Home > Windows files > lsass.exe

What does the lsass.exe file do?

The lsass.exe process is also known as Local Security Authority Process or, as the case may be, LSA Shell (Export Version) and is a part of Microsoft Windows Operating System or, as the case may be, IPSEC Services, Protected Storage, Security Accounts Manager. This software is produced by Microsoft (www.microsoft.com) or, as the case may be, Blackburn Laocoon. An obsolete or defective version of lsass.exe can cause problems for your computer that can range from slowness to error messages such as these:

special offer

Free PC Check

Take advantage of our Free Computer Check to identify problems with lsass.exe

Scan your computer today at no charge with the Windows Repair Tool. This tool helps repair Windows and helps it run faster.
More information about Outbyte and Unistall. Please review Outbyte EULA and Privacy Policy. Outbyte scanner and repair are free. An advanced version must be purchased.

What you should know about lsass.exe Local Security Authority Process

lsass.exe is a Windows system file. The file lsass.exe is found in the C:\Windows\System32 directory. Frequently occurring are file sizes such as 13,312 bytes (72% of all these files), 22,528 bytes as well as 11 other variants.
The program executes in the background, and can only be terminated using Windows Task Manager. It contains Microsoft's digital signature. This confirms its authenticity. The application is connected to a server on the Internet or in your local network. For this reason, 11% of all experts consider this file to be a possible threat. The probability that it can cause harm is high.

lsass.exe is a system file used by Microsoft Windows, and appears in Windows Task Manager as a process named "Local Security Authority Process." However, some viruses or Trojans use the same file name in order to remain undetected (such as Trojan.Gen or, as the case may be, WS.Reputation.1 (recognized by Symantec), as well as Trojan.Win32.Inject.cdyu or, as the case may be, Trojan-Spy.Win32.KeyLogger.cor (recognized by Kaspersky)).
To be really safe, you should scan your computer with two different anti-virus engines. You can use a free Anti-Malware scanner for this purpose.

Objectionable files with the same file name have the following characteristics:

If you see this file on your hard drive or in Windows Task Manager, please make sure that it is not a malicious variant. It's a fact that many trojans try to cloak their true identity by calling themselves lsass.exe. With the above information or by using tools like Security Task Manager you can determine if, in your case, the file is an undesirable variant.

What do other computer users say about lsass?

it works depends and shut down the system at random
Microsoft Local Security Authority Service: Windows critical process for user authorization and loging
lsass by SYSTEM is not a virus (further information...)

Summary: 238 users judge lsass.exe to be an essential file that should not be touched. 29 users consider it harmless. However, 75 users consider this to be a suspicious process and would like to get rid of it. For this reason, 192 users have already deleted lsass.exe. source: file.net

How to uninstall the program or IPSEC Services, Protected Storage, Security Accounts Manager

To remove Local Security Authority Process from your computer, please follow the manual instructions below or use an automatic uninstaller product.

  1. Click the Windows Start Button. You find it in the lower left corner of the taskbar.
  2. Type the word uninstall.
  3. Click Add or remove programs.
  4. Now locate the program or IPSEC Services, Protected Storage, Security Accounts Manager in the list of displayed applications.
  5. Click the program, and then click Uninstall.
Remove software in Windows 10
lsass.exe Local Security Authority Process fix

How to tell if lsass.exe (Local Security Authority Process) was uninstalled cleanly

After uninstalling, restart your computer. Then start Windows Explorer and see if there is still a folder with the name of the software under C:\Program Files. Be sure to check the Registry as well for remnants of Local Security Authority Process. To do this, start "Regedit", then look under "HKEY_LOCAL_MACHINE" > "Software" for Local Security Authority Process or the name of the producer. Always keep in mind that only a computer professional should ever directly delete entries in the Windows Registry.

What to do if a program does not uninstall

The easiest way to remove any kind of software cleanly and accurately is to use an uninstaller tool. Because the uninstaller automatically creates a backup, there is no risk of anything going wrong.

Last but not least

If Windows not working quite right for you, or if startup is taking a long time, or lsass.exe is causing problems for you, a good Windows diagnostic tool may very well help. This is especially effective when it comes to older computers that have accumulated vast quantities of "garbage data" as the result of many software installs and uninstalls.

Users with an interest in lsass.exe have also been interested in: lsass.exe [index]