sppsvc.exe

Windows ProcessMicrosoft Corporation

Also called sppsvc, software protection, spp

WindowsSystem Component

Software Protection Platform service host. It is Windows licensing and activation work, not Windows Update and not Defender.

What you need to know

This is Software Protection, the licensing service. It is not TiWorker installing updates.

sppsvc.exe hosts Software Protection Platform. Brief CPU after sign-in is a known revalidation. Ending it can make Windows complain it is not activated.

Safe?: Yes, in System32
High CPU after a reboot?: A licensing revalidation can do that
Should I end it?: Activation tasks can fail

Feex says

If sppsvc is busy for a few minutes after boot, I would wait. If it is still pegged hours later, I look at activation and the event log, not at Defender.

What is sppsvc.exe?

sppsvc.exe is the Software Protection service host. Windows and some Microsoft apps ask it whether the license is valid.

What does it do?

It reads tokens, talks to activation, and can wake on a timer. It does not download cumulative updates. That is the Update stack and TiWorker.exe.

Why is it running?

Boot, a license timer, or an Office / Windows activation check started it. Idle sppsvc should settle.

Is it safe?

Usually safe

System32 sppsvc is the licensing host. A crack "activator" that replaces sppsvc.exe is malware theater.

A legitimate copy normally runs from:

C:\Windows\System32\sppsvc.exe

Service: Software Protection
Not Windows Update
Not a third-party DRM exe

Can I end it?

Can break activation checks

Ending sppsvc.exe stops in-flight licensing work. The service should start again. Do not loop-kill it to hide a watermark.

Can I remove it?

Do not delete sppsvc.exe. Activation and some Microsoft Store licensing depend on it.

Should it start with Windows?

The Software Protection service starts it on demand or by trigger. It is not Discord.

Normal resource behavior

These are contextual labels, not universal averages.

CPU: Can rise for minutes after boot during revalidation
Memory: Moderate
Disk: Token files
Network: Activation when needed

File information

sppsvc.exe file information
Executable name	sppsvc.exe
Common legitimate path	C:\Windows\System32\sppsvc.exe
Publisher	Microsoft Corporation
Signature expectation	Signed by Microsoft Windows

Common problems

Hours of 100 percent CPU

Microsoft has servicing fixes for stuck SPP. Restart the service, then check Event Viewer. A cracked activator is a common cause of a broken SPP.

Confused with Update

TiWorker writes components. sppsvc checks licenses. Two different busy-after-patch stories.

Troubleshooting

Diagnose before you change anything destructive.

services.msc > Software Protection

Startup type is often Manual (Trigger Start). Running after boot is normal for a while.

Do not run an "activator"

Those replace this host.

Technical details

sppsvc.exe technical details
Image name	sppsvc.exe
Service	Software Protection

Sources and verification

Reviewed by Feex editorial. Last verified August 2026 Status: Feex Reviewed. How we research.

Microsoft Learn: Software Protection · SPP service
Microsoft Support: activation · Licensing client
Foxhole process map · First-party samples on Windows PCs. Not a lab benchmark.

Was this article useful?

A yes or no is enough. Pick a reason if you want, or add a short note.