# sppsvc.exe

Windows Process: Microsoft Corporation

Also called sppsvc, software protection, spp

Windows, System Component

Software Protection Platform service host. It is Windows licensing and activation work, not Windows Update and not Defender.

## What you need to know

This is Software Protection, the licensing service. It is not TiWorker installing updates.

sppsvc.exe hosts Software Protection Platform. Brief CPU after sign-in is a known revalidation. Ending it can make Windows complain it is not activated.

- **Safe?**: Yes, in System32

  **High CPU after a reboot?**: A licensing revalidation can do that

  **Should I end it?**: Activation tasks can fail

Feex says

If sppsvc is busy for a few minutes after boot, I would wait. If it is still pegged hours later, I look at activation and the event log, not at Defender.

## What is sppsvc.exe?

sppsvc.exe is the Software Protection service host. Windows and some Microsoft apps ask it whether the license is valid.

## What does it do?

It reads tokens, talks to activation, and can wake on a timer. It does not download cumulative updates. That is the Update stack and TiWorker.exe.

## Why is it running?

Boot, a license timer, or an Office / Windows activation check started it. Idle sppsvc should settle.

## Is it safe?

Usually safe

System32 sppsvc is the licensing host. A crack "activator" that replaces sppsvc.exe is malware theater.

A legitimate copy normally runs from:

`C:\Windows\System32\sppsvc.exe`

- Service: Software Protection
- Not Windows Update
- Not a third-party DRM exe

## Can I end it?

Can break activation checks

Ending sppsvc.exe stops in-flight licensing work. The service should start again. Do not loop-kill it to hide a watermark.

## Can I remove it?

No

Do not delete sppsvc.exe. Activation and some Microsoft Store licensing depend on it.

## Should it start with Windows?

The Software Protection service starts it on demand or by trigger. It is not Discord.

## Normal resource behavior

These are contextual labels, not universal averages.

- **CPU**: Can rise for minutes after boot during revalidation

  **Memory**: Moderate

  **Disk**: Token files

  **Network**: Activation when needed

## File information

| Executable name        | sppsvc.exe                     |
| ---------------------- | ------------------------------ |
| Common legitimate path | C:\Windows\System32\sppsvc.exe |
| Publisher              | Microsoft Corporation          |
| Signature expectation  | Signed by Microsoft Windows    |

## Common problems

### Hours of 100 percent CPU

Microsoft has servicing fixes for stuck SPP. Restart the service, then check Event Viewer. A cracked activator is a common cause of a broken SPP.

### Confused with Update

TiWorker writes components. sppsvc checks licenses. Two different busy-after-patch stories.

## Troubleshooting

Diagnose before you change anything destructive.

### services.msc > Software Protection

Startup type is often Manual (Trigger Start). Running after boot is normal for a while.

### Do not run an "activator"

Those replace this host.

## Technical details

Technical details

| Image name | sppsvc.exe          |
| ---------- | ------------------- |
| Service    | Software Protection |

## Related

These entities connect to this article. Type is shown on every link.

[TiWorker.exe: Windows Process](https://feex.it/wiki/process/tiworker.exe)[Windows Update: Windows Service](https://feex.it/wiki/service/windows-update)[When high CPU is normal: Guide](https://feex.it/wiki/software/system/when-high-cpu-is-normal)

## Sources and verification

Reviewed by Feex editorial. Last verified August 2026 Status: Feex Reviewed. [How we research](https://feex.it/wiki/research).

- [Microsoft Learn: Software Protection ](https://learn.microsoft.com/windows/win32/wslp/software-protection-platform)· SPP service
- [Microsoft Support: activation ](https://support.microsoft.com/windows/activate-windows)· Licensing client
- [Foxhole process map ](https://foxhole.feex.it/)· First-party samples on Windows PCs. Not a lab benchmark.

## Was this article useful?

A yes or no is enough. Pick a reason if you want, or add a short note.

Quick facts

The short identity of this page. Specs, sources, and the full story stay in the article.

- **Type**: Windows Process

  **Publisher**: Microsoft Corporation

  **Executable**: sppsvc.exe

  **Typical path**: C:\Windows\System32\sppsvc.exe

  **Mapped by Feex**: Seen on Windows PCs in Foxhole

  **Related service**: sppsvc / Software Protection

Feex Reviewed: Last verified August 2026

---

Source: [Canonical Feex Wiki page](https://feex.it/wiki/process/sppsvc.exe/)

[Developer guide](https://feex.it/wiki/developers/) | [API policy](https://feex.it/developers/api-policy/) | [Agent guidance](https://feex.it/wiki/llms.txt)