Privacy and Security Encrypt or Decrypt Files and Folders with EFS in Windows 11


  • Staff
Lock_banner.png

This tutorial will show you how to encrypt or decrypt a file or folder in Windows 10 and Windows 11.

The Encrypted File System, or EFS, provides an additional level of security for files and folders. It provides cryptographic protection of individual files on NTFS file system volumes using a public-key system.

Files or folders saved into an existing encrypted folder will automatically be encrypted by EFS.

Reference:


Encrypted File System, or EFS, is not available in the Windows 10/11 Home edition.

If you ZIP and EFS encrypted file or folder, the file or folder in the ZIP will not be encrypted.

If an administrator changes or resets the password of a local account on the PC, that local account will lose access to all their EFS encrypted files and folders until they restore the EFS file encryption key from a backup.

If you try to copy or move an EFS encrypted file or folder to a location that does not support encryption, you will be prompted with a "Do you want to copy this file without encryption" type dialog like below.

EFS_interrupted_action.png


It is highly recommended you back up your EFS file encryption key after encrypting files and folders to help avoid permanently losing access to your encrypted files and folders.

If you lose access to your encrypted files and folders, you will not be able to open them again unless you first restore the EFS file encryption key for them.



Contents



EXAMPLE: File and folder encrypted by EFS

EFS_encrypted_folder_and_file.png





Option One

Encrypt or Decrypt File(s) in Properties


1 Right click or press and hold on one or more selected file(s), and click/tap on Properties. (see screenshot below)

Encrypt_file-1.png

2 In the General tab, click/tap on the Advanced button. (see screenshot below)

Encrypt_file-2.png

3 Check (encrypt) or uncheck (decrypt - default) Encrypt contents to secure data for what you want, and click/tap on OK. (see screenshots below)

Encrypt_file-3.png
Decrypt_file-3.png

4 Click/tap on OK. (see screenshot below)

Encrypt_file-4.png

5 If encrypting, select (dot) Encrypt the file and its parent folder or Encrypt the file only for what you want, and click/tap on OK. (see screenshot below)

Encrypt_file-5.png




Option Two

Encrypt or Decrypt Folder(s) in Properties


1 Right click or press and hold on one or more selected folder(s), and click/tap on Properties. (see screenshot below)

Encrypt_folder-1.png

2 In the General tab, click/tap on the Advanced button. (see screenshot below)

Encrypt_folder-2.png

3 Check (encrypt) or uncheck (decrypt - default) Encrypt contents to secure data for what you want, and click/tap on OK. (see screenshots below)

Encrypt_folder-3.png
Decrypt_folder-3.png

4 Click/tap on OK. (see screenshot below)

Encrypt_folder-4.png

5 Select (dot) Apply changes to this folder only or Apply changes to this folder, subfolders and files for what you want, and click/tap on OK. (see screenshots below)

Encrypt_folder-5.png
Decrypt_folder-5.png




Option Three

Encrypt File using Command


1 Open Windows Terminal, and select either Windows PowerShell or Command Prompt.

2 Type the command below into Windows Terminal, and press Enter. (see screenshot below)

cipher /e "<full path of file>"

Substitute <full path of file> in the command above with the actual full path of the file you want to encrypt.

For example: cipher /e "C:\Users\Brink\Desktop\File.txt"


Encrypt_file-command.png





Option Four

Decrypt File using Command


1 Open Windows Terminal, and select either Windows PowerShell or Command Prompt.

2 Type the command below into Windows Terminal, and press Enter. (see screenshot below)

cipher /d "<full path of file>"

Substitute <full path of file> in the command above with the actual full path of the file you want to decrypt.

For example: cipher /d "C:\Users\Brink\Desktop\File.txt"


Decrypt_file-command.png





Option Five

Decrypt File(s) using Context Menu


1 Select one or more file(s) you want to decrypt.

2 Press and hold the Shift key, right click on the selected file(s), and release the Shift key.

3 Click/tap on File ownership, and click/tap on Personal. (see screenshot below)

Decrypt_file-context_menu.png





Option Six

Encrypt Folder using Command


1 Open Windows Terminal, and select either Windows PowerShell or Command Prompt.

2 Type the command below you want to use into Windows Terminal, and press Enter. (see screenshots below)

(Apply changes to this folder only)​
cipher /e "<full path of folder>"

OR​

(Apply changes to this folder, subfolders and files)​
cipher /e /s:"<full path of folder>"

Substitute <full path of folder> in the command above with the actual full path of the folder you want to encrypt.

For example: cipher /e /s:"C:\Users\Brink\Desktop\Folder"


Encrypt_folder_only-command.png

Encrypt_folder_and_contents-command.png





Option Seven

Decrypt Folder using Command


1 Open Windows Terminal, and select either Windows PowerShell or Command Prompt.

2 Type the command below you want to use into Windows Terminal, and press Enter. (see screenshots below)

(Apply changes to this folder only)​
cipher /d "<full path of folder>"

OR​

(Apply changes to this folder, subfolders and files)​
cipher /d /s:"<full path of folder>"

Substitute <full path of folder> in the command above with the actual full path of the folder you want to decrypt.

For example: cipher /d /s:"C:\Users\Brink\Desktop\Folder"


Decrypt_folder_only-command.png

Decrypt_folder_and_contents-command.png



That's it,
Shawn Brink


 

Attachments

  • Lock.png
    Lock.png
    4.1 KB · Views: 80
Last edited:

Latest Support Threads

Back
Top Bottom