How to Resolve a “Local Security Authority protection is off” Windows Error

Seeing the “Local Security Authority protection is off” error in Windows can be alarming—especially if you care about your device’s security. The good news: this error is fixable. Here’s what it means and exactly what you should do.

What is Local Security Authority (LSA) Protection?

LSA protection is a security feature in Windows that helps keep your credentials and sensitive information safe from malware. When it’s off, your system is more vulnerable to attacks that can steal your login information.

Why Am I Seeing This Error?

Usually, this message appears after a Windows update or a change in security settings. Sometimes, it’s a bug—Windows says LSA is off even when it’s on. Either way, it’s important to address it.

How to Fix the “Local Security Authority protection is off” Error

1. Turn LSA Protection On in Windows Security

1. Open Windows Security:
   Click the Start button and search for Windows Security. Open it.
2. Go to Device Security:
   In the sidebar, select Device Security.
3. Select Core Isolation details:
   Under “Core isolation,” click Core isolation details.
4. Toggle On LSA Protection:
   Find “Local Security Authority protection” and turn it On.
5. Restart Your Computer:
   Changes take effect after a restart.

2. Enable LSA Protection via the Registry (If the Toggle is Grayed Out)

Warning: Editing the registry can cause problems if done wrong. Back up your registry first.

1. Open Registry Editor:
   Press Win + R, type regedit, and press Enter.
2. Navigate to This Key: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa
3. Create or Edit Two DWORD Values:
   • Right-click the right pane, select New > DWORD (32-bit) Value.
   • Name one RunAsPPL, set its value to 2.
   • Name the other RunAsPPLBoot, set its value to 2.
4. Restart Your Computer.

3. Update Windows

Microsoft regularly fixes bugs and security issues.

• Go to Settings > Update & Security > Windows Update.
• Click Check for updates and install everything available.
• Restart again.

4. Check for Conflicting Software

Some third-party antivirus tools can interfere with LSA protection. If you use one, try disabling or uninstalling it temporarily, then see if you can enable LSA protection.

5. Ignore the Warning (If You’re Fully Updated)

Some users keep seeing the warning even after turning LSA protection on. If you’re updated and the registry keys are set correctly, this might be a display bug. Microsoft is aware and working on a fix.

Quick Recap

• Turn on LSA protection in Windows Security.
• Use the registry if needed.
• Stay updated with Windows Updates.
• Check for conflicting software.

Don’t ignore this warning unless you’re sure your device is protected. LSA keeps your info safe—don’t leave it off.

Got questions or run into trouble? Drop a comment below and I’ll help you out.

Mark Vincent

Tech enthusiast and content creator passionate about making technology simple for everyone. I share practical tips, guides, and reviews on the latest in computers, software, and gadgets. Let’s explore the digital world together!