What Is Lsass.exe? 5 Ways To See If It's Safe - GlassWire

Maybe your like

Features
- All Features
- Premium Features
Download
Mobile
Blog
Help
Pricing

What is lsass.exe? 5 ways to see if it’s safe.

What is lsass.exe?

lsass.exe is a Windows process that takes care of security policy for the OS. For example, when you logon to a Windows user account or server lsass.exe verifies the logon name and password. If you terminate lsass.exe you will probably find yourself logged out of Windows. lsass.exe also writes to the Windows Security Log so you can search there for failed authentication attempts along with other security policy issues.

Publisher: Microsoft Windows

lsass.exe stands for Local Security Authority Subsystem Service.

What does lsass.exe do?

lsass.exe controls all Windows security system policies and authentication.

Is lsass.exe safe? 5 easy ways to see if lsass.exe is safe or malware.

1. See who signed the lsass.exe (check the publisher)
2. Scan lsass.exe with Windows Security.
3. Check the network activity of lsass.exe.
4. Analyze lsass.exe with VirusTotal.
5. Run it in Windows Sandbox.

Instantly detect spying apps on your PC, then block them!

graph animation Get access to the same network security tool that Information Security Professionals use to detect suspicious .exe apps, bandwidth wasters, and privacy violators. Trust by over 20 million people. Get GlassWire now for FREE!

Why does lsass.exe access the network?

While investigating lsass.exe with the GlassWire network security monitor on our devices based in Austin, TX USA we found a connection to a server controlled by a popular web browser called Opera am4.autoupdate.opera.com. This network activity appears to be normal behavior because we learned that lsass.exe is used to check website certificates and validate them. lsass.exe is also used to revoke bad website certificates. On our testing computer we had the Opera web browser installed.

About Us

Our goal at GlassWire is to help people protect their privacy and security. We have helped over 20 million people protect their devices from threats. Are you curious about the safety of another Windows file? Visit our full Windows .exe file directory.