Password protect an app or .exe on Windows 11
By Param Nimbark. Last updated 2026-10-12.
Windows 11 has no setting that puts a password on an app: you can require a sign-in for the whole PC, you can limit a family member's screen time, and on a managed machine an administrator can block a program outright, but there is no "ask for a password before Steam opens" switch anywhere in Settings. This guide walks through the two closest native options and says plainly what each one does and does not do. Then it shows the Seqtrix way: a Password Lock step that encrypts the program's .exe with AES-256-GCM, so the app cannot launch until you unlock it with your password.
Installs from the Microsoft Store, no SmartScreen prompt. Free Starter plan, no account.
Direct installer for Windows 10 and 11, 64-bit, v0.16.0.
What Windows can do by itself, and what it cannot
Option 1: Microsoft Family Safety sets time limits, for someone else's account
Microsoft's Set app and game limits page gives the path. In the Family Safety app: select the family member, choose the Windows platform, open Set time limits, then Apps, features, and games, turn on app and game limits, pick the app and set a daily allowance and the hours it can be used. On the web it is account.microsoft.com/family, the family member, Windows, then the Apps, features, and games tab.
What it is: a daily time budget on an app, applied to another member of your family group and managed from your account. What it is not: a password. It never prompts, it runs on a clock, and it cannot be pointed at your own account. If you are a parent rationing a game on a child's PC, this is the right tool and it is free. If you want to stop yourself, or a colleague on a shared machine, from opening a specific program, it does nothing for you.
Option 2: AppLocker blocks a program, with no password involved
AppLocker is Microsoft's application control feature for organisations. An administrator writes allow and deny rules based on a program's publisher, path or file hash, assigns them to users or groups, and can run them in audit-only mode first. For a single PC the rules are authored in the Local Security Policy editor (secpol.msc); for a fleet, in Group Policy or through MDM. The Application Identity service enforces them. Microsoft's requirements page states that policies are enforced on all editions of Windows 10 version 2004 and newer and on Windows 11; on older builds, Group Policy enforcement needed Enterprise.
Say it plainly: AppLocker is a block, not a lock. The program refuses to run for the users named in the rule until an administrator edits the rule, and if you are the administrator on your own PC you can switch it off as easily as you switched it on. There is no password dialog, no "unlock for ten minutes", and Microsoft itself describes it as a defence-in-depth feature rather than a security boundary. It is the right tool for an IT department standardising a fleet, and the wrong tool for a personal machine.
The other trick people try, a Deny permission on the .exe under Properties, Security, fails the same way: the owner of the file can remove the deny in the same dialog, so it slows you down for about as long as it takes to right-click.
The Seqtrix way: Password Lock on the .exe itself
Seqtrix is a Windows automation app with a security toolkit built in. Its Password Lock action works on files, folders and applications, and the application case is the one almost nothing else covers: it takes the program's executable off the table until you give the password.
From template
Open Templates in Seqtrix, search for Lock a distracting app away, then choose Use template (click the card). Pick the .exe and set a password on the lock step. The sequence notes the time in a worklog on your Documents folder, closes Discord, Steam, the Epic Games Launcher and Spotify if any of them are running, waits for Windows to release the file, password-locks the program you chose, then prints where to get it back. It is a free template.
Or lock an app in four steps
- 1Install Seqtrix
Download Seqtrix v0.16.0 for Windows 10 or 11. Every install includes a 15-day trial of the Advanced plan, with no card and no account needed to begin.
- 2Add a Security Lock step and choose Password Lock
Create a new sequence, drop in a Security Lock step, pick Password Lock as its action and set the target type to application.
- 3Browse to the .exe and set a password
Point it at the program file, for example the game or chat app you want out of reach, and type the password you will use to unlock it. Close the app first so Windows is not holding the file open.
- 4Run it, and unlock from the dashboard
Click Run. The .exe becomes a .sflocked file and the app will not start. To get it back, open the Seqtrix dashboard, go to Secured Items, choose Password Locked and unlock it with your password.
What happens under the hood
Seqtrix reads the program file, encrypts its contents with AES-256-GCM using a key derived from your password, writes a single .sflocked file next to where the .exe was, and removes the original. The app cannot start because its executable no longer exists in readable form; double-clicking a shortcut simply fails. Unlocking decrypts the bundle and restores the original file in place.
The honest limits. It locks that executable, so an app with more than one launcher needs more than one lock. A person with administrator rights could reinstall the program from its installer, which makes this a strong tool for focus and for privacy on a PC you control, and not a parental control against someone who can install software. Lock apps you installed yourself, not Windows components, and lock them while they are closed; the template does that for you.
Make it automatic (the part a checkbox could never do)
Because the lock is a step in a sequence, it can be chained with the rest of your routine. Three uses:
- • Start of the working day: a schedule on weekday mornings locks the games away before you sit down.
- • Deep work: pair it with the Deep work block, 90 minutes template, which closes the usual offenders, turns off notification toasts and mutes everything.
- • Shared PC: a hotkey that locks the apps holding your signed-in accounts before you hand the keyboard to someone else.
FAQ
Not as a password prompt. Windows can require a sign-in for the whole PC, Microsoft Family Safety can put a daily time limit on an app for a family member, and AppLocker can block a program outright on a managed machine, but there is no built-in setting that asks for a password before one specific app opens. To get that behaviour you need a tool that makes the program unusable until you unlock it, which is what the Password Lock step in Seqtrix does.
No. Family Safety sets a daily time allowance and allowed hours for an app or game on a family member’s account, managed by an adult in the family group from the Family Safety app or account.microsoft.com/family. It runs on a clock, not a prompt, and it applies to the other person’s account rather than your own.
Microsoft states that AppLocker policies are enforced on all editions of Windows 10 version 2004 and newer and on Windows 11; on older builds, Group Policy enforcement needed Enterprise. It is an allow and deny list authored in the Local Security Policy editor, Group Policy or MDM, and enforced by the Application Identity service. It blocks a program for a user or group; it never asks for a password, and an administrator can change the rule at any time.
It reads the program’s .exe, encrypts the contents with AES-256-GCM using a key derived from your password, writes a single .sflocked file in its place and removes the original. The app cannot start because its executable no longer exists in readable form. Unlocking from the Seqtrix dashboard with the password decrypts and restores the original file.
There is no backdoor: the lock is real encryption, and nothing can decrypt the file without the password. The program itself is not lost, because you can reinstall it from its installer, but that also means a determined person with administrator rights could do the same. Keep the password in a password manager, and use the lock for focus and privacy on a PC you control rather than as a parental control against someone who can install software.
Keep going
- Template: Lock a distracting app away
- Template: Deep work block, 90 minutes (closes the offenders, silences notifications, puts it all back later)
- Seqtrix vs Power Automate: flows can launch and close apps, but cannot lock one behind a password
- Password-protect a folder on Windows 11
Lock your first app in seconds
15-day Advanced trial on every install. No credit card, no scripting, offline by default. Telemetry stays off unless you turn it on in Settings > Privacy.
Installs from the Microsoft Store, no SmartScreen prompt. Free Starter plan, no account.
Direct installer for Windows 10 and 11, 64-bit, v0.16.0.