Exposed: Microsoft Recall

Microsoft Recall is an AI-powered feature for Windows Copilot+ PCs that continuously captures screenshots of everything a user does on their computer every few seconds and uses AI to make this visual history searchable through natural language queries. Announced in May 2024, Recall was immediately recognized as one of the most invasive consumer surveillance features ever proposed by a major technology company. Security researchers discovered that Recall stored screenshots in an unencrypted SQLite database accessible to any user or malware on the system, creating what was described as a pre-installed keylogger and screen capture tool that would be a goldmine for hackers and abusive partners. The feature would capture sensitive content including passwords, banking information, private messages, medical records, and intimate content visible on screen, storing months of visual activity history. The backlash was so severe that Microsoft delayed the feature, added encryption, and made it opt-in rather than enabled by default. However, the mere development of Recall revealed Microsoft strategic direction toward continuous desktop surveillance as a feature rather than a vulnerability. When Recall eventually launched in limited preview in late 2024, it included Sensitive Content Filtering and encryption, but the fundamental concept of capturing everything on screen every few seconds remained intact. Privacy advocates argue that no amount of security improvements can make continuous screenshot surveillance acceptable, and that Recall normalizes a level of personal computing surveillance that would have been considered spyware just years ago.