📞 No admin rights or still stuck?
You’ll need to contact Kaspersky Technical Support with proof of ownership. There’s no backdoor — security first!

How to Reset Kaspersky Endpoint Security 11 Password: The Exclusive Guide

Losing or forgetting the password for Kaspersky Endpoint Security (KES) 11 can be a major roadblock for IT administrators. Without it, you cannot exit the application, disable protection, or modify critical settings.

Because KES 11 is designed for enterprise-grade security, there is no simple "forgot password" button on the interface. Instead, you must use specific administrative tools. This guide covers the exclusive methods to regain control, whether you are using Kaspersky Security Center (KSC) or working on a standalone machine. Method 1: Using Kaspersky Security Center (The Best Way)

If the endpoint is managed by a central administration server (KSC), you don't need to "guess" the password. You can simply overwrite the policy or use a temporary operational password. 1. Disable Password Protection via Policy Open your Kaspersky Security Center Console.

Navigate to Managed devices and select the group containing the target computer.

Go to the Policies tab and open the properties of your active Kaspersky Endpoint Security 11 policy. On the left menu, select General Settings → Interface. In the Password protection section, click Settings. You can either: Uncheck "Enable password protection" to remove it entirely. Modify the password for the "KLAdmin" account.

Save the policy. Once the client computer synchronizes with the server, the new settings will apply. 2. Generate a Temporary Password

If you don't want to change the global policy, you can generate a one-time code for a specific task. In KSC, right-click the specific Device → Properties.

Go to Applications → select Kaspersky Endpoint Security 11 → Properties. Under General Settings, look for Temporary password.

Create a password, set an expiration time, and grant specific permissions (e.g., "Exiting the application"). Provide this code to the local user. Method 2: The "Exclusive" KLBT Password Reset Tool

If the computer is standalone (not managed by KSC) and you’ve forgotten the password, you cannot simply uninstall the software. You must use the Kaspersky Password Reset Tool (KLBT). Step-by-Step Recovery:

Download the Utility: Log in to your Kaspersky CompanyAccount and request the klbtinst.exe or the latest password reset utility from technical support.

Boot into Safe Mode: This is crucial. Restart the Windows machine and enter Safe Mode.

Run the Tool: Open the command prompt as an administrator and run the utility.

Execute Reset: The tool will strip the password protection attributes from the configuration files.

Reboot: Restart Windows normally. You should now be able to access the KES 11 interface or uninstall the program without being prompted for credentials. Method 3: The Registry Workaround (Advanced Users)

Warning: This method involves editing the registry. Back up your data before proceeding.

In some legacy versions or specific builds of KES 11, administrators have had success by disabling the password check via the registry while in Safe Mode: Boot the machine into Safe Mode. Press Win + R, type regedit, and hit Enter.

Navigate to:HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\KasperskyLab\KES\11\settings Look for the EnablePswrdProtect value and set it to 0. Look for OPEP and clear the data value. Reboot to normal mode. Summary Table: Which Method Should You Use? Recommended Method Managed by KSC Update Policy or use Temporary Password Standalone PC Use the KLBT Utility (Safe Mode) Urgent/No Support Access Registry Workaround (Advanced) Pro-Tip for the Future

To avoid this issue, always ensure that your KES 11 policies are synced with a secondary "Helpdesk" account in the Password Protection settings. This allows a backup set of credentials to be used if the primary admin password is lost.

To reset the password for Kaspersky Endpoint Security 11, you can use the official KLAPR tool in Safe Mode or update the policy through Kaspersky Security Center. Method 1: Using the KLAPR Utility (Standalone Computers)

If the computer is not managed by a central server, use the Kaspersky Password Reset Tool (KLAPR).

Download and Extract: Download the KLAPR zip archive from the Kaspersky Support site and extract the files to a local folder.

Boot into Safe Mode: Restart your computer and boot into Windows Safe Mode. This is a mandatory requirement for the tool to function. Run the Utility: Open the folder containing the extracted files. Right-click KLAPR.bat and select Run as Administrator.

Press any key in the command prompt window to execute the reset.

Restart: Reboot your computer normally. The password protection for settings and uninstallation will now be disabled.

Method 2: Using Kaspersky Security Center (Managed Computers)

If your device is part of a corporate network, you can reset the password directly from the management console.

Open Console: Log in to the Kaspersky Security Center Web Console or the MMC console.

Locate the Device: Navigate to Devices → Managed devices and select the specific computer. Adjust Application Settings:

Open the Applications tab and select Kaspersky Endpoint Security for Windows. Go to General settings → Interface. Reset Password:

Toggle the Password protection switch Off and save changes to strip the old password from the client.

Toggle it back On, enter a new password for the KLAdmin account, and save again. Method 3: Troubleshooting with kavremover

If the reset utility fails and you need to remove the software entirely, use the kavremover tool. Safe Mode: Boot into Safe Mode before running the utility.

Uninstallation: Select the version of Kaspersky Endpoint Security from the drop-down menu to force an uninstallation without a password.

Kaspersky Endpoint Security is designed to protect corporate data. If a generic password or public reset tool existed, malware or malicious insiders could use it to disable the antivirus and steal data. Therefore, the reset mechanism is strictly gated behind either the Central Management Server or Kaspersky Technical Support.

If the policy password is lost but you have KSC admin access:

If KSC itself is locked out from managing the endpoint due to a local password, see the next method.

If Self-Defense is enabled and you cannot use klak from within Windows, boot from the Kaspersky Rescue Disk.