WINDOWS SERVICE
ssh-agent: OpenSSH Authentication Agent
Agent to hold private keys used for public key authentication.
TECHNICAL SUMMARY
| Service name | ssh-agent |
|---|---|
| Display name | OpenSSH Authentication Agent |
| Runs from | C:\Windows\System32\OpenSSH\ssh-agent.exe |
| Command line | ssh-agent.exe |
| Runs as | LocalSystem |
| Signed by | Microsoft Windows |
| Verdict | Depends on what you use |
Paths, signer and service account observed on Windows 11 build 26300 on 12 November 2026. Run the commands below to check your own PC.
Should you touch it?
Depends on what you useMicrosoft's list gives its default startup type as Disabled and rates it Already disabled, so finding it disabled is normal. It matters only if you use SSH keys: Microsoft documents ssh-agent as a way to store private keys securely within a Windows security context associated with your Windows account. On the PC used for this page it was Disabled and stopped.
What PC Tweaker does with it
PC Tweaker does not change this service. No control in the catalogue stops it, disables it or edits its start type.
Check it yourself
See its state and start type
PowerShellGet-Service ssh-agent | Format-List Name, DisplayName, Status, StartType sc qc ssh-agentLet it start only when needed (administrator)
Note the START_TYPE that sc qc printed first, so you can put it back.
cmdsc config ssh-agent start= demandPut it back
Use the start type you noted.
cmdsc config ssh-agent start= <auto|delayed-auto|demand>
Common questions
What does the ssh-agent service do?
Agent to hold private keys used for public key authentication. It runs C:\Windows\System32\OpenSSH\ssh-agent.exe (ssh-agent.exe) as LocalSystem.
Can I disable ssh-agent?
Depends on what you use. Microsoft's list gives its default startup type as Disabled and rates it Already disabled, so finding it disabled is normal. It matters only if you use SSH keys: Microsoft documents ssh-agent as a way to store private keys securely within a Windows security context associated with your Windows account. On the PC used for this page it was Disabled and stopped.
How do I start the ssh-agent service on Windows 11?
Microsoft notes that the service is disabled by default, so it has to be enabled before it can start. Microsoft's commands, run in an elevated PowerShell: Get-Service ssh-agent | Set-Service -StartupType Automatic, then Start-Service ssh-agent. After that, ssh-add followed by the path of a key file loads that private key into the agent.
Do I need ssh-agent if I never use SSH?
No. Microsoft's description is one line, an agent to hold private keys used for public key authentication, and its default state is Disabled. Leave it as it is.
How do I check that it is the real service?
On Windows 11 build 26300 the service runs C:\Windows\System32\OpenSSH\ssh-agent.exe as LocalSystem, and the file carries a valid Microsoft Windows signature. sc qc ssh-agent prints the path on your PC.