Skip to content

Back to the record

Aug 1, 2025Confirmed

Microsoft's Windows Recall Allegedly Stores Passwords and Social Security Numbers in Preview Mode

Rogue: Caused harmAI loose in the worldData exfiltrationDERIVED

Approved by person, Oct 11, 2026. How entries are approved

Showing full summaries.

Microsoft's Windows Recall, an AI-powered screenshot and retrieval tool for Copilot+ PCs, was allegedly still capturing sensitive information such as passwords, Social Security numbers, and bank details despite a built-in "filter sensitive information" feature. Independent testing reportedly found the filter failed in multiple cases. Microsoft reportedly classified Recall as a preview feature and said improvements were in progress.

What this means for youAt home, Recall may keep screenshots of your passwords, bank details and ID numbers on your PC, where others could find them. At work, this could put customer or company data at risk. Check whether Recall is turned on in Windows settings and turn it off if you handle sensitive information.

Sources

Data from the AI Incident Database (incidentdatabase.ai), licensed CC BY-SA 4.0 (https://creativecommons.org/licenses/by-sa/4.0/). McGregor, S. (2021) Preventing Repeated Real World AI Failures by Cataloging Incidents: The AI Incident Database. IAAI-21.

Source data license: CC BY-SA 4.0 (database). Report contents keep their own rights; reports.text, submissions, images and videos are excluded from the data license.

rogue:R4

Covered by snapshot 45

da93f03b406f409940d0a6ef47b526607f82ebf457d98f69299b88aceede576a

This entry is record number 2054. It has not been edited since it was approved; the hash above would not match if it had. How to verify

Microsoft's Windows Recall Allegedly Stores Passwords and Social Security Numbers in Preview Mode | Vigilo AI Watch