Microsoft will make Recall an opt-in feature, encrypt its search index database, and require Windows Hello authentication and proof of presence to view timeline
Context & Ripple Effects
Recall’s safeguards build on Microsoft’s existing use of Windows Hello as a passwordless sign-in option. The move makes access to an AI-generated activity history contingent on both user choice and local identity checks.
Related coverage shows the rollout remained unsettled: Microsoft later delayed Recall for security and privacy work before an Insider release, and subsequently described further changes including an uninstall option. A later assessment also questioned whether PIN-based reopening and unreliable sensitive-data filtering fully delivered the intended protection.
First-order effects
- Recall is no longer enabled by default; people who want it must actively choose it, while its local search database is encrypted.
- Viewing the timeline requires Windows Hello and proof of presence, adding an authentication gate around a feature that can expose a user’s on-device activity history.
Second-order effects
- Microsoft must make the feature’s security controls legible and dependable enough to overcome the privacy concerns that prompted its delayed rollout; later Insider-release delay over security and privacy underscores that pressure.
- Other PC and operating-system vendors pursuing persistent AI history features face a clearer baseline: consent, protected local storage, and strong re-authentication become harder to treat as optional product details.
Third-order effects
- If this approach holds, personal AI features that continuously observe on-device activity will increasingly be designed as privileged, locally protected services rather than default ambient utilities.
- The later gap between Recall’s stated controls and reported PIN and filtering limitations suggests that durable trust will depend on how safeguards work in routine use, not only on whether they are announced.
The trend: AI features that build persistent personal context are pushing platform vendors toward explicit consent and identity-bound access controls.
Related: Proof of personhood · Microsoft · Recall security changes · Recall rollout delay · Recall overhaul and uninstall option
Related Coverage
- Microsoft to Update Recall After Experts Point Out Glaring Security Risks ExtremeTech
- Microsoft makes Recall an optional feature on Copilot+ PCs after it ‘heard a clear signal’ from the public PC Gamer
- After public backlash, Microsoft to offer Recall turned ‘Off’ by default MSPoweruser
- What Did Microsoft Really Concede with Recall? (Premium) Thurrott
- Microsoft Recalls ‘Recall’ Spyglass
- Microsoft Will Switch Off Recall by Default After Security Backlash Wired
- Microsoft is reworking Recall after researchers point out its security problems Ars Technica
- Microsoft Makes Controversial Recall Feature Opt-In for Copilot+ PCs RestorePrivacy
- Microsoft says ‘Recall’ will now be opt-in Mashable
- Microsoft backtracks on new Recall feature — enhancing Recall's security and making it an opt-in decision Tom's Hardware
- Update on the Recall preview feature for Copilot+ PCs Windows Blog
- Microsoft Revamps Controversial AI-Powered Recall Feature Amid Privacy Concerns The Hacker News
- Microsoft's changes AI Recall feature after intense criticism BGR
- Microsoft rethinks Recall feature for Copilot after backlash over security SC Media
- Microsoft Backtracks on Windows ‘Recall’ Feature After Privacy Uproar CNET
- Microsoft's Recall feature will now be opt-in and double encrypted after privacy outcry VentureBeat
- Microsoft Tweaks Recall for Security DataBreachToday.com
- Microsoft makes Windows' Recall feature opt-in following cybersecurity concerns SiliconANGLE
- Microsoft rolls back ‘dumbest cybersecurity move in a decade’ CyberScoop
- Microsoft Just Hit The Brakes On Windows Copilot+ PCs' Creepiest Feature SlashGear
- Microsoft Turns Off Default ‘Recall’ AI Feature Amid Privacy Backlash The Information
- When the default policy is to not do the right (and obvious) thing, but for you to reluctantly react, then you can fairly question culture/priorities https://www.theverge.com/... @bardi@mas.to
- Microsoft is reworking its widely panned Recall feature. It will now require opt-in, encrypt the screenshots and require authentication with your face, fingerprint, or a PIN to view the timeline. — All good changes which should have always been the plan. — https://www.theverge.com/... @carnage4life@mas.to
- Recall will kill your SSD. but maybe that's the point? Companies sell more laptops that way. What's the best way to degrade an SSD and reduce its lifetime? … Rafael Brown
- We're making some updates to the Recall feature of Copilot+ PCs to give you even greater control and security. … Igor Krstin
- There has been a lot of chatter in the security and privacy ecosystems about the Recall preview feature for Windows Copilot+ PCs. … Jeremy Dallman
- This is bullsh*t, by the way. If Windows comes with spyware/malware like Recall pre-installed, it's just a matter of time before it gets turned … Christopher Rice
- Microsoft Will Switch Off Recall by Default After Security Backlash Hacker News
- Windows Won't Take Screenshots of Everything You Do After All Slashdot
Discussion
-
@dangillmor@mastodon.social
Dan Gillmor
on mastodon
Apparently Microsoft heard the news that its insane “Recall” feature needs some remedial security work. — https://www.theverge.com/... Looking forward to security researchers exposing what will certainly be huge holes in this protection. — Microsoft simply cannot be trusted.
-
@SteveThompson@mastodon.social
Steve Thompson
on mastodon
* PASS * — “Microsoft Will Switch Off Recall by Default After Security Backlash” — https://www.wired.com/... “After weeks of withering criticism and exposed security flaws, Microsoft has vastly scaled back its ambitions for Recall, its AI-enabled silent recording feature, an…
-
@gossithedog
Kevin Beaumont
on x
Turns out speaking out works. Microsoft are making significant changes to Recall, including making it specifically opt in, requiring Windows Hello face scanning to activate and use it, and actually trying to encrypt the database they say. https://www.theverge.com/...
-
@timsweeneyepic
Tim Sweeney
on x
In heaven, tech companies treat everyone as Microsoft Windows treats developers. In hell, tech companies treat everyone as Microsoft Windows treats users.
-
@timsweeneyepic
Tim Sweeney
on x
Now I feel good about this rant again because I went through the process of setting up a new Dell and found Microsoft's new forced account creation super lame. Shame on Microsoft for this crap. Here's the latest workaround: https://www.tomshardware.com/ ...
-
@scobleizer
Robert Scoble
on x
@stevesi @thisisme_frfr I am recording you on my Mac. :-)
-
@stevesi
Steven Sinofsky
on x
When I am using WhatsApp I need to know if anyone in the chat is on a co-pilot PC with Recall.
-
@patrickmoorhead
Patrick Moorhead
on x
That's some quick movement by Microsoft. Good to see. I'm going to be turning on Recall, for sure.
-
@gartenberg
Michael Gartenberg
on x
It does not appear to me that Microsoft has done enough here. Also, did no one see just how bad this was implemented before they started cranking up the hype?
-
@timsweeneyepic
Tim Sweeney
on x
Now I feel bad about this rant because Microsoft just changed its plan to screenshot everything everyone does. (Also pls bring back the vertical task bar and stop Edge nagging everyone all the time to change settings and stop trying to force people to create Microsoft accounts.)
-
@timsweeneyepic
Tim Sweeney
on x
Oh wow that's great.
-
@sdw
Sebastiaan de With
on x
Meanwhile, let's see how things are going with those companies that are rushing quickly into AI. Oh.
-
@yusuf_i_mehdi
Yusuf Mehdi
on x
We're making some updates to the Recall feature of Copilot+ PCs to give you even greater control and security. https://blogs.windows.com/...
-
@thetrentharvey
Trent Harvey
on x
@ryanaraine This is their updated screen. It forces an absolute choice with happy language “Yes, save” as the choice in the default “continue/next” position - most likely to be selected by users who don't read the screen or don't have a fully informed context to decide. As oppose…
-
@jgreigj
Jon Greig
on x
Microsoft reversed course today, forcing users to proactively opt in to #Recall after more than two weeks of security researchers and privacy experts illustrating how dangerous the feature is https://therecord.media/...
-
@krishnanrohit
Rohit
on x
Glad to see Microsoft listened. Though the insanity that a backlash was needed to a) turn it off by default, and b) it's now encrypted (it wasn't !!?) is a little crazy. https://x.com/...
-
@stevesi
Steven Sinofsky
on x
this isn't enough and off by default means it doesn't exist. It doesn't prevent the whole range of problems of retention and asymmetry. Screen shot is still gotcha. My favorite example is screenshotting every WhatsApp. It is equivalent of an unacknowledged wire tap.
-
@joannastern
Joanna Stern
on x
Microsoft is recalling... Recall. Kinda. The company is making some changes before it releases it, including making taking screenshots of everything you do opt-in! https://blogs.windows.com/... [image]
-
@andrewcouts
Andrew Couts
on x
BREAKING: Microsoft backtracks on its Recall feature after everyone pointed out its flaws https://www.wired.com/...
-
@altryne
Alex Volkov
on x
Recalling recall... it was in the name!
-
@tomwarren
Tom Warren
on x
BREAKING: Microsoft is changing its controversial Windows Recall feature so it's now opt-in. It's also addressing security concerns around how data is stored and accessed. Full details below 👇 https://www.theverge.com/...
-
r/privacy
r
on reddit
Windows won't take screenshots of everything you do after all — unless you opt in
-
r/Surface
r
on reddit
Microsoft is changing its Windows Recall feature to be opt-in
-
r/Windows11
r
on reddit
Microsoft Will Switch Off Recall by Default After Researchers Expose Security Flaws
-
r/Windows11
r
on reddit
Update on the Recall preview feature for Copilot+ PCs
-
r/technology
r
on reddit
Windows won't take screenshots of everything you do after all — unless you opt in
-
r/technews
r
on reddit
Microsoft Will Switch Off Recall by Default After Researchers Expose Security Flaws