A look at the privacy and security concerns surrounding Microsoft's Recall, which will record everything users do in Windows for up to three months by default
a ‘privacy nightmare’? Mayank Parmar / Windows Latest : Hands on with Windows 11 Recall AI: Snappy performance, works without internet Iain Thomson / The Register : Was there no one at Microsoft who looked at Recall and said: This really, really sucks Jai Vijayan / Dark Reading : Microsoft's ‘Recall’ Feature Draws Criticism From Privacy Advocates Axios : New Microsoft AI PC feature faces a privacy conundrum PCWorld : Windows 11's most-hyped new AI feature could be a privacy nightmare Pierluigi Paganini / Security Affairs : Recall feature in Microsoft Copilot+ PCs raises privacy and security concerns Mauro Huculak / Windows Central : How does Windows 11 Recall work? We explain. Threads: Ian Betteridge / @ianbetteridge : The funny thing about Microsoft's new Recall feature is how little actual “AI” it's doing. It's basically just making automatic screen captures, then running OCR and image recognition to create a semantic index you can search. Unless I'm missing something, there's no LLM (or small language model) used in it. … Paul Bradley Carr / @paulbradleycarr : There was a time when almost everything was only stored locally then Google and Microsoft and others decided it shouldn't be. The data is too valuable for them not to find a way to get it. Nate Ralston / @eccolocation : I would think firms in industries with confidentiality policies - finance, healthcare, etc etc - would not allow this. Viewing personal info thru secure connections/platforms doesn't mean I can simply screenshot everyone's data and keep it on local storage. Sounds like something most businesses with compliance depts will hate Mastodon: Chris Merkel / @chrismerkel@infosec.exchange : You may be in a position where leaders in your company are hot to turn on Microsoft Copilot Recall. — Your best counterargument isn't threat actors stealing company data. — It's that opposing counsel will request the recall data and demand it not be disabled as part of e-discovery proceedings. … John Scott-Railton / @jsrailton@mastodon.social : Regular user: I want to feel safe and private. — Google: cool, anyways here's an AI that listens to your calls. — Microsoft: word, how about an AI that takes screenshots of everything you do? — #Google #AI #Microsoft #privacy #security #safety #cybersecurity #infosec Oliver Andrich / @oliverandrich@social.tchncs.de : In the deeper documentation for the service, Microsoft said: “To filter out a website from a snapshot, you must be using Microsoft Edge.” — WTF? Und bei allen anderen wird er schön Benutzernamen und Co. snapshotten? Ausser sie sind im Private-Mode und basieren auf Chromium. … @Vivaldi@social.vivaldi.net : Is Microsoft's new feature a privacy nightmare? — Microsoft recently announced ‘Recall’, a feature that lets Windows users to search for content across time on their PCs. — According to Microsoft, Recall takes screenshots every five seconds, which are then stored locally. … John Mark Ockerbloom / @JMarkOckerbloom@mastodon … : “This isn't “the last thing in the clipboard”. It is everything you did in recent memory — and it's instantly available to malicious software and individuals. If you have malware running on your PC for only minutes, you have a big problem in your life now rather than just changing some passwords. … Matt Quick / @MattTheQuick@fosstodon.org : I bounce between #Windows and #Linux. This might push me to go full Linux. https://www.bleepingcomputer.com/ ... @avoidthehack@infosec.exchange : Related: Microsoft's new #Windows 11 Recall is a #privacy nightmare — It's also a #security nightmare too. — By default it will capture everything (tiny exceptions with in private browsing with Edge - but what about other browsers?). Passwords from password managers, check. Private keys, check. … X: Cher Scarlett / @cherthedev : @evacide This reminds me about all of the alarm from women about Apple Air tags and tech like it, while we were essentially told it couldn't be abused because of (insert something a stranger would have difficult accomplishing) Kevin Beaumont / @gossithedog : For anybody who cares - Copilot+ Recall uses a bunch of services themed CAP - Core AI Platform. Enabled by default. It spits constant screenshots (the product brands then “snapshots”, but they're hooked screenshots) into the current user's AppData as part of image storage. The NPU processes them and extracts text, into a database file. The database is SQLite, and you can access it as the user including programmatically. It 100% does not need physical access and can be stolen. LinkedIn: Chris Farris : I see Microsoft's focus on Security over features lasted all of about 24 days. Good job guys, you're a cancer on the industry. Patrick Drolet : *** COMPLIANCE AND PRIVACY NIGHTMARE *** — It gobble up anything it sees, including passwords in a password manager or your account numbers on your banking website... … Forums: Hacker News : Giving Windows total recall of everything a user does is a privacy minefield
Context & Ripple Effects
Recall extends Microsoft's Copilot+ PC pitch from an AI-powered activity timeline to a local archive of screenshots and extracted text. That makes its privacy model consequential: a search convenience feature also centralizes material that users normally leave dispersed across apps and browser sessions.
The initial criticism focused on default collection, retention, sensitive-data capture and uneven website filtering. Microsoft later shifted Recall to opt-in and added encryption and Windows Hello requirements, showing that the launch design had become a product-trust issue rather than merely a feature debate.
First-order effects
- Copilot+ PC users face a new local repository that may contain credentials, private communications and work material, increasing the stakes of device compromise or unauthorized local access.
- Microsoft must defend Recall's default retention, filtering and access controls while users and organizations assess whether to disable or restrict it.
Second-order effects
- Enterprise security and compliance teams may treat Recall's searchable archive as a new endpoint-control and e-discovery concern, especially where sensitive information can be captured despite ordinary app or browser boundaries.
- Browser and platform choices gain privacy significance: the reported Edge-specific site-exclusion path could push Microsoft to make protections consistent across browsers or invite scrutiny of the disparity.
Third-order effects
- If on-device AI assistants increasingly build persistent personal indexes, privacy safeguards will need to be designed as core access controls—consent, authentication, encryption and reliable exclusion—not added after launch.
- The episode suggests that trust can constrain AI-PC differentiation: even locally processed features may face resistance when they expand the amount of sensitive data available on a device. Later reports that sensitive-data filtering still captured some information underscore the difficulty of making such safeguards dependable.
The trend: Consumer AI is moving from responding to individual prompts toward continuously indexing personal activity, making data minimization and local-access governance central competitive requirements.