How to Lock Apps on PC with Windows: Full Guide

Locking apps on Windows keeps your files, messages, and accounts private when you share a computer or step away from your desk. This guide shows you the built-in ways to password-protect individual apps, plus free third-party options, and what to do when Windows doesn’t offer a direct lock. You don’t need admin rights for most methods, but a Microsoft account or local password is required for the built-in features.

What You’ll Need

• A Windows PC running Windows 10 or Windows 11
• An administrator account for some methods (like setting up a guest account)
• A password, PIN, or Windows Hello setup on your account
• Internet connection to download third-party app lockers (if you choose that route)

Step-by-Step

Method 1: Lock a Single App with Windows Hello (Windows 11)

1. Open the app you want to lock (e.g., a browser, email client, or notes app).
2. Press Windows Key + I to open Settings.
3. Go to Accounts > Sign-in options.
4. Under Additional settings, enable For improved security, only allow Windows Hello sign-in for Microsoft accounts on this device. This doesn’t lock individual apps, but it forces a Hello prompt when you unlock the PC.
5. For a true per-app lock, you’ll need a third-party tool (see Method 3).

Note: Windows does not have a native feature to password-protect a single app. The steps above are the closest built-in alternative, but they lock the whole screen, not just one app.

Method 2: Use a Separate User Account (Built-in, Works for Any App)

1. Open Settings > Accounts > Family & other users.
2. Click Add account and choose Add a user without a Microsoft account (Windows 11) or Sign in without a Microsoft account (Windows 10).
3. Create a local account with a strong password.
4. Log out of your main account and log into the new account.
5. Install the app you want to lock inside that account. The app will only be accessible when logged into that account, which requires the password you set.
6. To use the app, switch to that account (Start > your profile icon > the other account). The app is effectively locked from anyone who doesn’t know that password.

This is the only fully built-in method that locks an app behind a password, but it’s clunky because you have to switch accounts every time.

Method 3: Use a Free Third-Party App Locker (Recommended)

1. Download a reputable app locker from the Microsoft Store or the developer’s official website. Look for apps like AppLocker (not the Windows built-in one), My Lockbox, or Folder Lock – but verify they are current and compatible with your Windows version.
2. Install the software and launch it.
3. Set a master password when prompted. This is the password you’ll use to lock/unlock apps.
4. Add the apps you want to protect. Usually, you browse to the .exe file (e.g., C:\Program Files\Google\Chrome\Application\chrome.exe) or select from a list of installed apps.
5. Choose a lock type: some tools hide the app from the Start menu, others require a password to open, and others block it entirely until you unlock it.
6. Test by launching the app – it should ask for the master password.

Method 4: Lock a Folder Instead (If the App Stores Data Locally)

1. If the app uses a local data folder (like a notes app or a game save), you can lock that folder instead.
2. Right-click the folder (e.g., Documents\MyNotes) and select Properties.
3. Go to Advanced and check Encrypt contents to secure data. This requires an admin account and ties the data to your Windows account.
4. Click OK. The folder is now encrypted – only your user account can read it. Anyone else who logs in with a different account will see an access denied error.
5. To lock it further, you can also hide the folder (Properties > Hidden) but that’s not secure.

Common Mistakes

• Assuming Windows has a built-in per-app lock. It doesn’t. Trying to find a setting that doesn’t exist wastes time.
• Using a weak master password for third-party tools. If someone guesses it, the lock is useless.
• Forgetting to log out of the guest account. If you lock an app in a separate account but leave that account logged in, anyone can just switch to it without a password.
• Encrypting the wrong folder. Some apps store data in multiple locations (e.g., AppData). Check where the app actually writes files before encrypting.
• Downloading a fake or outdated app locker. Many free tools are abandoned and may not work on Windows 11.

Tips

• For maximum security, use a separate user account for sensitive apps – it’s the only method that’s fully supported by Microsoft and doesn’t require third-party software.
• If you use a third-party locker, pick one that supports Windows Hello (fingerprint/face) so you don’t have to type a password every time.
• Always test the lock with a second user account to make sure it actually blocks access.
• Keep your master password in a password manager – if you forget it, you may lose access to the apps permanently.
• For browsers, consider using a separate browser profile with a password – many browsers (like Chrome, Edge, Firefox) allow you to lock a profile with your Windows password.

Troubleshooting

• Third-party app locker doesn’t start: Check if it’s compatible with your Windows version. Right-click the installer and select Run as administrator. If it still fails, try a different app.
• Encrypted folder shows “Access Denied” even for you: This happens if the encryption key is tied to a user profile that got corrupted. Restore from backup if you have one, or use the cipher command in Command Prompt (run as admin) to manage EFS certificates.
• Guest account switch doesn’t prompt for password: Make sure the guest account has a password set. If not, go to Settings > Accounts > Sign-in options and set one.
• App locker doesn’t lock the app after update: Some apps update their executable path. Re-add the app in the locker’s settings.
• Windows Hello option is greyed out: You need to set up a PIN or biometric first. Go to Sign-in options and set up Windows Hello PIN.

Frequently Asked Questions

Can I lock a specific app without third-party software?

No, Windows does not have a native feature to password-protect a single app. The closest built-in options are using a separate user account or encrypting the app’s data folder.

Is it safe to use free app lockers?

Some are safe, but many are outdated or contain adware. Stick to well-known names from the Microsoft Store or reputable developers, and read recent reviews.

What happens if I forget the master password of an app locker?

Most app lockers do not offer a recovery option. You would need to uninstall the locker (which may lose your locked apps’ settings) or use a system restore point from before you set the password.

Does locking an app prevent it from running in the background?

It depends on the tool. Some lockers only block the front-end window, while others can terminate background processes. Check the app’s settings.

Can I lock Microsoft Store apps?

Yes, most third-party lockers can lock any executable, including UWP apps from the Store, though you may need to find the correct path (e.g., C:\Program Files\WindowsApps).

Will locking an app slow down my PC?

Minimally. The locker runs in the background and only activates when you launch a locked app. Performance impact is negligible on modern hardware.

Related

• Install and Uninstall Chrome Themes on Microsoft Edge
• Sync Passkeys Across Devices with Google Password Manager
• Solved Windows 10 Slow Shutdown? Fixes That Work