Microsoft’s September 2026 Windows 11 servicing updates refresh the AI components used by Recall and other Copilot+ PC experiences. They do not document a new Recall-specific CVE or a change that uploads Recall snapshots to Microsoft. Recall remains an opt-in, locally encrypted feature controlled by the user or an organization’s Windows policies.
What changed in the September 2026 updates?
The change is an AI-component refresh delivered through the normal Windows servicing stack. Microsoft lists the following packages:
| Release | KB | Builds | AI component version | Scope |
|---|---|---|---|---|
| September 8, 2026 security update | KB5124008 | 26200.9445 and 26100.9445 | 1.2608.951.0 | Copilot+ PCs only |
| September 22, 2026 preview update | KB5124010 | 26200.9550 and 26100.9550 | 1.2608.951.0 | Copilot+ PCs only |
Microsoft says these AI components are not installed on ordinary Windows PCs or Windows Server. The update pages describe a component refresh, not a new Recall data-sharing model or a newly assigned Recall vulnerability.
What Recall does after the update
Recall is an opt-in Windows 11 feature for eligible Copilot+ PCs. When enabled, it periodically saves images of the active screen. On-device AI indexes those snapshots and their derived context so you can search for something you previously viewed.
#1 Best Overall
- 2K IPS TOUCHSCREEN DISPLAY - 1920 x 1200 resolution delivers incredible detail, wide-viewing angles, and lifelike color reproduction
- AMD RYZEN AI 5 430 PROCESSOR - Unlock powerful AI-driven experiences with a Copilot+ PC powered by an AMD Ryzen AI processor designed to enhance creativity, simplify and streamline your day, and give you valuable time back to do more
- ENJOY UP TO 19 HOURS AND 30 MINUTES OF BATTERY LIFE - HP Fast Charge restores battery from 0 to 50% in approximately 45 minutes
- AMD RADEON 840M GRAPHICS - Built in for thrilling gaming performance, high resolution display support and hardware accelerated encoding with or without a discrete graphics card
- STORAGE AND MEMORY - 512 GB PCIe Gen4 NVMe M.2 SSD offers fast speed and efficient storage; and 16 GB DDR5 RAM memory boosts performance with higher bandwidth
The snapshots and related context stay encrypted on the PC’s local drive. Microsoft’s support wording is explicit: “Recall does not share snapshots or associated data with Microsoft or third parties.” You can pause saving, delete stored snapshots, or disable the feature.
Can your Copilot+ PC run Recall?
Recall requires more than the Copilot+ branding alone. Microsoft’s stated minimums are:
| Requirement | Minimum or condition | Why it matters |
|---|---|---|
| Neural processing unit | 40 TOPS NPU | Provides the local AI processing capacity required by Copilot+ experiences. |
| Memory | 16 GB RAM | Meets Microsoft’s baseline for the feature. |
| Storage | 256 GB total storage | Required device capacity. |
| Free space to enable | At least 50 GB free | Recall will not be enabled below this threshold. |
| Encryption | Device encryption or BitLocker | Protects data stored on the drive. |
| Sign-in security | Windows Hello Enhanced Sign-in Security (ESS) with at least one biometric method | Authenticates access to Recall and helps protect its keys. |
After activation, saving pauses automatically if available free storage drops below 25 GB. That pause protects the rest of the system from being crowded out by snapshots; it does not delete existing snapshots.
Rank #2
- It's possible on your Intel AI PC - Equipped with an Intel Core Ultra 7 processor (Series 2), the Aspire 14 Al brings new AI experiences in productivity, creativity and security through a combination of CPU, GPU and NPU. This combo delivers the speed and responsiveness to handle any task with ease -along with all-day battery life of up to 22 hours and smooth multitasking performance. (Battery life was measured under specific test settings pursuant to video playback scenarios)
- New AI Superpowers - Discover the power of Recall (preview), improved Windows search, and Click to Do (preview) on Copilot plus PCs. Effortlessly locate past content, perform natural searches, and interact with text and images – all while ensuring your data remains private and you stay productive. ( Copilot plus PC experiences vary by device and market and may require updates continuing to roll out through 2025; Recall and Click to Do will be coming to European Economic Area later in 2025; timing varies. See aka.ms/copilotpluspcs)
- Indulge Your Eyes - Immerse yourself in a world of vibrant detail with a breathtaking 14" WUXGA 1920 x 1200 ultra high-resolution display. This expansive, panoramic screen is your canvas for entertainment, artistic creativity, and captivating AI experiences that will leave you in awe.
- Smart and Effortless AI - Intelligent AI solutions are at your fingertips with AcerSense. Streamline settings, optimize your video presence, and elevate communication - all with intuitive AI that’s easy to use and enhances productivity seamlessly. Just press the AcerSense key on the backlit keyboard for instant access and experience the magic of AI
- Style and Substance - The Aspire 14 Al boasts a sleek, durable, and lightweight aluminum chassis, with an ultra-modern design and a 180° lie-flat hinge for versatile and convenient use on the go. Ideal for work, study, or creative pursuits wherever you are.
How Recall protects its data
Microsoft says Recall’s encryption keys are protected using three device security layers:
Quick wins for a faster PC:
Clear out junk files and repair common Windows errorsFree Scan →Scan for outdated or missing drivers - takes under a minuteDriver Scan →- TPM: the hardware security module on the PC.
- Windows Hello ESS identity: the user’s biometric-backed sign-in identity.
- Virtualization-based Security (VBS) Enclave: an isolated environment for sensitive operations.
This design keeps processing and storage on the PC, but it also means the endpoint must be protected like any device holding a detailed history of on-screen activity. Anyone who gains an already authenticated Windows session could potentially see whatever snapshots that account is allowed to access.
How to pause, delete, or turn off Recall
On a current Windows 11 Copilot+ PC, use the Recall settings page:
Rank #3
- [NEXT-GEN AI PERFORMANCE] Powered by the Intel Core Ultra 5 255U processor with integrated NPU and a dedicated Copilot key, this laptop accelerates daily AI tasks, smart document drafting, and seamless multi-app workflows without system lag.
- [EXPANDED 17.3" WORKSPACE] The massive 17.3-inch anti-glare display offers crisp visuals and expansive screen real estate, allowing effortless multi-window multitasking, side-by-side document editing, and reduced eye strain during extended work sessions.
- [HIGH-SPEED DDR5 & SSD STORAGE] Equipped with up to 64GB high-frequency DDR5 RAM and a fast 2TB PCIe NVMe M.2 SSD, experience rapid boot times, instant file transfers, and smooth execution across memory-intensive business applications.
- [TAILORED FOR PROFESSIONALS] Features a sleek durability-focused chassis, HD privacy camera, noise-reduction dual microphones, Wi-Fi 6, USB Type-C, and HDMI ports, making it a reliable workstation for remote employees, business executives, and students.
- [NEXT-GEN STAMINA: INTELLIGENT BATTERY LIFE] Fuel your day with up to 8 hours of uninterrupted office productivity. Driven by an advanced high-capacity battery and smart power optimization, your creative and professional workflow stays seamless from start to finish.
- Open Settings.
- Go to Privacy & security and open Recall & snapshots.
- To stop new captures temporarily, use the pause control for snapshot saving.
- To remove stored history, choose the option to delete snapshots and select the time range or all snapshots offered by Windows.
- To stop the feature, turn off snapshot saving or the Recall feature itself, then confirm the prompt. New snapshots will no longer be created.
Windows may show slightly different wording as Copilot+ servicing evolves. If a work or school administrator controls the setting, the switch can be unavailable; in that case, the organization’s policy determines whether Recall can run.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Is Recall safe for work laptops?
There is no universal yes-or-no answer. Recall’s local encryption, Windows Hello requirement, and opt-in activation reduce exposure compared with a design that routinely uploads screenshots, but the feature still creates a searchable record of activity on the endpoint.
Controls administrators can use
Microsoft provides Windows policy settings and Microsoft Intune controls to:
Rank #4
- FULL HD IPS DISPLAY - Enjoy vibrant, crystal-clear images with 178-degree wide-viewing angles
- AMD RYZEN 3 30 PROCESSOR - Everyday performance you can count on; Multitask, stream, game casually, and edit photos smoothly with responsive power and vibrant HDR visuals
- ENJOY UP TO 14 HOURS AND 15 MINUTES OF BATTERY LIFE - HP Fast Charge restores battery from 0 to 50% in approximately 45 minutes
- AMD RADEON 610M GRAPHICS - Experience smooth entertainment; Built for streaming and multitasking, enjoy realistic visuals and efficient performance for work and play
- STORAGE AND MEMORY - 512 GB PCIe NVMe M.2 SSD offers fast speed and efficient storage; and 8 GB LPDDR5 RAM memory boosts performance with higher bandwidth
- Allow or prevent users from enabling Recall.
- Control whether snapshots may be saved.
- Apply a consistent configuration across managed Copilot+ PCs.
Organizations handling regulated information should decide first whether screen history is acceptable, then pilot the policy with representative applications. They should also verify device encryption, Windows Hello ESS enrollment, account separation, and procedures for deleting snapshots when a laptop is reassigned or retired.
A separate September servicing issue
Microsoft also documented a Credential Guard problem affecting the secure channel between some domain-joined computers and on-premises Active Directory. That issue is part of the broader Windows update, not a Recall behavior change. Microsoft says it plans a future update that temporarily prevents Machine Identity Isolation enforcement while it improves the implementation. IT teams troubleshooting domain trust or authentication failures should treat that issue separately from Recall.
Quick Recap
What this update does not mean
- It does not make Recall available on ordinary Windows PCs or Windows Server.
- It does not change Recall from opt-in to automatic activation.
- It does not document a new Recall-specific CVE in the cited September update notes.
- It does not state that snapshots or associated Recall data are sent to Microsoft or third parties.
Practical checklist before enabling Recall
- Confirm the PC has a 40 TOPS NPU, 16 GB RAM, 256 GB storage, required free space, encryption, and Windows Hello ESS biometrics.
- Decide whether searchable screen history is appropriate for the account’s work.
- Review which users or devices may enable Recall through Windows policy or Intune.
- Test pausing and deleting snapshots, including the behavior when free space falls below 25 GB.
- Keep the Credential Guard domain-join issue in a separate troubleshooting track if authentication problems appear after the September update.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
Free tools Windows power users keep installed
One-click scans. No signup required.
