Encrypting files

Encrypting files and folders in Windows is one of the most effective ways to protect sensitive data from unauthorised access. Whether you are securing personal documents, financial records, or work-related files, Windows includes built-in encryption tools that do not require third-party software.

Methods to encrypt files in Windows

Encrypting File System (EFS) is available in Windows Pro and Enterprise editions. It allows you to encrypt individual files and folders so that only your user account can open them. EFS encryption is transparent — once a file is encrypted, you can still open and edit it as normal while logged into your account.

How to use EFS

right-click the file or folder, select Properties → Advanced → check "Encrypt contents to secure data." Windows will prompt you to back up your encryption certificate — do not skip this step, as losing the certificate means losing access to the files permanently.

BitLocker for full-drive encryption

BitLocker encrypts entire drives rather than individual files. It is built into Windows Pro and Enterprise and protects all data on the drive, including system files and temporary files. BitLocker is especially useful for laptops that may be lost or stolen.

When to choose EFS or BitLocker

Use EFS for encrypting specific files and folders while leaving the rest of the system unchanged. Use BitLocker when you need full-drive protection, especially on portable devices.

Important precautions

Always back up your encryption keys and certificates. If you lose the key or certificate, the encrypted data cannot be recovered — not even by Microsoft or a computer repair service. Store backups in a secure, separate location such as a USB drive kept in a safe place or a printed copy.

Encryption does not protect against malware that is already running under your user account. Keep Windows and your antivirus software up to date to reduce the risk of unauthorised access before files are encrypted.