You're wrong about Windows Recall — How Microsoft keeps your data safe on Copilot+ PCs

The entire Windows Recall experience is processed on device, which is partly why it requires a Copilot+ PC to function. Microsoft is offloading the resources required to process a feature like this onto the NPU, which is a secure chip that's powerful enough to handle the processing of snapshots using AI with little power draw.

 

This means Windows Recall works 100% offline, and you don't need an active internet connection to take advantage of it. It doesn't even require a Microsoft Account, and as a result is missing some quality of life features such as cross-device syncing. None of that is possible here, because Windows Recall does not upload your data anywhere.

Microsoft is not training any AI models on your data

Recall is an entirely offline experience. No internet required (after initial setup) (Image credit: Microsoft)

 

Microsoft said this on stage, but just to reiterate: Microsoft does not train its AI models on Windows Recall data. This is because, once again, Windows Recall does not upload your data to the cloud. Microsoft cannot see it, because it's encrypted on your device, and so it cannot train AI models on the snapshots that Recall has captured on your device.

 

This also means Windows Recall cannot be used to tailor ads and services in your favor, as the data Recall collects is only ever used by the Recall app.

Windows Recall is completely optional

You can configure pretty much all aspects of Recall. (Image credit: Microsoft)

 

If all of that doesn't settle your nerves, Windows Recall is a completely optional experience. You absolutely do not have to use it if you don't want to. On a Copilot+ PC, you will be prompted during the out of box setup experience to enable Windows Recall. 

 

If you choose not to, the Windows Recall feature will be rendered inoperable. It can't function because Windows Recall requires a large initial download before it can be used, as it's an entirely offline experience and does not rely on cloud services to function. Without this download, Windows Recall isn't able to run. 

Windows Recall cannot run "secretly" in the background

There is a visual indicator always on-screen when Recall is active. (Image credit: Microsoft)

 

One big conspiracy theory I've heard is that Microsoft will automatically enable Windows Recall in the background without the user knowing. This isn't possible, as Windows Recall places a permanent visual indicator in the Taskbar's system tray when it's enabled. 

 

Additionally, for Windows Recall to be automatically enabled, it would need to download that large initial patch to even function. This is all to say that Windows Recall won't be randomly enabled on your computer without your knowledge. There are visual indicators permanently in view when Recall is active. 

You can choose what Windows Recall even sees

You can filter out websites and apps, which works in the most popular browsers. (Image credit: Microsoft)

 

Windows Recall has built-in filtering options that allow users to control exactly what Windows can see and store. If you don't want Windows Recall to take snapshots of a particular app or website, you can filter those out with just a few clicks. If Recall happens to capture something you weren't expecting, you can immediately delete the snapshot directly within the Recall app.

 

You can even pause snapshots whenever you like, just by selecting the Windows Recall icon that's permanently present on the Taskbar. You can also choose how frequently Windows Recall deletes old snapshots, and limit the amount of storage it takes up on your PC. Windows Recall also cannot see DRM content, or any private browsing sessions in Edge, Chrome, Opera, and Firefox.

There are legitimate concerns

Microsoft is doing everything it can to assure users that Windows Recall is safe to use, but that doesn't mean there are no concerns. The biggest concern is an intruder gaining physical access to your device while you're logged in. If that happens, yeah, you're kinda screwed. Microsoft could remedy this in the future with the option to enable Windows Hello unlock on the Recall app, which would keep your snapshots safe in this scenario.

 

It's also good to be skeptical of Microsoft and their claims. With that said, I think it would be wild for Microsoft to outright be lying about not upload Recall data to the cloud, as that's one of the first things people are going to check for. It will be very easy to prove if it is or isn't sending personal data to Microsoft.

 

Source

 

Hope you enjoyed this news post, feedback and Likes welcome