How to password protect apps on Windows 11
Signing in protects your account. It does not protect the app that is already open on your screen when somebody else borrows your PC for a minute.
Windows 11 has no built-in setting that puts a password in front of a single desktop app. The options that ship with Windows either protect your whole account, protect files at rest, or, in the case of AppLocker, quietly fail to block anything at all on Home and Pro. To get a password prompt in front of one app while you stay signed in to your own account, you need a small third party app lock.
What Windows already gives you, and where each one stops
Every one of these is a real feature that solves a real problem. None of them solves this one.
| Built into Windows | What it actually does |
|---|---|
| AppLocker | Decides which programs a user may run at all. It never asks for a password, and on Home and Pro it does not even do that. See below. |
| A second user account | The closest real equivalent. It works, but you have to sign out and back in, and you lose everything you had open. |
| Microsoft Family Safety | Built for a child's account: app limits and age filters set by a parent, rather than a password prompt for yourself. |
| BitLocker, encrypted folders | Protect data at rest. Once you are signed in and the drive is unlocked, everything on it is open. |
| Windows key and L | Locks the whole session. Correct and free, but it is the blunt version: everything goes away, not just the one app you cared about. |
The AppLocker trap
AppLocker is where most search results send you, and it is worth knowing exactly why it disappoints.
Microsoft removed the Windows edition checks for AppLocker in KB5024351, so the policy interface now appears on editions that never used to show it. What did not change is enforcement: Home editions do not include the components that carry a policy out. The service runs, Event Viewer reports that your policy was applied, and nothing is ever blocked. There is a thread on Microsoft's own support site titled Why is AppLocker not working on Windows 10 and 11 Home Edition? for exactly this reason.
Even where it does enforce, it is the wrong shape of tool. AppLocker answers "may this program run on this machine". It has no concept of "ask me first".
When a per app lock is the thing you actually want
The situation is specific, and once you have been in it you recognise it immediately. You are signed in. Your PC is on and unlocked. Someone else needs it for two minutes: a partner, a flatmate, a colleague, a child, a guest. You do not want to sign out, and you do not want to hover. You just do not want your chat, your mail, or your banking app to open.
That is what a per app lock is for. Phones have had this for years. Windows never grew it.
How to do it
This is the route with PresenceLock, the app lock we make. Any comparable tool will follow roughly the same four steps.
Get PresenceLock from the Microsoft Store. It runs on Windows 10 and 11.
Choose a PIN, or use Windows Hello if your PC has a camera or a fingerprint reader. The code is stored on your PC as a salted one way hash.
Add the ones that matter: your chat app, your mail client, your browser, your banking app. Everything you do not add keeps working exactly as before.
Every launch, only during set hours, or automatically when you walk away from the PC. You can combine them.
From then on, opening a protected app shows a small window asking for your code, with the app itself covered until you enter it. Everything you did not protect behaves exactly as it always did.
What an app lock cannot do
This matters more than the feature list, and any tool that will not tell you is worth distrusting.
- It is not encryption. Your files are not protected on disk.
- It does not stop an administrator. Someone with admin rights can uninstall it, boot into Safe Mode, or open the app's files directly.
- It does not stop someone who takes the drive out of the machine.
An app lock stops a person who picks up your unlocked PC. That is a real and very common threat, and it is the one it is built for. For genuinely sensitive material, use BitLocker and a locked Windows account as well. The two solve different problems, and they work well together.
Common questions
Is there a built-in way to password protect an app in Windows 11?
No. Windows 11 has no setting that makes an existing desktop app ask for its own password. The nearest built-in equivalent is a second user account, which protects the app by protecting the whole session: you have to sign out and back in, and you lose whatever you had open.
Why does AppLocker not work on my PC?
Because your edition probably cannot enforce it. Microsoft removed the edition checks in KB5024351, so the policy interface appears on Home and Pro, but those editions do not include the components that actually enforce a policy. The service runs, Event Viewer shows the policy applied, and nothing is blocked. AppLocker is also a different tool from what most people are looking for: it decides which programs may run at all, rather than asking for a password.
Can I lock only one app and leave everything else alone?
Yes, with a third party app lock. That is the whole point of one: it puts a prompt in front of the apps you pick, while you stay signed in to your own account and keep using everything else normally.
Is an app lock the same as encryption?
No, and it is important not to confuse them. An app lock stops a person who picks up your unlocked PC. It does not stop someone with an administrator account, Safe Mode, or the drive in their hand. For genuinely sensitive data use BitLocker and a locked Windows account as well.
PresenceLock puts a password on the Windows apps you choose, and can lock them again by itself when you step away.
Windows 10 and 11 · nothing leaves your PC · 6 languages