Microsoft’s upcoming AI feature, Recall, has sparked significant security concerns. Slated for release on June 18th as part of the new Copilot Plus PCs, Recall is designed to capture screenshots of all user activity on a PC, using local AI models to allow quick search and retrieval. Cybersecurity expert Kevin Beaumont has identified potential flaws after testing the feature. Beaumont’s findings reveal that “Recall” stores data in an unencrypted SQLite database within the user’s folder, posing a risk of easy data extraction by malware.
Windows Recall does not moderate content, potentially exposing sensitive information like passwords or financial details. Microsoft insists “Recall” is optional and includes privacy controls.