LockApp.exe in Windows 10: What It Is & Is It Safe?

LockApp.exe is a legitimate Windows 10 system process that displays the lock screen—the full-screen image, clock, date, and app notifications you see before logging in. If you’ve spotted it in Task Manager and wondered whether it’s malware, the short answer is: it’s safe when located in the correct folder. This article explains what LockApp.exe does, where it should live, how to verify it, and what to do if you suspect a problem.

What Is LockApp.exe?

LockApp.exe is the executable file for the Windows Lock App, a built-in Universal Windows Platform (UWP) component introduced with Windows 10. Its only job is to render the lock screen—the interface that appears when you boot your PC, wake it from sleep, or press Windows + L. It shows the background image, the time, date, and any app notifications you’ve allowed (like calendar or email).

The file is part of the operating system and is signed by Microsoft. It is not a third-party program, and it is not a virus by itself. However, because the name is recognizable, malware authors sometimes disguise malicious files with the same name—so the location and digital signature matter more than the name alone.

Where Should LockApp.exe Be Located?

The legitimate LockApp.exe resides in a specific folder. On a standard 64-bit Windows 10 installation, the full path is:

C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe

On 32-bit systems, it’s the same path under C:\Windows\SystemApps\. The folder name includes the package family name Microsoft.LockApp and a unique identifier (cw5n1h2txyewy). If you see LockApp.exe anywhere else—like in AppData, Program Files, or your Downloads folder—treat it with suspicion.

To check the location, open Task Manager (Ctrl+Shift+Esc), go to the Details tab, right-click LockApp.exe, and select Open file location. If the folder that opens matches the path above, it’s almost certainly the genuine Microsoft file.

Is LockApp.exe Safe? How to Verify

In most cases, LockApp.exe is completely safe. It runs in the background only when needed and uses minimal CPU and memory—often 0% CPU and a few MB of RAM. However, you should verify it if you’re concerned. Here’s a quick checklist:

Check the file location as described above. Anything outside SystemApps is a red flag.
Check the digital signature: Right-click the file, go to Properties → Digital Signatures. It should list “Microsoft Windows� as the signer.
Scan with Windows Defender: Run a full scan if you notice suspicious behavior, such as high CPU usage or pop-ups.
Look at the file size: The genuine LockApp.exe is around 1–2 MB. A much larger or smaller file could be fake.

If everything checks out, you can ignore it. If the file is in the wrong location or fails the signature check, run a malware scan immediately.

Why Does LockApp.exe Run in the Background?

LockApp.exe is a background process that Windows starts when the lock screen is active or when you press Windows + L. It also runs briefly at startup to prepare the lock screen. It’s not a service that constantly runs; it activates on demand. In Task Manager, you might see it under “Apps� or “Background processes.�

You don’t need to do anything with it. Disabling it is not recommended because the lock screen is part of Windows security—it protects your session when you step away. If you want a different lock screen experience, you can change the background or notification settings in Settings → Personalization → Lock screen, but you shouldn’t kill the process.

Can You Disable or Remove LockApp.exe?

Technically, you can disable the lock screen via Group Policy or Registry edits, but you cannot safely delete LockApp.exe. It’s a system component; removing it could cause instability or prevent you from logging in. If you want to skip the lock screen entirely (so you go straight to the password prompt), you can use the Group Policy Editor (gpedit.msc) on Pro editions:

Press Win + R, type gpedit.msc, and press Enter.
Go to Computer Configuration → Administrative Templates → Control Panel → Personalization.
Double-click Do not display the lock screen, set it to Enabled, and click OK.

On Windows 10 Home, you can use a Registry tweak (at HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Personalization) but this is unsupported and may be reset by updates. Even if you disable the lock screen, LockApp.exe remains on disk—it just doesn’t run.

Common Problems and Misconceptions

Users often mistake LockApp.exe for malware because it appears in Task Manager with no obvious purpose. Here are common questions:

“Why is LockApp.exe using CPU?� Normally it uses 0% CPU. If it spikes, it might be rendering a new background or processing a notification. If it stays high, run a malware scan.
“Can I end the task?� You can, but Windows will restart it when you lock the screen. It’s better to leave it alone.
“Is LockApp.exe a virus?� Only if it’s in the wrong location or unsigned. The genuine one is safe.

A common misconception is that LockApp.exe is the same as “Windows Lock Screen� in Settings. They are related—the app is the backend, and the Settings page controls its appearance.

How to Tell If Your LockApp.exe Is Malware

If you’re still worried, here are concrete signs that your LockApp.exe might be malicious:

It’s located outside C:\Windows\SystemApps.
The file is not digitally signed by Microsoft.
It appears in multiple processes with the same name.
Your antivirus flags it.
It consumes high CPU or memory consistently (more than 50 MB).

If any of these apply, don’t just delete the file—run a full system scan with Windows Defender or a reputable third-party scanner. You can also use Process Explorer (from Microsoft Sysinternals) to check the process path and signature.

Frequently Asked Questions

Is LockApp.exe required for Windows 10 to work?

Yes, it’s part of the system. Without it, the lock screen won’t display correctly, but Windows can still run. It’s not a critical system process like explorer.exe, but you shouldn’t remove it.

Can LockApp.exe be a Trojan?

Trojan malware often uses names of legitimate processes. If your LockApp.exe is in the correct folder and signed by Microsoft, it’s not a Trojan. If it’s elsewhere, it could be—scan it.

Why does LockApp.exe show up in Task Manager even when I’m on the desktop?

It may be running because you locked the screen earlier, or because Windows preloads it for faster response. It’s normal.

Does LockApp.exe collect my personal data?

No. It only displays what you’ve configured. Windows may collect diagnostic data separately, but LockApp.exe itself doesn’t gather personal information.

How do I stop LockApp.exe from running?

You can’t permanently stop it without disabling the lock screen feature. If you disable the lock screen via Group Policy, the process won’t run unless you lock the PC.

What if I delete LockApp.exe?

Deleting it can cause the lock screen to fail, and Windows Update may restore it. It’s not recommended. If you’ve already deleted it, run sfc /scannow in an elevated Command Prompt to repair system files.

General steps for current mainstream versions; menus can differ by device and version. See the disclaimer or report an error.

More in this bed

The whole Tech How-To bed →