Fix Local security authority protection is off Your device may be vulnerable

If your Windows Security shows the message “Local Security Authority protection is off – Your device may be vulnerable,” it means the system’s security feature that verifies user sign-ins isn’t working properly. This can happen due to a system bug, registry issues, or incomplete Windows updates. The Local Security Authority (LSA) helps protect your credentials from unauthorized access, so it’s important to fix this warning right away. In this blog, you’ll learn easy methods to turn LSA protection back on using Settings, Registry Editor, or Command Prompt and make your device secure again.

---

🧩 How to Fix Local Security Authority Protection Is Off

Follow these methods step-by-step as shown in the video:

---

🧰 Method 1: Turn On LSA Protection Manually

1. Press Windows + I to open Settings.
2. Go to Privacy & Security → Windows Security → Device Security.
3. Click on Core Isolation Details.
4. Turn ON the toggle next to Local Security Authority (LSA) Protection.
5. Restart your PC to apply the changes.

If the toggle is already on but you still see the warning, proceed to the next method.

---

🗃️ Method 2: Enable LSA Protection Using Registry Editor

1. Press Windows + R, type regedit, and hit Enter.
2. Navigate to this path: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa
3. On the right side, find RunAsPPL and RunAsPPLBoot.
   • If they don’t exist, create new DWORD (32-bit) values for them.
4. Set both their values to 2.
5. Close Registry Editor and restart your computer.

This forces LSA protection to stay on even after rebooting.

---

🧱 Method 3: Check Windows Updates

1. Open Settings → Windows Update.
2. Click Check for updates.
3. Install all pending updates — sometimes, Microsoft releases patches for LSA-related issues.

---

🧰 Method 4: Run System File Checker (SFC)

1. Search cmd, right-click Command Prompt, and choose Run as administrator.
2. Type: sfc /scannow
3. Press Enter and let the scan complete.
4. Restart your PC once it’s done.

---

🧩 Method 5: Restart the LSA Service

1. Open Services (Windows + R → services.msc).
2. Scroll down and locate Security Accounts Manager.
3. Right-click and choose Restart.
4. Restart your system again.

---

✅ After Restart

Once your PC reboots, open Windows Security → Device Security and check again.
You should now see “Local Security Authority protection is on” — meaning your device is protected.

---

💡 Conclusion

By following the above steps, you can easily fix the “Local Security Authority Protection is off” warning in Windows 11 or 10. Keeping this setting enabled ensures your device stays safe from unauthorized access and potential malware attacks.