How the new Microsoft Recall feature fundamentally undermines Windows security

How the new Microsoft Recall feature fundamentally undermines Windows security Kevin Beaumont · Follow Published in DoublePulsar · 4 min read · 2 hours ago 2 hours ago -- Listen Share

Yesterday, Microsoft CEO Satya Nadella sat down with the media to introduce a new feature called Recall, as part of their Copilot+ PCs. It takes screenshots of what you’re doing on constantly, by design:

The idea is it allows you to rewind back in time at the click of a button to see what you were doing at, say, 11pm two months ago. It also classifies almost everything you’re doing, seeing and typing. This is instantly searchable.

Microsoft’s store page for the PCs points out “It will not hide information such as passwords or financial account numbers [..]”

For example, if you log into online banking, your information around account numbers, balances, purchases etc will enter Recall’s database.

This fundamentally changes the relationship with you and your Microsoft Windows computer. It also introduces real risk to you, the customer. Let’s break down what is happening.