Microsoft Recall AI feature raises privacy concerns over screenshot capture
Microsoft's Recall feature for Windows 11 continuously captures and stores screenshots of user activity with AI analysis. Security researchers warn that the feature's collateral capture of non-consenting users' data and potential vulnerability to malware pose privacy risks despite Microsoft's built-in security measures and opt-in design.
What happened
Microsoft's Recall feature for Copilot+ PCs running Windows 11 continuously captures and stores screenshots of everything displayed on screen, analyzing them with AI and storing them locally for later retrieval through natural language searches.
The feature creates 'collateral capture' issues where information from other people shared through screen sharing or video chats gets stored in the database without their consent. If one user has Recall enabled, it captures private messages and data from other users who never agreed to be recorded.
Reported impact
Security researchers have raised concerns that screenshot databases could become targets for malware and potentially accessible to law enforcement. The feature captures sensitive information including private messages, emails, photos, and financial documents.
Index analysis
Microsoft states the feature is opt-in and has made updates to enhance user control through pause and deletion functions. However, security experts warn these measures do not fully address privacy risks from collateral data capture of non-consenting users.
Classification
Sources and evidence
Sources not yet published
This record was researched and written by the Index from original reporting. Its sources are still being verified by an editor, and they are listed here once that check is complete. Until then the record carries no reviewer.