). Over time, Microsoft added additional functionality to the tool, including the /w switch, which allows it to overwrite unused disk space so that previously deleted files cannot be easily recovered.

What Does the /w Switch Do?

Normally, when you delete a file in Windows and empty the Recycle Bin, the file's data is not actually erased from the disk. Instead, the operating system simply marks the space that file occupied as available for reuse. The actual bits and bytes of the file often remain on the disk until they are overwritten by new data. This means that with the right recovery software, deleted files can frequently be restored, sometimes long after they were "deleted."

The /w switch instructs cipher.exe to overwrite all of the free (unused) space on a specified drive. It does not touch any existing files that are still present and active on the drive. Instead, it targets only the space that Windows considers empty, filling it with meaningless data so that any fragments of previously deleted files are destroyed and become unrecoverable through normal or forensic recovery methods.

Breaking Down the Command: cipher /w:c

The full syntax typically looks like this:

cipher /w:C:\

Here is what each part means:

• cipher - invokes the cipher.exe utility.
• /w - tells cipher to wipe free space rather than perform its usual encryption-related tasks.
• :C:\ (or sometimes written as /w:c) - specifies the drive or path where the wiping should occur. In this example, it targets the C: drive, which is usually the main system drive in Windows.

You can substitute C:\ with any other drive letter, such as D:\ or E:\, to target a different volume. You can also point it at a specific folder path rather than an entire drive, in which case cipher will wipe the free space within that portion of the volume.

How the Wiping Process Works

When you run cipher /w on a drive, the tool performs its work in three distinct passes over the free space:

1. First pass: All free space is overwritten with zeroes (0x00).
2. Second pass: All free space is overwritten with ones, represented as 0xFF.
3. Third pass: All free space is overwritten with random, pseudo-random data generated by the system.

This three-pass approach is designed to make it significantly more difficult for data recovery tools or forensic techniques to reconstruct any information that used to occupy that space. While it is not necessarily equivalent to military-grade wiping standards used by dedicated data destruction software, it is generally considered adequate for everyday privacy needs.

Why Would You Use This Command?

There are several common reasons someone might choose to run cipher /w:c:

• Preparing to sell, donate, or dispose of a computer: Simply deleting files and formatting a drive is often not enough to prevent recovery of sensitive documents, photos, or credentials. Wiping free space adds a strong layer of protection.
• Removing traces of sensitive files: If you previously stored confidential documents, tax records, or personal data on a drive and later deleted them, the underlying data may still be recoverable. Running cipher /w helps ensure those remnants are destroyed.
• Compliance and organizational policy: Some workplaces or regulatory environments require that decommissioned drives have their free space wiped before reuse or disposal.
• General privacy hygiene: Privacy-conscious users may periodically wipe free space as a precaution, especially after uninstalling software that may have left cached or temporary files behind.

How Long Does It Take?

The time required to complete a cipher /w operation depends heavily on several factors:

• The total size of the drive being targeted.
• How much free space actually exists on that drive (more free space means more data to overwrite).
• The type of storage device: mechanical hard drives (HDDs) are typically much slower than solid-state drives (SSDs).
• The overall speed and workload of the system while the command runs.

On a large drive with significant free space, this process can take anywhere from several minutes to several hours. Because three full passes are performed, it is considerably slower than a simple format or file deletion.

Important Considerations Before Running the Command

Administrator Privileges

To run cipher /w successfully, you generally need to open Command Prompt or PowerShell with administrator privileges. Without elevated permissions, the command may fail or be unable to access certain areas of the disk.

SSD Considerations

On solid-state drives, the effectiveness of free-space wiping is more complicated than on traditional hard drives. SSDs use wear-leveling algorithms and a process called TRIM, which already manages how data is marked and physically stored across memory cells. Because of this, tools like cipher /w may not overwrite every physical location where deleted data once resided, and the practical benefit can be reduced compared to HDDs. For SSDs, manufacturers often provide their own secure erase utilities that may be more appropriate.

It Only Affects Free Space

It is important to understand that cipher /w does not encrypt, modify, or delete any of your current, active files. It exclusively targets space that the file system already considers unused. If you want existing files gone as well, you must delete them first before running the wipe.

Not a Replacement for Full Disk Encryption

While cipher.exe is related to EFS, using /w does not encrypt your entire drive. For full-volume protection against theft or unauthorized access, tools like BitLocker are more appropriate. cipher /w is specifically about erasing traces of deleted data, not about ongoing encryption of active files.

Step-by-Step: Running cipher /w:c

1. Click the Start menu and search for "Command Prompt" or "PowerShell."
2. Right-click the result and choose "Run as administrator."
3. When prompted by User Account Control, click "Yes" to allow elevated access.
4. Type the following command and press Enter:

cipher /w:C:\

5. Wait for the process to complete. You will see progress indicators in the console window as each of the three passes runs.
6. Once finished, the command prompt will return to a normal prompt, indicating the operation is complete.

Alternative and Related Tools

While cipher /w is built into Windows and requires no additional downloads, there are other tools that perform similar or more advanced secure-erase functions:

• SDelete - a Sysinternals tool from Microsoft that offers more configurable overwrite passes and can also securely delete specific files, not just free space.
• Third-party disk wiping utilities - many offer additional standards such as DoD 5220.22-M or Gutmann-style multi-pass wiping, along with support for wiping entire drives, including the operating system itself, via bootable media.
• Manufacturer secure erase tools - particularly useful for SSDs, since they can issue low-level ATA Secure Erase commands that work with the drive's own firmware.

Common Mistakes to Avoid

• Forgetting to delete files first: Remember that cipher /w only wipes free space, so any files you still want gone must be deleted (and the Recycle Bin emptied) before running the command.
• Interrupting the process: Because the operation can take a long time, some users cancel it partway through. This can leave free space partially overwritten and does not guarantee full protection.
• Assuming it wipes the entire drive: The command does not touch existing files or format the drive; it is strictly for unused space.
• Using it as the sole method for SSD sanitization: As noted, SSD wear-leveling can limit its effectiveness, so a dedicated SSD secure-erase tool may be a better choice in those cases.

Conclusion

The cipher /w:c command is a simple yet powerful built-in Windows tool for permanently erasing remnants of deleted files from unused disk space. By performing three separate overwrite passes, it significantly reduces the chances that deleted data can be recovered through common forensic or file-recovery techniques. While it is not a substitute for full-disk encryption or specialized SSD sanitization tools, it remains a valuable, no-cost option for anyone looking to protect their privacy before disposing of a computer, selling a hard drive, or simply cleaning up sensitive traces left behind by everyday use.

If you've ever gone digging through Windows security tools, you may have stumbled across a small, unassuming file called msert.exe. It doesn't install itself, doesn't sit in your system tray, and doesn't show up in your Start menu — yet it's one of Microsoft's oldest and most useful on-demand security tools. This article covers what MSERT actually is, how it works, when you should use it, and how it compares to the antivirus protection already built into Windows.

What Does MSERT Stand For?

MSERT stands for Microsoft Support Emergency Response Tool, and it's the executable name behind the program more commonly known as the Microsoft Safety Scanner. The name reflects its original purpose: a tool Microsoft support staff could hand to customers, or that customers could download themselves, to deal with an active or suspected malware infection on the spot — no installation, no setup wizard, just a single portable file you run and let do its work.

What Is the Microsoft Safety Scanner?

The Microsoft Safety Scanner is a free, standalone virus and malware scanning tool built by Microsoft for Windows PCs. Its job is narrow but important: scan a system for viruses, spyware, and other potentially unwanted software, and help remove or reverse whatever it finds. Unlike Microsoft Defender, which runs continuously in the background, MSERT is a manual, on-demand tool. You download it, run it when you need it, and it does not stay resident on your system afterward.

Because it requires no installation, MSERT is essentially a portable application. You can run it directly from a downloaded file, or even carry it on a USB drive and run it from removable media on a machine that may not have internet access. This portability is one of its most useful features — more on that below.

How MSERT Differs From Windows Defender

It's easy to assume MSERT is a replacement for Microsoft Defender (the antivirus solution built into Windows 10 and Windows 11), but that's not the case, and Microsoft is explicit about this. The two tools serve very different roles:

• Windows Defender / Microsoft Defender Antivirus runs in real time, continuously monitoring your system, automatically updating its threat definitions via cloud intelligence, and blocking threats as they appear.
• Microsoft Safety Scanner (MSERT) only scans when you manually launch it. It does not run in the background, does not offer real-time protection, and does not automatically update itself.

Because of this, MSERT is best thought of as a second opinion scanner — a tool you reach for when you suspect something has slipped past your primary antivirus, not a tool that replaces one.

Why Does MSERT Expire After 10 Days?

One of the more distinctive design choices behind the Microsoft Safety Scanner is that it deliberately stops working ten days after it's downloaded. This isn't a bug — it's intentional. Malware signatures and threat definitions change constantly, sometimes daily, so a scanner running on stale definitions could give a false sense of security by missing brand-new threats. By forcing the tool to expire, Microsoft ensures that anyone using it downloads a current version with up-to-date detection definitions, rather than relying on an old copy that may no longer recognize the latest malware.

The practical takeaway is simple: always grab a fresh copy of MSERT immediately before you intend to use it, rather than keeping an old download around for "just in case."

How to Download and Run Microsoft Safety Scanner

Getting started with MSERT is straightforward. Here's the general process:

1. Download the current version directly from Microsoft's official site, choosing the 32-bit or 64-bit version that matches your system.
2. Right-click the downloaded msert.exe file and select "Run as administrator." Administrator rights are needed because the scanner needs deep access to the file system to detect and remove threats.
3. Accept the license agreement when prompted, then proceed to the next step of the wizard.
4. Choose a scan type (see below) and let the tool run. Depending on the scan type and the size of your drive, this can take anywhere from a couple of minutes to well over an hour.
5. Review the results. If threats are found, MSERT will attempt to remove or quarantine them and report what action was taken.

Because MSERT doesn't install itself in the traditional sense, there's nothing to uninstall afterward — you simply delete the downloaded msert.exe file once you're done with it.

Scan Types

Microsoft Safety Scanner typically offers a choice of scan depth, letting you balance thoroughness against time:

• Quick scan — checks the areas of your system most commonly targeted by malware, such as running processes and common startup locations. Fastest option, good for a routine check.
• Full scan — examines every file on every attached drive. Much more thorough, but can take a long time on large or heavily-used drives.
• Customized scan — lets you specify particular folders or drives to scan, useful if you already have a good idea of where a suspicious file might be.

When Should You Actually Use MSERT?

Since it isn't meant to replace your everyday antivirus, MSERT is best reserved for specific situations:

• As a second opinion. If your PC is behaving strangely — running slowly, showing unexpected pop-ups, or exhibiting other signs of infection — even though your regular antivirus reports a clean bill of health, MSERT can catch something your primary protection may have missed.
• When malware is blocking installation of other tools. Some particularly stubborn malware actively prevents you from installing new antivirus software. Because MSERT requires no installation at all, it can sometimes get around this kind of interference.
• On offline or air-gapped machines. If an infected PC can't safely be connected to the internet, you can download MSERT on a separate, clean computer, transfer it over by USB, and run it locally on the affected machine.
• As a periodic sanity check. Some users simply like running an independent scanner from time to time as an extra layer of reassurance, even without specific symptoms of infection.

Where to Find MSERT's Scan Results

After a scan finishes, MSERT writes a detailed log of what it found and what actions it took. This log is stored locally at:

C:\Windows\debug\msert.log

This is useful not just for your own review, but also if you're troubleshooting with IT support or trying to confirm exactly what was detected and removed during a scan.

MSERT vs. MSRT: Don't Confuse the Two

MSERT is frequently confused with a similarly-named Microsoft tool: the Malicious Software Removal Tool (MSRT). While they sound alike and serve related purposes, they aren't the same thing:

• MSRT is updated and released by Microsoft roughly once a month, targeting a specific, curated list of prevalent and dangerous malware families. It's often delivered automatically through Windows Update and runs in the background as part of routine patching.
• MSERT is a broader, on-demand scanner intended for manual, situational use — you choose when to run it, and it looks for a wide range of malware rather than a short monthly list.

In short: MSRT is a narrow, automatic monthly sweep for known widespread threats, while MSERT is a general-purpose manual scanner you reach for on your own schedule.

Limitations to Keep in Mind

MSERT is a genuinely useful tool, but it's worth understanding its boundaries:

• It offers no real-time protection — it can't stop an infection from happening, only look for one that may already be present.
• It doesn't update automatically, so a copy older than ten days will refuse to run, and even within that window its definitions are only as fresh as the day you downloaded it.
• It's English-language only in most distributions, which can be a limitation for some users.
• Because it's a supplemental tool rather than a full security suite, it lacks features found in comprehensive antivirus products, such as web protection, firewall management, or behavioral monitoring.

A Note on Search Results and Copycat Sites

Because MSERT is a well-known, trusted Microsoft brand name, it has unfortunately attracted a number of low-quality or unrelated websites that use the "MSERT" name to attract search traffic without offering accurate or useful information about the actual tool. When downloading Microsoft Safety Scanner, it's worth sticking to Microsoft's own official domain rather than third-party download sites, both to ensure you get a genuine, unmodified copy of the tool and to avoid the risk of downloading something malicious disguised as a security scanner — which would be a particularly ironic way to end up with malware.

Frequently Asked Questions

Is MSERT safe to use?

Yes — when downloaded from Microsoft's official site, MSERT is a legitimate, safe tool built by Microsoft specifically for malware detection and removal.

Do I need MSERT if I already have Windows Defender?

Not necessarily on a routine basis, since Defender already provides real-time protection. MSERT is most valuable as an occasional second-opinion scan or when you have a specific reason to suspect infection.

Why does MSERT keep expiring?

The 10-day expiration is a deliberate design choice to make sure you're always scanning with current threat definitions rather than an outdated copy.

Can MSERT run without an internet connection?

Yes. Once downloaded, MSERT can be run offline, which is exactly what makes it useful for scanning infected machines that you don't want to connect to the internet.

Does MSERT remove everything it finds automatically?

MSERT will attempt to clean or quarantine detected threats and report its actions in the scan log, though as with any security tool, some particularly persistent or deeply embedded threats may require additional manual steps or specialized removal tools.

Bottom Line

MSERT — the Microsoft Safety Scanner — is a small but genuinely handy tool to keep in your back pocket. It won't replace the always-on protection of Microsoft Defender or a full antivirus suite, and it isn't meant to. What it offers instead is a fast, no-installation-required second opinion you can call on whenever something about your PC doesn't feel right, or when you need to check a machine that can't easily run a full security product. Because it expires quickly and requires no permanent footprint on your system, it's worth knowing about even if you rarely need to actually use it.

If you've priced out a new PC, laptop, or even a game console lately, you've probably noticed something alarming: memory has become one of the most expensive components in any build. What used to be a relatively cheap, commodity part of computing has turned into a genuine budget-buster in 2026.

Just How Bad Is It?

The numbers are stark. DDR5 retail prices hit another record in August 2026, with one widely-tracked index putting prices at roughly 4.9 times what they were just over a year earlier. Even older DDR4 memory — long considered a safe, cheap fallback — hasn't been spared: a 32GB kit that cost $60–$90 back in October 2025 was going for $150–$180 by January 2026, roughly double to triple the price.

On the wholesale side, the picture is just as dramatic. Industry researcher TrendForce estimated that global DRAM contract prices rose 90–95% quarter-over-quarter in the first quarter of 2026 alone, followed by another 58–63% jump in the second quarter. Broader market analysis puts DRAM prices up 171% year-over-year, with DDR5 spot prices quadrupling since September 2025 — a rate of increase that has reportedly outpaced gold.

This isn't confined to desktop PCs, either. The shortage has pushed up the price of laptops, smartphones, and even gaming consoles — Valve's Steam Machine reportedly launched $250–$350 above its originally targeted price because of the memory crunch.

What's Actually Causing This

Unlike past memory shortages, this one isn't a simple case of manufacturers under-investing and demand catching them off guard. The root cause is AI.

Data centers training and running large AI models need enormous amounts of memory — specifically High-Bandwidth Memory (HBM), which sits directly alongside AI accelerator chips like Nvidia's GPUs. Samsung, SK Hynix, and Micron, the three companies that produce nearly all the world's DRAM, have been deliberately shifting factory capacity away from ordinary consumer DDR5 (and NAND flash) toward HBM production, because HBM is dramatically more profitable — commanding roughly three to five times the revenue per wafer compared to standard DDR5, while also consuming about three times the wafer capacity per gigabyte.

Hyperscalers and AI infrastructure projects are the driving force: capital expenditure on AI infrastructure is approaching $600 billion in 2026, up 36% year-over-year, and initiatives like OpenAI's Stargate project alone are estimated to be absorbing a huge share of available memory supply. Analysts at Goldman Sachs forecast a global DRAM shortfall of 4.9% for the year — the widest gap in 15 years — with similar shortfalls in HBM and NAND flash.

In short: manufacturers aren't struggling to keep up with demand — they're choosing where to sell their limited factory capacity, and AI customers are simply outbidding everyone else.

Why This Shortage Is Different From Past Ones

Memory prices have spiked before — notably in 2017–2018 and 2021 — but those were cyclical shortages that resolved once manufacturers ramped up production to meet demand. This time, the situation is structural rather than cyclical. Because AI demand is what's pulling capacity away from consumer memory, and that demand shows no sign of slowing, the normal "prices spike, then manufacturers build more capacity, then prices fall" cycle doesn't apply in the same way. Building new fab capacity takes three or more years, and manufacturers have little incentive to redirect existing capacity back to lower-margin consumer DDR5 while AI demand keeps HBM more profitable.

So When Will Prices Actually Go Down?

The honest answer: not soon, and possibly not back to where they used to be. Here's what the data suggests:

Short term (through late 2026): Prices are still rising, but the rate of increase is slowing. After the brutal 90%+ quarterly jumps earlier in the year, TrendForce's more recent forecasts point to "only" a 10–15% quarter-over-quarter increase in Q3 2026 for DRAM, and 13–18% for contract prices — still an increase, just a gentler one. Analysts note the market is starting to hit affordability resistance, meaning buyers simply can't absorb price hikes at the pace seen earlier in the year.

Medium term (into 2027): Most forecasts don't expect relief until at least the second half of 2026 at the earliest for the worst-hit categories like legacy DDR4, with continued pressure on DDR5 and server memory as AI demand persists. Some industry voices have suggested the supply-demand imbalance could persist well into 2027 as new fab investments take years to come online.

Longer term / possible reset (2027 and beyond): Some analysts sketch out a scenario where all the delayed fab expansion projects come online around the same time in 2027, potentially causing a sudden oversupply and price crash — sometimes described as a "bubble burst" scenario, particularly if AI investment cools or an "AI winter" reduces data center memory demand. But this is speculative, not a confirmed timeline, and depends heavily on whether AI infrastructure spending keeps accelerating.

What This Means for You

• If your current device has enough memory, there's little reason to panic-buy more at today's inflated prices — you'd likely be paying a steep premium for capacity you don't need yet.
• If you genuinely need to buy now (a failing PC, an unavoidable upgrade), expect to pay significantly more than you would have a year ago, and expect prices to keep climbing gradually rather than falling in the near term.
• DDR4 is not a safe harbor. Reduced production of older memory standards means DDR4 has seen steep price increases too, even as some buyers turn to it as a cheaper alternative to DDR5.
• This is a multi-year structural shift, not a blip. Unless AI infrastructure investment slows meaningfully, don't expect memory prices to return to 2024-era levels anytime soon. Planning around "when RAM gets cheap again" may be less useful than budgeting for memory as a persistently more expensive component going forward.

The bottom line: RAM prices are high because AI data centers are outbidding everyone else for the same factories that make your laptop's memory, and that dynamic isn't likely to reverse until either AI demand cools or a wave of new manufacturing capacity comes online — realistically sometime in 2027 at the earliest, and even then, a full return to old price levels is far from guaranteed.

In September 2026, the YouTube channel Gamers Nexus — best known for hardware reviews and testing methodology — released a sprawling, 135-minute investigative report into LG smart TVs that has since rattled the consumer electronics world. Produced alongside the channel Level1Techs and a team of independent security researchers, the investigation dug into what LG's televisions actually do on a home network, and the findings go well beyond the kind of targeted-advertising tracking that smart TV owners have grudgingly come to expect.

The headline claim: audio capture in standby mode

The most explosive finding is that LG TVs may be able to capture audio even when the set looks completely off. Gamers Nexus says its researchers were able to record audio through an LG television while it was in a hibernation state — meaning that even with the TV's own microphone switch disabled, other microphones associated with the device, such as the one built into the remote, might still be active.

The investigation's framing of the scale of this issue produced its most viral number. Extrapolated out, Gamers Nexus put the figure at roughly 216 million "spy TVs" in the United States alone.

A more detailed breakdown of the report clarifies an important nuance in this claim: the TVs aren't necessarily recording while genuinely powered off at the wall. According to that reporting, LG smart TVs can capture microphone audio in standby mode after a remote's power button is pressed — not while the set is truly powered down — and researchers demonstrated audio continuing to be stored even while the TV was disconnected from Wi-Fi, with that audio later retrievable once connectivity resumed. In other words, the concerning behavior isn't that a dead TV is listening — it's that "off" via the remote doesn't mean the microphones and local storage stop working, and audio can sit buffered on the device until it reconnects and uploads.

That distinction has fueled a wave of short-form videos and a trending hashtag online. Clips demonstrating this behavior spread under tags like #unplugthetv, with people posting reaction videos of themselves unplugging their televisions at the wall. The reporting consensus that crystallized around this is blunt: fully unplugging the set from power is the only way to guarantee the hardware is inert, since turning it "off" with the remote — or even pulling the network cable alone — isn't sufficient on its own, because the audio is buffered locally and simply waits for the next reconnection to upload.

Network scanning: mapping your entire household

Beyond audio, the investigation focused heavily on how aggressively LG TVs probe the rest of a home network. Network packet captures reportedly showed the televisions scanning local networks for nearby devices such as phones and smartwatches, and collecting information including location data and nearby Wi-Fi network details — with some of that information transmitted onward to LG Ad Solutions, LG's connected-TV advertising business.

Other outlets that reviewed the report describe a similarly broad sweep. Firmware analysis and packet captures reportedly showed the tested TVs identifying a wide range of devices on the local network — phones, PCs, printers, network switches, and smart-home hardware — while also collecting nearby Wi-Fi network names, signal information, and device identifiers, effectively building a picture of everything else connected in a household.

A separate summary of the same findings adds a further wrinkle: this network mapping isn't limited to moments when the TV is actively streaming. Rather than confining network communications to streaming traffic, the televisions were said to routinely catalog other hardware on the same local network at all times, logging internal IP addresses and unique device identifiers for equipment like smartphones, PCs, printers, and other IoT devices.

Automatic Content Recognition (ACR): watching what you watch

A large part of the story isn't a secret hack — it's LG's own advertising technology working as designed, just far more expansively than most owners realize. Automatic Content Recognition (ACR) is the industry-standard technique smart TVs use to identify what's on screen: it samples what appears on or is heard through the TV, creates a digital fingerprint of that content, and compares it against a reference database to identify programs, ads, and viewing habits.

Gamers Nexus's report argues LG's implementation of ACR is unusually broad in scope, extending well past streaming apps and cable. Investigators found LG was using ACR not only to track viewing habits across streaming platforms and cable, but also to monitor content played through nearly every physical port on the TV — HDMI, USB, ethernet, optical, RCA, and coaxial. That means content from a game console, a Blu-ray player, or even an old cable box plugged into an HDMI port could, in theory, be fingerprinted and logged the same way a Netflix stream would be.

Coverage of the report also notes this practice is not unique to LG — using ACR to track content this way is described as an industry-wide norm among nearly all major smart TV manufacturers, not a problem limited to LG alone. What set LG apart in the investigation, according to multiple outlets, was the sheer volume and specificity of data allegedly being collected and combined with network and device data for advertising purposes.

What LG's own advertising arm says about itself

Perhaps the most unsettling material in the investigation isn't a hacked packet capture at all — it's LG's own marketing. The report reportedly pulled footage from promotional materials produced by LG's ad-sales division, in which representatives describe knowing who is present in an "LG household" and which devices are there. For critics, that framing — a TV manufacturer's advertising unit boasting about household-level visibility into who lives where and what devices they own — is as damning as any technical vulnerability, because it suggests the data collection is a deliberate business strategy rather than an unintended side effect.

Security vulnerabilities on top of the data collection

Separately from LG's intended data-collection features, researchers say they also found genuine security weaknesses in the TVs' software that could make things worse if a set were ever compromised. The investigation reported extensive device and network discovery, ACR tracking, and security weaknesses that could increase the consequences of a compromised television, while noting that some findings concern LG's intended product behavior and others rely on vulnerabilities still being responsibly disclosed to the company.

Reporting on the technical side of the story indicates the team held back the most sensitive exploit details as a matter of standard security practice — full details of the remote-code-execution flaws they found were withheld while disclosure to LG was still underway, in line with typical industry norms.

Not LG's first brush with this kind of criticism

Notably, this wasn't the first time Gamers Nexus had raised alarms about LG's data practices. Earlier in 2026, the channel reported that several popular LG gaming monitors were automatically installing a Windows application without users' permission, with the monitors also reportedly collecting user data and serving pop-up ads for McAfee antivirus software. That episode reportedly drew a response from Microsoft, whose executive vice president of Windows and Devices later confirmed the company intervened and forced LG to remove the app from the Windows Store following user backlash over the pop-ups and silent installations.

Korean-language coverage of that earlier monitor controversy adds independent testing detail: across 32 consecutive system reboots, researchers reportedly saw a pop-up promoting a McAfee trial appear 31 times, presented as a default recommended option nearly every time.

LG's response: denial, with caveats

LG has pushed back firmly against the most serious allegations while acknowledging that data collection is occurring in some form. The company issued a global statement disputing reports that its TVs log ambient conversations while turned off and harvest large volumes of consumer data, describing the coverage as contributing to "misconceptions" about how its devices work — while still acknowledging that some data collection does take place.

On the specific question of when microphones are active, LG's position is narrower than the "always listening" framing that spread online. According to the company's statement, its TVs only process voice data when a user presses and holds the voice-control button on the remote, or when a wake word is detected after a user has manually enabled a far-field voice recognition feature. Outside those two triggers, LG says the TV does not collect or record ambient conversations, and any audio that fails to match the wake word is processed locally and deleted immediately rather than sent to a server.

On the network-scanning findings specifically, LG has offered an explanation rooted in ordinary product functionality rather than covert surveillance. Independent fact-checking of the coverage found that most outlets agree LG smart TVs do scan local networks to identify nearby devices like phones and smartwatches — a capability LG describes as a standard function supporting features like screen casting.

On the advertising-tracking side, LG has pointed to an existing opt-out rather than disputing that ACR tracking happens at all: the company has denied that its microphones record ambient conversations while confirming that ACR is used to track viewing habits for advertising, and has directed users to the "Live Plus" setting as the way to opt out.

One notable gap in LG's public defense, according to reporting on the statement, is what it left unaddressed: one of the most serious allegations circulating — that voice commands are stored on LG's servers unencrypted — reportedly went unmentioned in the company's official response.

There's also a numbers discrepancy worth flagging. While the original investigation's 216-million figure describes U.S. devices specifically, LG Ad Solutions materials and the investigation itself reportedly cite up to 363 million "addressable secondary devices" globally — pointing to a potentially vast footprint of household data being used for advertising purposes worldwide.

A pattern of friction with the press

LG's handling of this kind of scrutiny has reportedly extended beyond public statements. According to Australian outlet ChannelNews, LG Electronics Australia previously restricted media access for publications that ran critical reporting on its data practices, after those outlets declined a request to retract earlier stories about LG's use of ACR technology to track viewing habits across broadcast channels, streaming apps, and connected devices like game consoles and PCs.

Sorting fact from amplification

As with most viral tech-investigation stories, the online reaction has run ahead of some of the underlying nuance. A few points worth keeping in mind:

• Network scanning for nearby devices is confirmed and largely undisputed. LG doesn't deny it happens, and frames it as a feature (device discovery for casting), not a bug.
• ACR-based viewing tracking is real, industry-wide, and opt-out-able. LG's Live Plus setting is the mechanism, though it's reportedly on by default on many sets and buried in menus.
• The "listening while off" claim is more specific than the headlines suggest. It centers on standby-mode behavior after the remote's power button is pressed, and on locally buffered audio, rather than a genuinely powered-down television actively transmitting audio in real time.
• The most serious unresolved question — whether voice data is stored unencrypted on LG's servers — remains disputed, since LG's public statement reportedly didn't address it directly.
• Independent verification is still ongoing. The disclosed vulnerabilities are still working through responsible-disclosure channels with LG, meaning some technical details remain unconfirmed by outside parties.

What LG TV owners are being told to do

In the wake of the report, the practical advice circulating from security-focused coverage is fairly consistent: treat a smart TV like any other computer on your network. Recommendations include disabling ACR/Live Plus in the settings menu, reviewing and revoking voice-recognition permissions, segmenting the TV onto its own isolated or guest network so it can't freely scan other household devices, and — for the most privacy-conscious owners — disconnecting the TV from the internet entirely and using an external streaming device instead, one whose permissions can be controlled more granularly.

The bigger picture

Whatever the final technical details turn out to be once independent researchers and LG's own disclosure process catch up with the initial report, the Gamers Nexus investigation has reignited a debate that's been simmering for over a decade: smart TVs are, functionally, advertising and data-collection platforms that happen to also display video — and most owners have no real visibility into how much of their home network, viewing history, and even ambient audio is being logged along the way. As one piece of coverage on the story put it, the real takeaway may be less that any single company is uniquely predatory, and more that this is simply what connected devices do by default now, with LG's particular implementation collecting an unusually large amount of it.

---

This article is based on reporting from Gamers Nexus, Malwarebytes, Digital Watch Observatory, Futurism, TechSpot, ChannelNews, and other outlets covering the September 2026 investigation. LG disputes several of the core allegations; see the "LG's response" section above for the company's position.

The free, open-source office suite powering millions of desktops worldwide

LibreOffice is a comprehensive, free, and open-source office productivity suite that offers a powerful alternative to commercial software like Microsoft Office. Developed by The Document Foundation, it runs on Windows, macOS, and Linux, and is used by individuals, schools, businesses, and governments around the globe.

A Brief History

LibreOffice was forked from OpenOffice.org in 2010, after concerns arose within the open-source community about the future of that project following Oracle's acquisition of Sun Microsystems. A group of developers and community members formed The Document Foundation to steward a new, independently governed suite. Since its first stable release in January 2011, LibreOffice has grown into the most actively developed open-source office suite, with a large volunteer community contributing code, translations, documentation, and design.

What's Included

LibreOffice bundles several applications, each tailored to a different kind of document work:

• Writer - Word processor for letters, reports, books, and general documents.
• Calc - Spreadsheet application for data analysis, formulas, and charts.
• Impress - Presentation software for slideshows and visual storytelling.
• Draw - Vector graphics and diagramming tool for flowcharts and illustrations.
• Base - Database management front-end for creating and querying databases.
• Math - Formula editor for creating mathematical and scientific notation.

Key Features

• Free and open source: Released under the Mozilla Public License (MPLv2), LibreOffice is free to download, use, modify, and redistribute.
• Cross-platform: Available for Windows, macOS, and most Linux distributions, with consistent functionality across all of them.
• Broad file compatibility: Reads and writes Microsoft Office formats (.docx, .xlsx, .pptx) as well as its native OpenDocument Format (.odt, .ods, .odp).
• No subscription required: Unlike many commercial suites, there are no recurring license fees or mandatory cloud sign-ins.
• Extensible: Supports extensions and templates that add new features, styles, and integrations.
• Regular updates: The Document Foundation ships new feature releases roughly twice a year, plus regular bug-fix updates.
• Privacy-respecting: Documents are processed locally by default, without requiring cloud storage or telemetry.

LibreOffice vs. Microsoft Office

Aspect	LibreOffice	Microsoft Office
Cost	Free	Subscription or one-time purchase
License	Open source (MPLv2)	Proprietary
Native format	OpenDocument (.odt/.ods/.odp)	Office Open XML (.docx/.xlsx/.pptx)
Cloud integration	Optional, third-party	Deeply integrated (OneDrive, SharePoint)
Platform support	Windows, macOS, Linux	Windows, macOS (limited Linux via web)

Who Uses LibreOffice?

LibreOffice has been adopted by a wide range of organizations looking to reduce licensing costs or move away from proprietary software. Government bodies, educational institutions, and non-profits in various countries have migrated some or all of their office workflows to LibreOffice, often citing cost savings, data sovereignty, and the benefits of open standards.

Because it's open source, anyone can inspect, modify, or contribute to the LibreOffice codebase - a level of transparency that proprietary alternatives can't offer.

Getting Started

LibreOffice can be downloaded free of charge from the official Document Foundation website. Installers are available for Windows, macOS, and major Linux distributions, and most Linux distributions also include LibreOffice in their default package repositories. Portable versions are available too, letting users run the suite from a USB drive without installation.

Conclusion

Whether you're a student writing a thesis, a small business managing spreadsheets, or an organization seeking to reduce software costs, LibreOffice offers a capable, mature, and actively maintained alternative to commercial office suites. Its commitment to open standards, cross-platform support, and community-driven development has made it a staple of the open-source software world for over a decade.

---

Article for informational purposes. LibreOffice is a trademark of The Document Foundation.

What it is, when you actually need it, and how to use it without breaking a future reinstall.

Updated 2026 · Windows 10 & 11 · Microsoft 365, Office 2016–2024

Most of the time, removing Microsoft Office is as simple as opening Settings and clicking Uninstall. But Office has a habit of leaving things behind: stray registry keys, leftover Click-to-Run components, orphaned license tokens, or Start menu shortcuts that point to nothing. When that happens, a second install of Office — or of a different version — can fail, activate incorrectly, or refuse to install at all. That's the situation Microsoft's official removal tool is built for.

Quick answer: Try the normal uninstaller first. If Office won't fully go away, open the Get Help app and run the "Uninstall Office" troubleshooter. For scripted or multi-PC cleanup, use SaRAcmd.exe with the OfficeScrubScenario. Restart afterward either way.

What is the Microsoft Office Removal Tool?

There isn't a single program called "Office Removal Tool" anymore — that's really a catch-all name people use for Microsoft's Support and Recovery Assistant, known as SaRA. SaRA is Microsoft's official diagnostic and repair toolkit for Office, Outlook, and Teams problems, and one of its built-in scenarios is a deep, thorough Office uninstall that goes further than Control Panel does.

Unlike a standard uninstall, SaRA's scrub scenario is designed to clear out:

• Both MSI-based and Click-to-Run (C2R) Office installations
• Leftover registry entries and installation folders
• Cached license and activation data
• Start menu shortcuts and scheduled tasks Office created

That's why it's the go-to tool when a normal uninstall finishes but Office (or an old version of it) still shows up, or when you're switching from a retail install to a Microsoft 365 subscription and need a clean slate first.

An important change: the standalone SaRA app is gone

If you've used SaRA before, note that Microsoft retired the standalone SaRA desktop application on March 10, 2026. Its functionality didn't disappear — it was folded into the Get Help app, which ships with Windows 10 and 11. For everyday users, that's actually simpler: there's one less separate download to track down, and the same troubleshooter now lives inside an app already on your PC.

For IT admins managing many machines, the command-line half of SaRA — called SaRAcmd — is still published and updated separately as an enterprise tool, and it's the only supported path for scripted or unattended removal.

Method 1: Try the normal uninstaller first

Before reaching for any removal tool, rule out the simple path:

1. Open Settings → Apps → Installed apps (or Control Panel → Programs and Features on older builds).
2. Find your Office entry (it may be listed as "Microsoft 365," "Microsoft Office," or a specific year like "Office Professional Plus 2019").
3. Select it, choose Uninstall, and follow the prompts.
4. Restart your PC once it finishes.

This resolves the majority of cases. Only move on to a dedicated removal tool if Office reappears, if the uninstall fails partway through, or if a reinstall afterward runs into activation or setup errors.

Method 2: Get Help's "Uninstall Office" troubleshooter

This is the right choice for a single home or work PC and needs no downloads.

1. Open the Get Help app (search for it in the Start menu), or go directly to aka.ms/SaRA-officeUninstallFromPC.
2. When prompted whether you're having trouble uninstalling Office, choose Yes and select Next.
3. Pick the option to uninstall Microsoft 365 / Office, and follow the on-screen steps.
4. The tool detects your installed Office version automatically and removes it through a background PowerShell process. This typically takes 10–15 minutes.
5. Restart your PC once it reports success.

Because it runs the same scrub logic as SaRAcmd behind a simple wizard, this is the option most people should use.

Method 3: SaRAcmd (command line, for admins and scripted cleanup)

SaRAcmd is the enterprise-grade version of the tool: a console utility that can be scripted, deployed remotely, or targeted at a specific Office version rather than everything installed. It's also currently the only officially supported removal path for Office 2024, so admins working with that release need it even on a single machine.

SaRAcmd supports removing Microsoft 365, and Office 2021, 2019, 2016, 2013, 2010, and 2007, across both MSI and Click-to-Run installations, on any supported version of Windows.

Steps

1. Close every Office application (Word, Excel, Outlook, Teams, etc.).
2. Download the latest SaRACmd package (alternative link) and extract it to a local folder, e.g. C:\Tools\SaRACmd.
3. Open Command Prompt as Administrator.
4. Change to the tool's directory:

   CD C:\Tools\SaRACmd

5. Run the scrub scenario. To remove every Office version found on the machine:

   SaRAcmd.exe -S OfficeScrubScenario -AcceptEula -OfficeVersion All

Targeting a specific version

If you only want one version removed — useful when multiple Office installs coexist on the same PC — swap the -OfficeVersion value:

Value	Removes
All	Every detected Office installation
M365	Microsoft 365 Apps (subscription)
2021 / 2019 / 2016 / 2013 / 2010 / 2007	Only that specific perpetual-license version

A successful run returns exit code 00. Restart the PC afterward regardless of which command you used, since some cleanup steps only finish on the next boot.

Method 4: The legacy SetupProd_OffScrub.exe download

Older tutorials often point to a standalone file called SetupProd_OffScrub.exe. It's not really a separate tool — running it installs SaRA in the background and then triggers the same Office scrub scenario described above. Microsoft has deprecated it in favor of Get Help and SaRAcmd, but as of this writing the download link is still active, so it remains a working fallback if you specifically need the older packaging.

Method 5: Using OfficeRemoveTool.diagcab Tool

You can download this OfficeRemoveTool.diagcab tool (also known as o15-ctrremove.diagcab) to remove Office from your PC. 

Before you run any removal tool

• Back up custom settings. Custom dictionaries, Outlook signatures, and Quick Access Toolbar tweaks aren't always preserved.
• Close all Office apps, including anything running quietly in the background (like Outlook's notification icon or a OneDrive-synced Office add-in).
• Note your product key or Microsoft account tied to the subscription, so reactivating afterward is painless.
• Save your work. A scrub removes shared components some other programs may briefly depend on, so it's worth a clean restart before and after.

Frequently asked questions

Is the Microsoft Office removal tool free?

Yes. SaRA, the Get Help troubleshooter, and SaRAcmd are all free tools published directly by Microsoft.

Will it delete my documents?

No. The removal tool uninstalls the Office applications and their installation data; it does not touch files stored in your Documents folder, OneDrive, or elsewhere.

Do I need it if Control Panel's uninstall already worked?

No. Only use a dedicated removal tool if the standard uninstall fails, if a reinstall runs into errors afterward, or if remnants of Office are still visible once the normal uninstall reports success.

Can it remove just one Office app, like only Outlook?

No. The scrub scenario is built to remove complete Office installations, not individual apps within a suite. To remove a single app while keeping the rest of Office, use the "Modify" option in Office's own installer instead.

Is it safe to run on a work computer?

If the PC is managed by an IT department, check with them first — a full scrub also clears activation state, and organization-managed devices sometimes reactivate Office automatically through a different licensing system than a personal Microsoft account.

---

This guide reflects Microsoft's Office removal tooling as of 2026. Tool names, download links, and supported Office versions are controlled by Microsoft and may change; if a link above doesn't resolve, search "Microsoft Support and Recovery Assistant" for the current official page.