> Microsoft states that "Recall snapshots are kept on Copilot+ PCs themselves, on the local hard disk, and are protected using data encryption on your device and (if you have Windows 11 Pro or an enterprise Windows 11 SKU) BitLocker." From the wording here, that looks like your snapshots will only be encrypted if you have Windows Pro or a business Windows code.

I don't think that's what their main page is saying, but it is ambiguous enough to be confusing.

For reference, the quote being referenced is "How is your data protected when you use Recall?" on this page: https://www.microsoft.com/en-us/windows/copilot-plus-pcs?r=1...

The parenthetical after the "and" is throwing people off. My interpretation of the sentence is that recall snapshots are protected using data encryption on your device, no matter the version of Windows 11. However, if you have Windows 11 Pro or the enterprise SKU, you gain the additional level of protection of using Bitlocker - which could mean that the key to encrypt those snapshots lives in the TPM (or not). It's just too ambiguous and needs clarification.

The support page for Recall (https://support.microsoft.com/en-us/windows/privacy-and-cont...) provides some clarification in this area that drives the point home:

> Snapshots are encrypted by Device Encryption or BitLocker, which are enabled by default on Windows 11. Recall doesn't share snapshots with other users that are signed into Windows on the same device. Microsoft can't access or view the snapshots.