If you’re looking for a clear, no-nonsense walkthrough of the Windows 11 Recall feature setup, you’ve landed in the right place. Microsoft’s controversial AI-powered memory tool has matured significantly in 2026, and the latest Windows 11 25H2 Recall build introduces tighter privacy controls, encrypted snapshot storage, and granular filtering options that finally make the feature usable for privacy-conscious users. In this Hawkdive guide, we’ll walk through enabling Recall on a Copilot+ PC, configuring it safely, managing what it captures, and disabling it entirely if you change your mind. Whether you’re a power user or just curious, you’ll leave knowing exactly how Recall behaves on your machine.
What Is Windows 11 Recall and How Does It Work in 2026?
Recall is Microsoft’s AI timeline for Windows — a feature that periodically captures encrypted snapshots of your screen and indexes them locally using on-device AI models. The idea is simple: instead of remembering where you saw a recipe, an email, or a chart, you can type a natural-language query like “that blue spreadsheet about Q2 revenue” and Recall surfaces the moment.
In 2026, all processing happens on the Neural Processing Unit (NPU) of your Copilot+ PC. Snapshots never leave the device by default, and they’re stored inside a Virtualization-Based Security (VBS) enclave protected by Windows Hello biometrics. This is a major shift from the original 2024 preview, which faced heavy criticism for storing data in plain text.
Recall now integrates with the Windows search bar, File Explorer’s timeline view, and Copilot’s contextual suggestions. It’s powerful — but it’s also opt-in, and understanding the controls is essential before you flip the switch.
Key Components You Should Know
- Snapshot engine: Captures screen content at adjustable intervals.
- Semantic index: An on-device vector database that powers natural-language search.
- Filter list: Apps, websites, and content types you can exclude.
- Encrypted vault: A secure container unlocked only via Windows Hello.
System Requirements and Compatibility Check
Before configuring Recall, you need to confirm your hardware supports it. Recall is exclusive to Copilot+ PCs — machines built around NPUs delivering at least 40 TOPS (trillions of operations per second). That includes devices powered by Qualcomm Snapdragon X Elite/Plus, Intel Core Ultra Series 2 (Lunar Lake), and AMD Ryzen AI 300 chips.
Beyond the NPU, you’ll need 16 GB of RAM minimum, 256 GB of storage (with at least 50 GB free for snapshot retention), Secure Boot enabled, BitLocker active on the system drive, and Windows Hello configured with either a fingerprint reader or IR camera. If any of these are missing, the Recall toggle in Settings will be greyed out.
If you’re still evaluating whether the hardware is worth it, take a look at this in-depth breakdown of Microsoft Copilot+ PCs in 2026 and whether they’re worth the upgrade before you commit. It covers real-world AI performance benchmarks that directly affect how snappy Recall will feel on your machine.
How to Verify Your PC Is Eligible
- Open Settings > System > About.
- Look for the “Copilot+ PC” badge under Device specifications.
- Open Task Manager > Performance tab and confirm an “NPU 0” entry appears.
- Check Windows Update to ensure you’re on build 26200 or later (25H2 baseline).
Step-by-Step Windows 11 Recall Feature Setup
Now for the main event. Setting up Recall correctly takes about ten minutes, and getting the privacy settings right from the start saves headaches later. Follow these steps in order — don’t skip the filtering stage.
- Open Settings by pressing Win + I.
- Navigate to Privacy & security > Recall & snapshots.
- Toggle Save snapshots to On. You’ll be prompted to authenticate with Windows Hello.
- Review the on-screen consent dialog carefully — it explains exactly what’s captured and where it’s stored.
- Set your storage limit. Options range from 25 GB to 150 GB. Smaller limits mean older snapshots are pruned faster.
- Define your retention period (30, 60, 90, or 180 days).
- Open Filter apps and websites and add anything sensitive — banking sites, password managers, work tools, messaging apps.
- Enable Filter sensitive information to automatically skip snapshots containing credit card numbers, passwords, and ID fields.
- Click Save. Recall will begin indexing within a few minutes.
Pro tip: Add your browser’s private/incognito mode to the filter list as a belt-and-braces measure. Even though InPrivate browsing is excluded by default in 25H2, explicitly listing it gives you peace of mind.
Configuring Copilot+ Recall Privacy the Right Way
The biggest concern around Copilot Plus Recall privacy isn’t the feature itself — it’s accidentally capturing content you didn’t intend to. The 25H2 update introduces several layers you should configure thoughtfully.
First, enable Presence-based pausing under the Recall settings. This stops snapshots when your IR camera detects someone other than you looking at the screen — perfect for shared offices or coffee shops. Second, turn on Application allowlisting mode if you only want Recall active in a handful of apps (say, Word and Edge) rather than everywhere.
Third, review the Export and share permissions. By default, no app can read Recall data, but some productivity tools may request access. Treat these requests like microphone or location permissions — grant sparingly. If you’re security-minded, the principles here mirror what we cover in our guide to iOS app privacy snooping and how to see what apps access, which applies the same “trust nothing by default” approach to a different platform.
Recommended Filter List for Most Users
- Banking and financial websites (chase.com, paypal.com, your local bank).
- Password managers (1Password, Bitwarden, Dashlane desktop apps).
- Healthcare portals and patient records.
- Encrypted messaging apps (Signal, WhatsApp Desktop).
- Corporate VPN dashboards and admin consoles.
- Tax preparation and accounting software.
Managing Snapshots, Searching, and Daily Use
Once Recall has been running for a day or two, you can start interacting with it. Press Win + J to open the Recall interface — a horizontal timeline scrubber along the bottom of your screen. Drag the slider to revisit any moment, or use the search bar at the top.
Natural-language queries work surprisingly well. Try “PDF I read yesterday morning,” “the chart with the green bars,” or “email from Sarah about the meeting.” Recall returns ranked thumbnail results, and clicking one launches a preview with the option to jump back to the originating app if it’s still installed.
To delete individual snapshots, hover over a thumbnail in the timeline and click the trash icon. To wipe a time range, go to Settings > Recall & snapshots > Delete snapshots and pick “Last hour,” “Last 24 hours,” or “All.” You can also right-click any app in the taskbar and choose Forget this in Recall to purge everything related to that app.
For advanced users who want to script snapshot management or automate filter updates across multiple machines, our walkthrough on how to use Windows 11 25H2 PowerShell scripts to automate tasks includes ready-made cmdlets for the Recall management API.
How to Disable Windows Recall Completely
If you’ve tried Recall and decided it’s not for you — or if your IT department requires it off — disabling it is straightforward. There are two methods depending on how thoroughly you want to remove it.
Method 1: Turn Off via Settings (Reversible)
- Open Settings > Privacy & security > Recall & snapshots.
- Toggle Save snapshots to Off.
- Click Delete all snapshots to purge the existing index.
- Confirm with Windows Hello.
Method 2: Remove the Recall Component Entirely
- Open Settings > System > Optional features.
- Scroll to Recall in the installed features list.
- Click the three-dot menu and select Uninstall.
- Restart your PC to finalise removal.
Group Policy administrators can enforce this organisation-wide by setting Computer Configuration > Administrative Templates > Windows Components > Windows AI > Disable Recall to Enabled. The policy locks the feature off and hides it from end users.
Warning: Uninstalling Recall removes the semantic index permanently. If you reinstall later, you’ll start with an empty timeline — there’s no way to recover old snapshots.
Troubleshooting Common Recall Problems
Recall is stable in 25H2, but a few quirks still trip people up. Here are the most common issues and their fixes.
- Recall toggle is greyed out: Your device isn’t recognised as a Copilot+ PC, BitLocker is off, or Windows Hello isn’t enrolled. Address each in turn.
- Snapshots aren’t appearing: Check that the storage limit hasn’t been hit and that the Recall service (RecallSvc) is running in services.msc.
- Search returns no results: The semantic index may still be building. First-time indexing can take up to 24 hours of active use.
- High NPU usage: Normal during initial indexing. If it persists beyond two days, restart the Recall service or reset the index from Settings.
- Windows Hello prompts loop: Update your biometric drivers via Device Manager and re-enroll your fingerprint or face.
If you also run a Mac alongside your Windows machine and want to compare on-device AI experiences, our step-by-step guide to setting up Apple Intelligence on macOS Sequoia 15.5 is a useful side-by-side read — Apple’s approach to local AI privacy shares philosophy with Microsoft’s revamped Recall but differs significantly in implementation.
FAQ
Is Windows Recall safe to use in 2026?
Yes, with caveats. The 25H2 implementation encrypts all snapshots inside a VBS enclave, requires Windows Hello authentication for every access, and processes data exclusively on-device. That said, anyone with your biometric login can read your timeline, so don’t enable it on a shared device. Always configure the filter list before turning Recall on for the first time.
How do I turn off Recall on Windows 11 25H2?
Open Settings, go to Privacy & security, select Recall & snapshots, and toggle “Save snapshots” to Off. Click “Delete all snapshots” to remove existing data. For complete removal, uninstall Recall from Settings > System > Optional features and restart your PC.
Which PCs support the Recall feature?
Only Copilot+ PCs with an NPU rated at 40+ TOPS support Recall. That includes laptops and desktops powered by Qualcomm Snapdragon X Elite/Plus, Intel Core Ultra Series 2 (Lunar Lake), and AMD Ryzen AI 300 processors. You also need 16 GB of RAM, BitLocker enabled, Secure Boot active, and Windows Hello configured.
How do I delete Recall snapshots?
You have three options. Hover over individual thumbnails in the Recall timeline and click the trash icon to remove single snapshots. Use Settings > Recall & snapshots > Delete snapshots to wipe a time range. Or right-click an app in the taskbar and choose “Forget this in Recall” to purge everything tied to that application.
Final Thoughts
The Windows 11 Recall feature setup in 2026 is dramatically better than its rocky 2024 debut. With on-device processing, encrypted storage, presence detection, and granular filters, it’s now a genuinely useful productivity tool — provided you take ten minutes to configure it thoughtfully. The key is treating Recall like any other powerful privacy-sensitive feature: opt in deliberately, exclude what you don’t want captured, and review your snapshot retention periodically.
For more deep-dives, check out our review of whether Microsoft Copilot+ PCs are worth the upgrade in 2026 to see how Recall performs across different hardware, or explore our Windows 11 25H2 PowerShell automation scripts guide if you want to manage Recall settings programmatically across multiple devices.
