All notes / windows · security
How to encrypt a folder in Windows without losing access
The feature Windows ships with, and the step almost everyone forgets.
Windows includes the Encrypting File System (EFS) in its Pro, Enterprise and Education editions. It encrypts a folder’s contents so another account, or someone who plugs your drive into another computer, can’t read them.
How to encrypt the folder
- Right-click the folder and choose Properties.
- On the General tab, open Advanced.
- Check Encrypt contents to secure data and click OK.
- Apply the change to the folder, subfolders and files.
The most important step: back up your certificate
Encryption is tied to a certificate in your Windows account. If you reinstall Windows, your profile gets corrupted or you move the drive to another computer without that certificate, the files become unreadable.
How to back it up: Windows usually prompts “Back up your file encryption key”. If it doesn’t, open certmgr.msc, go to Personal → Certificates, find the certificate whose purpose is “Encrypting File System” and choose All Tasks → Export, including the private key. Protect the .pfx file with a password and store it off the computer, for example in your cloud.
What if you have Windows Home?
EFS isn’t available in Windows Home. On compatible computers you can turn on Device encryption, and Pro editions also include BitLocker to encrypt the whole drive. Either way, keep the recovery key safe.
Encrypting takes a minute. Without the certificate, there’s no getting your files back. Back it up today.