Windows 11 doesn’t have a simple “lock this app with a password” switch like some phones do. You can still stop other people from opening specific apps: give them their own account, block apps with Microsoft Family Safety, use Group Policy or AppLocker on Pro and Enterprise editions, or protect individual apps that have their own lock. This guide explains each method, who it’s best for, and the limits you should know about.
Quick Answer
The most reliable way is to give each person their own Windows account. To block specific apps, use Microsoft Family Safety for child accounts, or on Windows 11 Pro run gpedit.msc and enable User Configuration > Administrative Templates > System > Don’t run specified Windows applications, then list the program files to block.
Which Method Should You Use?
| Method | Windows edition | Best for |
|---|---|---|
| Separate user accounts | All | Shared family or household PCs |
| Microsoft Family Safety | All (child accounts) | Parents blocking apps and games |
| Group Policy | Pro, Enterprise, Education | Blocking a few programs for a user |
| AppLocker / App Control | Enterprise, Education (limited on Pro) | Businesses and schools |
| In-app locks | All | Password managers, notes and messaging apps |
Method 1: Separate User Accounts
- Go to Settings > Accounts > Other users (or Family).
- Click Add account and follow the prompts. Make the new account a Standard user.
- Sign in with a PIN or password and lock your own session with Windows + L when you step away.
Apps installed “for me only” and your files, browser profile and email stay in your account. Standard users can’t install software for everyone or change system settings without an administrator password.
Method 2: Block Apps With Microsoft Family Safety
- Add the child’s Microsoft account in Settings > Accounts > Family.
- Open the Family Safety app or sign in at family.microsoft.com.
- Select the child, open Apps and games (or Screen time), and choose an app.
- Click Block app, or set a daily time limit for it.
This works for apps the child has used on the device. Family Safety settings apply only to child accounts in your family group.
Method 3: Group Policy (Windows 11 Pro)
- Press Windows + R, type gpedit.msc and press Enter.
- Go to User Configuration > Administrative Templates > System.
- Double-click Don’t run specified Windows applications and select Enabled.
- Click Show next to List of disallowed applications.
- Add each program’s file name, such as notepad.exe. Find the file name in Task Manager: right-click the app on the Details tab.
- Click OK, then Apply. Sign out and back in, or run gpupdate /force.
Important: this policy applies to every user on the PC, including you, unless you use targeted group policy objects. It also only checks file names, so a renamed program can bypass it. Keep an administrator account that’s unaffected, or test carefully.
Method 4: AppLocker or App Control for Business
Businesses and schools can use AppLocker (run secpol.msc > Application Control Policies) or App Control for Business to allow or block apps by publisher, path or file hash for specific users and groups. AppLocker is fully supported on Enterprise and Education editions; IT administrators usually deploy these through Intune or Group Policy.
Method 5: Apps With Built-In Locks
- Password managers lock automatically and can require Windows Hello.
- Messaging apps such as WhatsApp for Windows offer an app lock with a password in their privacy settings.
- Browsers: Microsoft Edge can require your Windows password or Windows Hello before showing saved passwords.
- Files: protect sensitive documents with Office’s Encrypt with Password, a password-protected ZIP, or BitLocker for whole drives.
About Third-Party “App Lock” Tools
Some programs promise to password-protect any app. Many are simple wrappers that a knowledgeable user can bypass, and some come bundled with adware. If you use one, download it only from the developer’s official site or the Microsoft Store, and still rely on separate accounts for real security.
Frequently Asked Questions
Can I lock Microsoft Store apps with Group Policy?
The “Don’t run specified Windows applications” policy is designed for desktop programs. Store apps are better blocked with Family Safety or AppLocker packaged-app rules.
Does Windows 11 Home have gpedit?
No. Home users should use separate accounts and Family Safety.
How do I unblock an app?
Set the Group Policy back to Not Configured, or unblock it in Family Safety.
Summary
- Use separate standard accounts for shared PCs.
- Use Family Safety to block apps for children.
- Use Group Policy or AppLocker on Pro and Enterprise.
- Use in-app locks for sensitive apps.
Kermit Matthews is a freelance writer based in Philadelphia, Pennsylvania with more than a decade of experience writing technology guides. He has a Bachelor’s and Master’s degree in Computer Science and has spent much of his professional career in IT management.
He specializes in writing content about iPhones, Android devices, Microsoft Office, and many other popular applications and devices.