Microsoft Enhances Privacy and Security Features in Recall for Copilot+ PCs
ICARO Media Group
The company aims to improve privacy and security by implementing new requirements and encryption measures.
Last month, Microsoft faced significant backlash from customers after unveiling the Recall feature. As a result, the company has decided to make the feature opt-in, giving users more control over enabling it. By default, Recall will now be turned off, requiring users to proactively choose to activate it.
To enhance privacy, Microsoft will also introduce Windows Hello verification to ensure users are physically present in front of their computer before enabling and using Recall. This additional layer of authentication will require users to authenticate their identity using Windows Hello before accessing their Recall timeline and search functionalities.
Furthermore, Microsoft plans to enhance the security of the search index database by implementing Windows Hello Enhanced Sign-in Security (ESS). This additional encryption protection will allow access to encrypted data only after successful authentication.
Previously, Microsoft claimed that the Recall databases were secure since they were encrypted by Bitlocker and decrypted upon user login to Windows 11. However, malware on a computer could access the decrypted database if running after user login. With the upcoming changes, Recall data will remain encrypted until users authenticate with Windows Hello, providing an extra level of security.
These privacy and security updates will be rolled out to customers with Copilot+ PCs when Recall (preview) is launched on June 18. It is still unclear whether the feature will be disabled by default in corporate environments, an issue that enterprise customers raised following the initial announcement.
Recall is designed to help users access past information on their computers through a simple search function. Screenshots of the active window are taken every few seconds, and Windows activities are recorded by an on-device Neural Processing Unit (NPU) and an AI model for up to three months. The extracted data is then saved in a semantic index, allowing users to conveniently browse their screenshot history or search using natural language queries.
As of now, Recall is only available on Copilot+ PCs with Snapdragon X ARM processors. However, Microsoft is actively working on making it compatible with Intel and AMD CPUs.
Microsoft's commitment to prioritizing security has been reinforced by CEO Satya Nadella, who emphasized the importance of choosing security over other priorities. The company's focus on improving platform quality and capability aligns with its mission to protect customers' digital estates and build a safer digital world.
Overall, the updates to Recall for Copilot+ PCs demonstrate Microsoft's dedication to addressing privacy concerns and enhancing security measures to better serve its users.