Latest VeraCrypt update blocks screenshots and screen recordings

Martin Brinkmann
Windows Software

The initial announcement of the AI feature Recall for Windows caused quite an uproar in the security community. Microsoft's idea was to introduce an AI tool in Windows that would take a snapshot of the desktop every five seconds, analyze what it displayed to allow the user to interact with the AI about it.

Problem was, in its hurry to get the AI feature out in the open, Microsoft forgot security. It turned out, that Recall was set to run by default, that the database that Recall used was not all that well protected. Additionally, despite Microsoft reassuring that Recall would not capture sensitive data, it turned out that it did (and still does).

Third-party developers of security software have started to introduce anti-screenshot functionality into their apps. The latest to introduce such a feature are the developers of VeraCrypt, an open source encryption software.

VeraCrypt 1.26.24, released on May 30th, 2025, introduces several changes and improvements. One of them is the new protection against screenshots and screen recordings on Windows.

Any attempt to capture the VeryCrypt program window after installation of the update hides the program window on the desktop. I have tested this with several screen capturing options, including my favorite tool PicPick, the Snipping Tool, pressing the Print-key, and several more.

This is the new default behavior. Windows users who do not want this may turn it off again. I had to turn the feature off to screenshot the new option in the VeryCrypt settings. Most users may want to keep it turned on, as it may also protect against malware running on the system that is designed to take screenshots.

VeraCrypt Screenshot and Recording protection

Here is how you disable the screenshot protection in VeraCrypt:

  1. Open the main VeraCrypt interface on the Windows system.
  2. Go to Settings > Performance / Driver configuration.
  3. Uncheck "Disable protection against screenshots and screen recording".
  4. Restart the PC.

A restart is required to complete the process. Similarly, if you want to turn on the protection again, you need to restart the PC after checking the box in the settings to complete the process.

The default behavior, the blocking of screenshots and screen recordings, can be changed with installation parameters. Just run the installer with the parameter DISABLESCREENPROTECTION=1 to disable the security feature.

Closing Words

The new screen protection feature is a welcome addition to VeraCrypt. Most users are not affected by the change, at least not negatively. Those who are can turn off the security feature at any time to restore the old status quo.

Now You: what is your take on apps implementing screenshot protections? Good security feature or something that you do not find useful? Feel free to leave a comment down below.

Comments

  1. screenshot my cat drinking blood from a turtle said on
    Reply

    “Latest VeraCrypt update blocks screenshots and screen recordings”

    And Signal (?) was another who blocked such things, right? (IIRC)

    Instead of fighting your OS, jump to Linux and enjoy the pleasures to be had.

    1. Guest said on
      Reply

      Linux has other downsides. Such as 10% chance to brick your install during updates, and lack of backward compatibility.

    2. fastboat said on
      Reply

      @screenshot my cat etc, Signal by default blocks screenshots (Recall and other) on Win 11. On Win 10 you can turn this on manually; go to File-Prefs-Privacy-Screen Security.

  2. OBEY said on
    Reply

    If you’re using O+O ShutUp, which is a good tool for turning off Windows spy/crapware (but always set a System Restore point first!), there are a couple of settings in there that allow you to easily disable Copilot.

  3. VioletMoon said on
    Reply

    After updates yesterday and reading your article, I was curious–

    In theory: “The Recall feature is exclusive to Copilot+ PCs, which are designed with enhanced security features like Microsoft Pluton security processor and Windows Hello Enhanced Sign-in Security (ESS)34. If your PC is not a Copilot+ PC, it is unlikely that the Recall feature is enabled.”

    https://answers.microsoft.com/en-us/windows/forum/all/how-to-check-whether-recall-function-is-on-with/7bcb33aa-3d18-4944-bd58-5c9689df64d3

    The Latitude 7480 I use most frequently is a definitely not a Copilot+ PC, however, I ran the PS command to see if the feature was “enabled” on my laptop–results:

    PowerShell 7.5.1
    PS C:\Users\********> DISM /Online /Get-FeatureInfo /FeatureName:Recall

    Deployment Image Servicing and Management tool
    Version: 10.0.26100.1150

    Image Version: 10.0.26100.1742

    Feature Information:

    Feature Name : Recall
    Display Name : Recall
    Description : Recall application.
    Restart Required : Possible
    State : Enabled

    Same results with CMD:

    Deployment Image Servicing and Management tool
    Version: 10.0.26100.1150

    Image Version: 10.0.26100.1742

    Feature Information:

    Feature Name : Recall
    Display Name : Recall
    Description : Recall application.
    Restart Required : Possible
    State : Enabled

    No registry key that I could find.

    Puzzled because I am running the LTSC version of Windows 11.

    In Settings/Privacy and Security/Screenshots and Screen Recording, All values are set to “On.”

    No need for “Recall” that I know of, so I turned off Screenshots/Screen Recording and disabled “Recall”:

    Deployment Image Servicing and Management tool
    Version: 10.0.26100.1150

    Image Version: 10.0.26100.1742

    Feature Information:

    Feature Name : Recall
    Display Name : Recall
    Description : Recall application.
    Restart Required : Possible
    State : Disabled

    All quite interesting–what is MS doing?

    Don’t trust this claim:

    “If your PC was purchased before June 18, 2024, it does not have Windows Recall.”

    or this one

    “It’s important to note that the feature isn’t enabled by default. It’s a feature you must enable manually.”

    Clearly, my laptop is much too old for “Recall,” and I would never manually enable the feature. Seems Redmond wants something that I am not willing to provide.

    Sources:

    https://answers.microsoft.com/en-us/windows/forum/all/how-to-check-whether-recall-function-is-on-with/7bcb33aa-3d18-4944-bd58-5c9689df64d3

    https://www.drygast.net/blog/post/disable_recall_windows_11_24H2

    https://support.microsoft.com/en-us/windows/retrace-your-steps-with-recall-aa03f8a0-a78b-4b3e-b0a1-2eb8ac48701c

    https://www.windowscentral.com/software-apps/windows-11/how-to-disable-windows-recall

    https://pureinfotech.com/uninstall-recall-windows-11/

    Thanks!

    1. MicrosoftSucksAtSoftware said on
      Reply

      Thanks, I checked mine just in case its reenabled and its removed.

      Image Version: 10.0.26100.4202

      Feature Information:
      Feature Name : Recall
      Display Name : Recall
      Description : Recall application.
      Restart Required : Possible
      State : Disabled with Payload Removed

      Custom Properties:
      (No custom properties found)
      The operation completed successfully.

Leave a Reply

By commenting, you accept our privacy policy and keep the discussion respectful and on topic.