In response to security concerns, Microsoft is detailing how it has overhauled its controversial AI-powered Recall feature that creates screenshots of mostly everything you see or do on a computer. Recall was originally supposed to debut with\u00a0Copilot Plus PCs<\/a>\u00a0in June, but Microsoft has spent the past few months reworking the security behind it to make it an opt-in experience that you can now fully remove from Windows if you want.<\/p>\n<\/div>\n \u201cI\u2019m actually really excited about how nerdy we got on the security architecture,\u201d says David Weston, vice president of enterprise and OS security at Microsoft, in an interview with The Verge<\/em>. \u201cI\u2019m excited because I think the security community is going to get how much we\u2019ve pushed [into Recall].\u201d<\/p>\n<\/div>\n One of Microsoft\u2019s first big changes is that the company isn\u2019t forcing people to use Recall if they don\u2019t want to. \u201cThere is no more on by default experience at all \u2014 you have to opt into this,\u201d says Weston. \u201cThat\u2019s obviously super important for people who just don\u2019t want this, and we totally get that.\u201d<\/p>\n<\/div>\n A Recall uninstall option initially appeared on Copilot Plus PCs earlier this month, and Microsoft said at the time that it was a bug<\/a>. It turns out that you will indeed be able to fully uninstall Recall. \u201cIf you choose to uninstall this, we remove the bits from your machine,\u201d says Weston. That includes the AI models that Microsoft is using to power Recall. <\/p>\n<\/div>\n Security researchers initially found that the Recall database \u2014 that stores snapshots taken every few seconds of your computer \u2014 wasn\u2019t encrypted, and malware could have potentially accessed the Recall feature. Everything that\u2019s sensitive to Recall, including its database of screenshots, is now fully encrypted. Microsoft is also leaning on Windows Hello to protect against malware tampering.<\/p>\n<\/div>\n The encryption in Recall is now bound to the Trusted Platform Module (TPM) that Microsoft requires for Windows 11, so the keys are stored in the TPM and the only way to get access is to authenticate through Windows Hello. The only time Recall data is even passed to the UI is when the user wants to use the feature and authenticates via their face, fingerprint, or PIN.<\/p>\n<\/div>\n \u201cTo turn it on to begin with, you actually have to be present as a user,\u201d says Weston. That means you have to use a fingerprint or your face to set up Recall before being able to use the PIN support. This is all designed to prevent malware from accessing Recall data in the background, as Microsoft requires a proof of presence through Windows Hello.<\/p>\n<\/div>\n \u201cWe\u2019ve moved all of the screenshot processing, all of the sensitive processes into a virtualization-based security enclave, so we actually put it all in a virtual machine,\u201d explains Weston. That means there\u2019s a UI app layer that has no access to raw screenshots or the Recall database, but when a Windows user wants to interact with Recall and search, it will generate the Windows Hello prompt, query the virtual machine, and return the data into the app\u2019s memory. Once the user closes the Recall app, what\u2019s in memory is destroyed. <\/p>\n<\/div>\n \u201cThe app outside the virtualization-based enclave is running in an anti-malware protected process, which would basically require a malicious kernel driver to even access,\u201d says Weston. Microsoft is detailing its Recall security model and exactly how its VBS enclave works in a blog post today. It all looks a lot more secure than what Microsoft had planned to ship and even hints at how the company might secure Windows apps in the future.<\/p>\n<\/div>\n So, how did Microsoft nearly ship Recall in June without a high amount of security in the first place? I\u2019m still not super clear on that, and Microsoft isn\u2019t giving much away. Weston confirms that Recall was reviewed as part of the company\u2019s Secure Future Initiative that was introduced last year, but being a preview product, it apparently had some different restrictions. \u201cThe plan was always to follow Microsoft basics, like encryption. But we also heard from people who were like \u2018we\u2019re really concerned about this,\u2019\u201d so the company decided to fast-track some of the additional security work it was planning for Recall so that security concerns weren\u2019t a factor in whether someone wanted to use the feature. <\/p>\n<\/div>\n \u201cIt\u2019s not just about Recall, in my opinion we now have one of the strongest platforms for doing sensitive data processing on the edge and you can imagine there are lots of other things we can do with that,\u201d hints Weston. \u201cI think it made a lot of sense to pull forward some of the investments we were going to make and then make Recall the premier platform for that.\u201d<\/p>\n<\/div>\n Recall will also now only <\/em>operate on a Copilot Plus PC, stopping people from sideloading it onto Windows machines like we saw ahead of its planned debut in June. Recall will verify that a Copilot Plus PC has BitLocker, virtualization-based security enabled, measure boot and system guard secure launch protections, and kernel DMA protection.<\/p>\n<\/div>\n Microsoft has also conducted a number of reviews on the upgraded Recall security. The Microsoft Offensive Research Security Engineering (MORSE) team has \u201cconducted months of design reviews and penetration testing on Recall,\u201d and a third-party security vendor \u201cwas engaged to perform an independent security design review\u201d and testing, too.<\/p>\n<\/div>\n Now that Microsoft has had more time to work on Recall, there are some additional changes to the settings to provide even more control over how the AI-powered tool works. You\u2019ll now be able to filter out specific apps from Recall alongside the ability to block a custom list of websites from appearing in the database. Sensitive content filtering, which allows Recall to filter out things like passwords and credit cards, will also block health and financial websites from being stored. Microsoft is also adding the ability to delete a time range, all content from an app or website, or everything stored in Recall\u2019s database.<\/p>\n<\/div>\n Microsoft says it remains on track to preview Recall with Windows Insiders\u00a0on Copilot Plus PCs in October<\/a>, meaning Recall won\u2019t be shipping on these new laptops and PCs until it has been further tested by the Windows community.<\/p>\n<\/div>\n<\/div>\n