Microsoft makes Windows Recall opt-in, secures data with Windows Hello

Microsoft is tightening privacy and security for the Recall feature on Copilot+ PCs by making it opt-in, requiring Windows Hello enrollment and proof of presence to enable/use it, and implementing Enhanced Sign-in Security for just-in-time decryption alongside an encrypted search index. These changes address concerns that Recall data, previously accessible to malware after login due to BitLocker-only protection, could be exposed; now data remains encrypted until the user authenticates. The updates roll out June 18 with Copilot+ PCs, enterprise defaults remain unspecified, and Recall is currently limited to Snapdragon X devices with planned support for Intel and AMD CPUs.