Microsoft launches security updates for its Recall feature, allowing users to uninstall it

Microsoft has released major security and privacy updates to its Recall feature, initially delayed from its planned June launch with the first Copilot+ PCs. Recall is now an opt-in feature, allowing users to activate it via clear "yes" or "no" buttons. Unlike previous indications, Recall can now be fully uninstalled, including all associated AI models.

To address security concerns, Recall's encryption is now tied to the Trusted Platform Module (TPM) and requires Windows Hello authorization for access to stored data. Data processing occurs in a virtualization-based security enclave, isolating sensitive tasks in a virtual machine. The app outside this environment is safeguarded by anti-malware processes to protect against malicious kernel drivers.

The updates also enable users to filter out specific apps and websites, ensuring sensitive content like passwords and credit card information is excluded. Users can selectively delete data from specific times, apps, or websites, or remove everything at once. Recall will only be installable on Copilot+ PCs, enforcing hardware requirements such as BitLocker, VBS, and kernel DMA protections. The updated version will be available to Windows Insiders starting in October, with no timeline yet for general release.