Windows11 Update Makes Bing the Default Search Engine in Chrome, Firefox, and Brave

Key Takeaways

• Microsoft released a standalone Windows 11 utility called Microsoft Recommended Search Settings (installer MicrosoftSettings.exe) whose sole purpose is to push Bing as the default search engine and steer users toward Microsoft Rewards.
• The app is distributed from Microsoft’s official download servers, not via Windows Update or the Microsoft Store, and arrives as a 22.2 MB executable that mimics a system tool.
• Upon launch, the utility presents a pre‑checked “Yes” toggle for Bing, then installs the Microsoft Bing Homepage & Search extension for Chrome, Firefox, Edge, and (in testing) Brave, before opening a Rewards landing page.
• The extension requests broad browser permissions—reading and altering all site data, showing notifications, and replacing homepage/start‑page/search settings with bing.com—permissions that are identical to those abused by malicious search‑hijacking tools.
• Although the change requires explicit user clicks (both in the Windows wizard and the browser prompt), the preselected option, official‑looking filename, and immediate Rewards incentive are designed to nudge indifferent users toward acceptance.
• Security teams should treat the utility as a potential vector for unwanted browser modification; home users are advised to decline MicrosoftSettings.exe unless they explicitly want Bing and the associated MSN feed.
• The move highlights Microsoft’s strategy of using first‑party, seemingly benign utilities to steer user behavior toward its ecosystem, raising questions about transparency and user autonomy in default‑setting changes.

Overview of Microsoft Recommended Search Settings
Microsoft has introduced a dedicated Windows 11 application whose explicit goal is to place Bing in front of users who have already selected an alternative search engine. Dubbed Microsoft Recommended Search Settings, the tool arrives as a standalone installer named MicrosoftSettings.exe with a modest size of 22.2 MB. Unlike typical Windows components, it is not delivered through Windows Update or the Microsoft Store; instead, Microsoft hosts it on its official download servers, making it directly accessible to anyone who seeks it out.

Installer Presentation and User Flow
When executed, the program opens a WinUI‑based window that immediately greets the user with the banner “Welcome to Microsoft Recommended Search Settings.” On the initial screen, the Bing option is already toggled to “Yes,” accompanied by small print noting that the change will affect Microsoft Edge, Mozilla Firefox, Google Chrome, and—in testing—Brave. Clicking Accept and continue launches a brief setup routine, after which a “You’re all set!” page appears. Pressing the Finish button automatically opens the URL rewards.bing.com/m365offer in Microsoft Edge, steering the user toward the Microsoft Rewards program.

Technical Packaging and Disguise
From a technical standpoint, the utility is wrapped in a WinUI shell that leverages WebView2 to render its interface. The file name MicrosoftSettings.exe deliberately resembles a legitimate system utility, a tactic that can lower user suspicion. The core component it installs is the Microsoft Bing Homepage & Search browser add‑on, which is not new; the same extension already resides in the Chrome Web Store under Microsoft Corporation and boasts roughly five million active users. What distinguishes this release is the Windows‑native distribution channel that can reach multiple browsers—Chrome, Firefox, Edge, and Brave—through a single executable, funneling users straight to a Rewards landing page after the extension is added.

Browser Permission Requests and Security Implications
During the installation process, both Chrome and Brave present permission dialogs that warn the user about the extent of control the extension seeks. The alerts state that the add‑on wishes to:

• Read and change all data on websites visited,
• Show notifications,
• Replace the homepage, start page, and search settings with bing.com.

These are precisely the same broad permissions leveraged by malicious search‑hijacking extensions and counterfeit AI‑search tools that reroute queries through attacker‑controlled infrastructure. While Microsoft’s add‑on is a first‑party product rather than a criminal implant, granting it such authority constitutes a significant browser‑control decision. Once enabled, the extension can overwrite the user’s preferred new‑tab page with a cluttered MSN feed, altering the browsing experience in ways that may be undesirable or unexpected.

User Consent and Design Influences
Importantly, the change is not a silent takeover. Both the Windows wizard and the browser prompts require an explicit click from the user. However, the design employs several subtle nudges that increase the likelihood of acquiescence: the Bing toggle is preselected to “Yes,” the installer bears an official‑sounding filename, and the immediate reward of accessing Microsoft Rewards appears right after completion. These elements target users who tend to click through dialogs without careful scrutiny, especially home users who may not appreciate the long‑term impact on their browser settings.

Recommendations for Users and Administrators
For individuals who prefer their current search engine—whether Google, DuckDuckGo, Brave Search, or another—security best practice advises refusing to run MicrosoftSettings.exe unless they deliberately wish to adopt Bing and the accompanying MSN feed. Declining the installer prevents the unwanted extension from being added and preserves the existing search‑engine configuration.

Enterprise administrators should consider blocking the execution of MicrosoftSettings.exe via software restriction policies or endpoint‑protection rules, given its potential to alter browser defaults across managed endpoints. Monitoring for the presence of the Microsoft Bing Homepage & Search extension in Chrome, Firefox, or Edge can also serve as an early indicator that the utility has been executed, prompting a review of affected systems.

Broader Context and Implications
The release of Microsoft Recommended Search Settings underscores a broader tactic whereby Microsoft leverages first‑party, seemingly benign utilities to steer user behavior toward its own services. By embedding the promotion within a Windows‑native installer that reaches multiple browsers, the company reduces friction for users who might otherwise ignore a Store‑based or web‑only promotion. Simultaneously, this approach raises questions about transparency and user autonomy: when a system‑looking executable offers a preset “Yes” option tied to a rewards incentive, the line between helpful suggestion and coercive nudging can blur.

Security researchers and privacy advocates will likely scrutinize such distributions for potential abuse vectors, especially if similar techniques were adopted by less reputable actors. For now, the utility remains opt‑in, but its design highlights the importance of vigilant user interaction with system prompts and the need for clear communication about what changes a proposed installation will enact.

In summary, Microsoft Recommended Search Settings is a purpose‑built, Windows‑level tool designed to redirect users to Bing and Microsoft Rewards via a broadly permissioned browser extension. While it requires explicit user consent, its presentation and incentives make it prone to inadvertent acceptance, warranting caution from both individual users and IT administrators tasked with maintaining browser integrity and user choice.