Skip to content

update: Disable Windows Recall in gpedit guide #2932

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

update: Disable Windows Recall in gpedit guide #2932

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
11 changes: 11 additions & 0 deletions docs/os/windows/group-policies.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -127,6 +127,17 @@ This last setting disables OneDrive on your system; make sure to change it to **

- Improve inking and typing recognition: **Disabled**

#### Windows AI

<div class="admonition info" markdown>
<p class="admonition-title">Windows Recall</p>

Windows 11 recently introduced a feature called **Recall**, which records all your activity and creates a searchable archive of that activity history. This is a massive privacy vulnerability, because those archives can potentially store highly sensitive information (essentially anything displayed on your screen), and can be trivially accessed by local administrators or malicious actors with user-level access to your device.
Copy link
Contributor

@friadev friadev Apr 24, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Recall doesn't let other users access your info and it's stored encrypted, protected by the TPM and biometrics. It's definitely not true that it can be trivially bypassed. It also by default tries to exclude sensitive data like passwords and credit cards, and you can tell it to exclude certain sensitive apps like a web browser or messenger. I think info on how to disable it is fine but maybe some more info on the different settings and how to configure it might be useful as well.

Copy link
Member Author

@jonaharagon jonaharagon May 6, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

this is the only available setting related to Recall in gpedit as far as I can tell, so there are no additional configuration settings to talk about in this particular guide.


</div>

- Turn off saving snapshots of Windows: **Enabled**

#### Windows Error Reporting

- Do not send additional data: **Enabled**
Expand Down
Loading