At its Build 2024 conference, Microsoft unveiled a new AI trick for Windows PCs—one that can help users locate or remember details from their digital past. It could be looking for a PDF file worked on a couple of weeks ago. Or perhaps finding the name of a restaurant recommended by a friend earlier this year. Called Microsoft Recall, this feature could save you many lost minutes trying to hunt down whatever’s eluding your memory.
Yet even before its launch, Microsoft Recall is already giving security experts indigestion. Underneath the futuristic shine, Recall comes with a potential massive hit to user privacy—and by extension, security.
Here are the reasons for the unease, echoed by many security experts this week—and what you should do when you finally encounter Microsoft Recall in the wild.
1) It watches and records everything you do on your PC
Microsoft
Microsoft
<div class="scrim" style="background-color: #fff" aria-hidden="true"></div>
</div></figure><p class="imageCredit">Microsoft</p></div>When active, Microsoft Recall monitors your every move while you’re on your computer, capturing screenshots every five seconds as your screen changes. Local AI helps Windows determine when you’ve done something different enough to warrant a screengrab.
Local AI also assists in parsing the images to extract text, so that details can be offered as search results whenever you decide you want to look up, say, the green jacket you saw online a few weeks ago.
<div class="wp-block-product-widget-block product-widget is-half-width is-float-right">
<div class="product-widget__block-title-wrapper">
<h4 class="product-widget__block-title" id="get-windows-11-pro-for-cheap">
get windows 11 pro for cheap </h4>
</div>
<div class="product-widget__content-wrapper">
<div class="product-widget__title-wrapper">
<h3 class="product-widget__title" id="windows-11-pro">Windows 11 Pro</h3>
</div>
<div class="product-widget__image-outer-wrapper">
<div class="product-widget__image-wrapper">
<img decoding="async" width="2368" height="1330" class="product-widget__image" src="https://b2c-contenthub.com/wp-content/uploads/2022/05/Windows-Insider-search-bar.png" loading="lazy" alt="Windows 11 Pro" srcset="https://b2c-contenthub.com/wp-content/uploads/2022/05/Windows-Insider-search-bar.png?quality=50&strip=all 2368w, https://b2c-contenthub.com/wp-content/uploads/2022/05/Windows-Insider-search-bar.png?resize=300%2C168&quality=50&strip=all 300w, https://b2c-contenthub.com/wp-content/uploads/2022/05/Windows-Insider-search-bar.png?resize=768%2C431&quality=50&strip=all 768w, https://b2c-contenthub.com/wp-content/uploads/2022/05/Windows-Insider-search-bar.png?resize=1200%2C674&quality=50&strip=all 1200w, https://b2c-contenthub.com/wp-content/uploads/2022/05/Windows-Insider-search-bar.png?resize=1536%2C863&quality=50&strip=all 1536w, https://b2c-contenthub.com/wp-content/uploads/2022/05/Windows-Insider-search-bar.png?resize=2048%2C1150&quality=50&strip=all 2048w, https://b2c-contenthub.com/wp-content/uploads/2022/05/Windows-Insider-search-bar.png?resize=1240%2C697&quality=50&strip=all 1240w, https://b2c-contenthub.com/wp-content/uploads/2022/05/Windows-Insider-search-bar.png?resize=150%2C84&quality=50&strip=all 150w" sizes="(max-width: 300px) 100vw, 300px" />
</div>
</div>
<div class="product-widget__information">
<div class="product-widget__information--rrp-wrapper">
<span class="product-widget__information--rrp-label">
</span>
<span class="product-widget__information--rrp-value">
</span>
</div>
<div class="product-widget__pricing-details ">
<span class="product-widget__pricing-details--label">
Best Prices Today:
</span>
<span class="product-widget__pricing-details--links-wrapper">
<a class="product-widget__pricing-details--link" href="https://go.redirectingat.com/?id=111346X1569483&url=https://software.pcwelt.de/offer/windows_11_home/43835&xcust=2-1-2344411-5-1807627-10994&sref=https://www.pcworld.com/feed" target="_blank" data-vars-product-name="Windows 11 Pro" data-vars-product-id="1807627" data-vars-category="Windows" data-vars-manufacturer-id="10994" data-vars-manufacturer="Microsoft" data-vars-vendor="PC-WELT Software-Shop - Windows 11 Pro,PC-WELT Software-Shop - Windows 11 Home" data-vars-po="" data-product="1807627" data-vars-link-position-id="005" data-vars-link-position="Product Sidebar" data-vars-outbound-link="https://software.pcwelt.de/offer/windows_11_home/43835" rel="nofollow">49,99 € at PC-WELT Software-Shop – Windows 11 Home</a> <span class="amp-bar"> | </span>
<a class="product-widget__pricing-details--link" href="https://go.redirectingat.com/?id=111346X1569483&url=https://software.pcwelt.de/offer/windows_11_professional/43935&xcust=2-1-2344411-5-1807627-10994&sref=https://www.pcworld.com/feed" target="_blank" data-vars-product-name="Windows 11 Pro" data-vars-product-id="1807627" data-vars-category="Windows" data-vars-manufacturer-id="10994" data-vars-manufacturer="Microsoft" data-vars-vendor="PC-WELT Software-Shop - Windows 11 Pro,PC-WELT Software-Shop - Windows 11 Home" data-vars-po="" data-product="1807627" data-vars-link-position-id="005" data-vars-link-position="Product Sidebar" data-vars-outbound-link="https://software.pcwelt.de/offer/windows_11_professional/43935" rel="nofollow">69,99 € at PC-WELT Software-Shop – Windows 11 Pro</a> </span>
</div>
</div>
</div>
</div>By default, Microsoft Recall will commandeer anywhere between 25GB to 150GB on your storage drive—up to about three months worth of data. Nothing is sacred, either. Passwords, tax details, and other sensitive details (really, anything you do) are fair game. To protect some of your privacy, you must manually exclude websites, private browsing sessions (if you don’t use Edge), and applications from Recall’s reach.
Even then, according to Microsoft’s own help files, you can still end up with possible a paper trail of your activity in excluded apps, websites, and private browsing windows. In a couple of scenarios, screenshots are still taken and saved as temporary files, then deleted. Deleted files (and any remaining Recall snapshots) can theoretically be recovered from a storage drive by anyone who can access your Windows account — include hackers and other people in your household. More on that later.
2) It’s on by default
Microsoft says it informs users about Recall during setup of compatible PCs, and lets them change the settings or turn off the feature entirely at that time, too.
But practically speaking, most people blaze through initial setup screens. Many even skip right over those interstitial screens without really reading them. The result will eventually be thousands (if not millions) of people unaware Microsoft Recall is capturing all their activity.
3) Security measures only go so far
BitLocker and Device Encryption in Windows will encrypt your data, but if you’re logged in, whatever you access is decrypted for use.
BitLocker and Device Encryption in Windows will encrypt your data, but if you’re logged in, whatever you access is decrypted for use.
PCWorld
<div class="lightbox-image-container foundry-lightbox"><div class="extendedBlock-wrapper block-coreImage undefined"><figure class="wp-block-image size-large enlarged-image"><img decoding="async" data-wp-bind--src="selectors.core.image.enlargedImgSrc" data-wp-style--object-fit="selectors.core.image.lightboxObjectFit" src="" alt="BitLocker Drive Encryption backup recovery key screen" class="wp-image-624638" width="1200" height="676" loading="lazy" /><figcaption class="wp-element-caption"><p>BitLocker and Device Encryption in Windows will encrypt your data, but if you’re logged in, whatever you access is decrypted for use.</p> </figcaption></figure><p class="imageCredit">PCWorld</p></div> </div></figure><p class="imageCredit">PCWorld</p></div>To mitigate the huge privacy risk posed by a collection of screenshots chronicling every bit of user activity, Microsoft offers two protections. The first is keeping everything local to your PC. No data is shared with cloud servers or Microsoft directly. In fact, you don’t even need an internet connection for this feature to work. Other users on the same computer also can’t access your Recall screenshots.
Second, Microsoft encrypts all Recall images using either Device Encryption or BitLocker (Windows Home vs Windows Pro, respectively).
<div class="wp-block-product-widget-block product-widget is-half-width is-float-right">
<div class="product-widget__block-title-wrapper">
<h4 class="product-widget__block-title" id="the-best-windows-av-weve-tested">
the best windows av we've tested </h4>
</div>
<div class="product-widget__content-Login to add comment
Other posts in this group
I’ve wanted a Steam Deck from the first moment I saw one. But I haven
So many people haven’t been able to upgrade their older Windows compu
