How to encrypt files and folders in Windows 11, 10, 8 or 7

Looking to improve your security by encrypting your files or even your hard drives in Windows? We will walk you through every step so you can keep all of your sensitive data safe.

Updated: November 13, 2023

If you encrypt files and folders in Windows, your data will become unreadable to unauthorized parties. Only someone with the correct password, or decryption key, can make the data readable again. This article will explain several methods you can use to encrypt your data in Windows 11, 10, 8 or 7.

Encryption options

To encrypt files and folders in Windows, you can use the following:

Tip: Alternatively, if all you are concerned about is avoiding somebody snooping at home, you can encrypt or password-protect individual MS Word or MS Excel files quickly from within documents. ComputerHope shows you how.

Encryption trends

Research by Flashpoint found that 6.2 billion data records were stolen between January and September 2023. However, earlier research from Gemalto has shown that less than five percent of breaches involved encrypted data.

According to our own research into encryption statistics, some 60% of surveyed organizations transfer sensitive files to the cloud regardless of whether they are encrypted or otherwise made unreadable.

Before you start to encrypt files and folders in Windows

Keep the following information in mind before you encrypt your data in Windows:

Encrypted files are not completely resistant to hacks

Encrypted files are not 100 percent secure. Hackers can (albeit with difficulty) bypass encryption. You’re at risk if you store cryptographic keys and passwords in an unencrypted file or if a hacker has planted a keylogger on your system.

Keyloggers can be installed by malware on your computer. If you encrypt a single file with EFS, your computer will store an unencrypted version of that file in its temporary memory, so a hacker may still be able to access it. If your data is really valuable, consider a paid, expert, cloud encryption solution.

Create backups

Always make unencrypted backups of your files in case you lose your passwords. Store them in a safe physical location. This will ensure you can easily retrieve them should your entire system become compromised.

Understand your encryption needs

Decide exactly what you want/need to encrypt. This will determine what encryption method you use. Scroll down to the “To encrypt or not to encrypt files and folders in Windows?” section for more on this.

Be aware of EFS limitations

An EFS encrypted file loses its encryption if you move it to a Fat 32 or exFAT drive, or transmit it via a network or email. EFS also does not protect files from being deleted unless you have used Windows permissions to protect it. You cannot encrypt a compressed file or folder with EFS; you need to extract the contents first.

How does Windows encrypt files and folders?

BitLocker

BitLocker encrypts an entire volume on your hard drive (or a removable device), no matter who is logged in. To unlock a drive that is protected with BitLocker, anyone wanting access must enter a password or use a USB drive that unlocks the PC when it is inserted.

BitLocker uses trusted platform module (TPM) hardware. A TPM chip enables your device to support advanced security features. For instance, when encryption is only at the software level, access may be vulnerable to dictionary attacks.

Because TPM is at the hardware level, it can protect against guessing or automated dictionary attacks. You can use BitLocker without a TPM chip by using software-based encryption, but it requires some extra steps for additional authentication.

To check if your device has a TPM chip:

  1. Press the Windows key + X on your keyboard and select Device Manager .
  2. Expand Security devices .
  3. If you have a TPM chip, one of the items should read Trusted Platform Module with the version number.

BitLocker is available on: