Get the latest tech news

Security researcher discovers Microsoft's Recall tool is woefully insecure


The security story around Windows Recall hits a brick wall as it's discovered the data it collects is unencrypted.

Security researcher Kevin Beaumount has documented his findings on Windows Recall, and has revealed that the tool stores its data in an SQLite plaintext database. All your files are unencrypted when you're using your PC, yet most people aren't constantly concerned about malware potentially scraping their personal documents, pictures, downloads, videos, and synced cloud folders. If you're concerned about it potentially being enabled secretly in the background down the line, Microsoft has built-in security measures to prevent this.

Get the Android app

Or read this on Hacker News

Read more on:

Photo of Microsoft

Microsoft

Photo of Security researcher

Security researcher

Photo of Recall tool

Recall tool

Related news:

News photo

Microsoft blocks Windows 11 workaround that enabled local accounts

News photo

Microsoft hit with EU privacy complaints over schools’ use of 365 Education suite

News photo

Microsoft confirms layoffs in mixed reality but will keep selling HoloLens 2 headsets