Microsoft's highly publicized Windows Recall feature is now being distributed, rolling out specifically to all new Copilot+ PCs. This function operates as an on-device digital time machine, designed to help users instantly retrieve past activity on their computer. Whether you frequently need to reference a past action or simply seek efficiency, the Recall feature promises to enhance productivity through a searchable historical record. Here is a comprehensive overview of how Microsoft Recall works and its critical security controls.
How Windows Recall Functions
The Recall feature captures periodic snapshots of your desktop screen, logging all past activity, including applications launched and websites visited. This proprietary semantic search engine processes these visual snapshots, allowing users to search naturally for content. Once the required past moment is located, users can click on the snapshot to directly revert to that specific context, making it a highly advanced iteration of traditional Windows Search with native image and content comprehension.
For example, if you recall seeing an unfamiliar word or a specific image on a website but cannot remember the source, typing a relevant term into the Recall search bar will display all instances, messages, or visuals related to that query.
Addressing Privacy and Security Concerns
The continuous recording of screen activity naturally raises significant privacy concerns. Microsoft has responded by making Recall an opt-in feature and implementing several security measures:
- On-Device Security: All data is stored exclusively on the local device, secured by end-to-end encryption, and housed within a virtual machine to prevent malware access.
- Access Control: Opening the Recall utility requires authentication via Windows Hello (biometrics or PIN), ensuring that only the authorized user can access the historical data, even if the PC is compromised.
- Sensitive Data Filtering (Default): Recall employs a default filter to block the capturing of sensitive data like passwords, credit card numbers, and national IDs.
- Exclusion Rules: Users can manually exclude specific applications and websites from being monitored, or pause Recall entirely when engaging in highly confidential tasks.
- Remote Desktop Exclusion: Snapshot capture is automatically suppressed when using remote desktop clients such as VMWare, MSTSC, or Azure Virtual Desktop.
Should sensitive data be accidentally captured (e.g., embedded content), users are provided with the capability to delete content related to specific apps or websites.
Initiating and Operating Windows Recall
Recall must be explicitly enabled by the user upon first restart after updating a Copilot+ PC.
To access the feature:
- Use the keyboard shortcut Windows + J.
- Click the dedicated taskbar icon.
- Open the Recall application from the Start menu.
Each access attempt requires immediate authentication via Windows Hello.
Key Functionalities of Windows Recall
1. Timeline Navigation
The core interface presents a chronological timeline, enabling users to visually scroll through snapshots of past activity. Users can configure settings to retain snapshots for up to 180 days, allowing extensive historical review.
2. Advanced Search Capabilities
Search utilizes the semantic engine to find specific content—be it a link, a visual element, or a message—by matching keywords to snapshot content. Search results are prioritized into text matches and visual matches. The search can also be filtered by specific applications (e.g., Slack, Chrome, or Outlook) and supports voice input.
3. Text and Image Extraction (OCR)
Functioning similarly to an Optical Character Recognition (OCR) extractor, Recall allows users to select and copy text or images directly from any snapshot, enabling quick reuse or external searching of content previously viewed.
4. Granular Deletion and Filtering
Users can delete individual snapshots or remove all history associated with a specific application or even a particular website within an app (e.g., deleting all X/Twitter snapshots captured via Chrome).
5. Exclusion Management
Settings allow precise configuration of exclusions for apps and websites, which is highly recommended for sites containing sensitive personal or financial information. The feature will automatically stop capturing snapshots for excluded applications.
6. Pausing and Uninstallation
Recall can be temporarily paused via the taskbar button, indicated by a slash icon over the Recall symbol. For permanent removal:
- Search for "Turn Windows features on or off" in the Start menu.
- Locate and uncheck the Recall option.
- Restart the PC to complete uninstallation.
System Requirements for Windows Recall
Recall is currently exclusive to Copilot+ PCs, identifiable by a dedicated Neural Processing Unit (NPU) and often a Copilot key. It is not supported on standard PCs without the required NPU hardware.
Minimum system specifications include:
- A Copilot+ PC meeting the secure core standard.
- A 40 TOPs NPU.
- 16GB RAM and 8 logical processors.
- 256GB storage capacity, with at least 50GB of free space.
- Mandatory: BitLocker, Device Encryption, and Windows Hello Enhanced signing with biometrics must be enabled.
Note that snapshot capture ceases automatically if the device has less than 25GB of available storage space. The minimum configurable storage size for Recall data is 30GB, with a default setting of 150GB. Browser compatibility includes Microsoft Edge, Firefox, Opera, Google Chrome, and other Chromium-based browsers, though filtering specific websites is limited in unsupported browsers like Brave.
Frequently Asked Questions (FAQ)
What is the minimum storage requirement for Windows Recall to remain active?
Windows Recall requires a minimum of 256GB storage capacity and at least 50GB of free storage to run. If the free space drops below 25GB, snapshot capture will automatically stop.
Is Windows Recall accessible by Microsoft or stored in the cloud?
No. Microsoft explicitly states that all Recall data is stored locally on your device, secured by end-to-end encryption, and is not accessible by the company or stored in the cloud.
How can I quickly pause the Windows Recall feature?
You can quickly pause Recall by clicking the Recall icon in the taskbar and selecting the "pause until tomorrow" option. A slash icon will appear over the Recall symbol indicating that recording is temporarily stopped.