Microsoft Recall Can Still Potentially Screenshot Your Sensitive Information

Earlier this year, Microsoft delayed the release of its Recall feature for Windows 11 Copilot+ PCs due to security flaws. Recall, which automatically screenshots and logs user activity, was found to be insecure, especially for sensitive tasks like viewing bank information. The updated version, now available to all Copilot+ PC users in the Windows Insider beta, encrypts logs and requires a Windows Hello login for access. However, security concerns persist as the feature's filters are not fully effective in blocking screenshots of sensitive information, such as credit card numbers in documents or fake loan applications. Users can select specific websites to exclude from screenshotting, but the feature remains a potential risk for exposing sensitive data.

Recall is an opt-in feature, off by default, and still in beta, meaning issues are expected. Microsoft has advised users that screenshots won't be saved if certain builds are installed. The feature requires downloading AI models separately, as they are not pre-installed on Copilot+ PCs. Despite the security enhancements, the feature's ability to record user activity continuously raises privacy concerns. Microsoft's initial plan to release Recall without extensive fine-tuning highlights the ongoing challenges in balancing functionality with security and privacy.

Key takeaways:

```html

Microsoft Recall, a feature for Windows 11 Copilot+ PCs, was delayed due to security flaws but is now available in beta with improved encryption and Windows Hello login.
The feature aims to automatically stop screenshotting sensitive information, but tests show it still captures some sensitive data like credit card numbers in certain documents.
Recall is an opt-in feature, off by default, and requires downloading AI models after signing up for the Insider build.
Despite improvements, Recall remains a potential security risk and is still in beta, with Microsoft seeking user feedback to enhance its filtering capabilities.

```

Microsoft Recall Can Still Potentially Screenshot Your Sensitive Information

Key takeaways:

Comments (0)

Newsletter