Privacy and Security Encrypt or Decrypt Files and Folders with EFS in Windows 11

This tutorial will show you how to encrypt or decrypt a file or folder in Windows 10 and Windows 11.

The Encrypted File System, or EFS, provides an additional level of security for files and folders. It provides cryptographic protection of individual files on NTFS file system volumes using a public-key system.

Files or folders saved into an existing encrypted folder will automatically be encrypted by EFS.

Reference:

Encrypted File System, or EFS, is not available in the Windows 10/11 Home edition.

If you ZIP and EFS encrypted file or folder, the file or folder in the ZIP will not be encrypted.

If an administrator changes or resets the password of a local account on the PC, that local account will lose access to all their EFS encrypted files and folders until they restore the EFS file encryption key from a backup.

If you try to copy or move an EFS encrypted file or folder to a location that does not support encryption, you will be prompted with a "Do you want to copy this file without encryption" type dialog like below.

It is highly recommended you back up your EFS file encryption key after encrypting files and folders to help avoid permanently losing access to your encrypted files and folders.

If you lose access to your encrypted files and folders, you will not be able to open them again unless you first restore the EFS file encryption key for them.

EXAMPLE: File and folder encrypted by EFS







1 Right click or press and hold on one or more selected file(s), and click/tap on Properties. (see screenshot below)


2 In the General tab, click/tap on the Advanced button. (see screenshot below)


3 Check (encrypt) or uncheck (decrypt - default) Encrypt contents to secure data for what you want, and click/tap on OK. (see screenshots below)


4 Click/tap on OK. (see screenshot below)


5 If encrypting, select (dot) Encrypt the file and its parent folder or Encrypt the file only for what you want, and click/tap on OK. (see screenshot below)






1 Right click or press and hold on one or more selected folder(s), and click/tap on Properties. (see screenshot below)


2 In the General tab, click/tap on the Advanced button. (see screenshot below)


3 Check (encrypt) or uncheck (decrypt - default) Encrypt contents to secure data for what you want, and click/tap on OK. (see screenshots below)


4 Click/tap on OK. (see screenshot below)


5 Select (dot) Apply changes to this folder only or Apply changes to this folder, subfolders and files for what you want, and click/tap on OK. (see screenshots below)






1 Open Windows Terminal, and select either Windows PowerShell or Command Prompt.

2 Type the command below into Windows Terminal, and press Enter. (see screenshot below)

Substitute <full path of file> in the command above with the actual full path of the file you want to encrypt.

For example: cipher /e "C:\Users\Brink\Desktop\File.txt"

1 Open Windows Terminal, and select either Windows PowerShell or Command Prompt.

2 Type the command below into Windows Terminal, and press Enter. (see screenshot below)

Substitute <full path of file> in the command above with the actual full path of the file you want to decrypt.

For example: cipher /d "C:\Users\Brink\Desktop\File.txt"

1 Select one or more file(s) you want to decrypt.

2 Press and hold the Shift key, right click on the selected file(s), and release the Shift key.

3 Click/tap on File ownership, and click/tap on Personal. (see screenshot below)







1 Open Windows Terminal, and select either Windows PowerShell or Command Prompt.

2 Type the command below you want to use into Windows Terminal, and press Enter. (see screenshots below)

Substitute <full path of folder> in the command above with the actual full path of the folder you want to encrypt.

For example: cipher /e /s:"C:\Users\Brink\Desktop\Folder"

1 Open Windows Terminal, and select either Windows PowerShell or Command Prompt.

2 Type the command below you want to use into Windows Terminal, and press Enter. (see screenshots below)

Substitute <full path of folder> in the command above with the actual full path of the folder you want to decrypt.

For example: cipher /d /s:"C:\Users\Brink\Desktop\Folder"

That's it,
Shawn Brink