How to Turn On or Off Paging File Encryption in Windows 11

This guide will help you easily turn on or turn off the encryption for your paging file in Windows 11. Don’t worry—we’ll explain everything in simple terms.

What is Paging File Encryption?

Windows uses something called a paging file (also known as virtual memory) to store information temporarily when your computer’s RAM is full. Think of it as extra storage space on your hard drive that helps your computer run smoothly.

Why does this matter? By default, this paging file is not encrypted. This means the data stored there could be read by someone with bad intentions if they access your computer. Encrypting the paging file protects this data.

What happens when you encrypt it? Your data becomes safer. But your computer might work a little harder, which could slow it down slightly.

How to Check and Change Paging File Encryption

You can turn this encryption on or off in three easy ways:

• Using Command Prompt or Windows Terminal
• Using the Local Group Policy Editor
• Using the Windows Registry

Method 1: Use Command Prompt or Windows Terminal

This is the fastest method. Follow these simple steps:

1. Open Windows Terminal as Administrator. To do this, search for “Windows Terminal” in the Start menu, right-click it, and select Run as administrator. ⚠️ Admin required
2. Type this command and press Enter to check if encryption is on or off:
   
   fsutil behavior query encryptpagingfile
3. Look at the result:
   • If you see EncryptPagingFile = 0, encryption is off.
   • If it says EncryptPagingFile = 1, encryption is on.
4. To turn on encryption, type this command and press Enter:
   
   fsutil behavior set encryptpagingfile 1
   
   ⚠️ Admin required
5. To turn off encryption, type this command and press Enter:
   
   fsutil behavior set encryptpagingfile 0
   
   ⚠️ Admin required
6. Restart your computer after running these commands. The changes won’t work until you do.

Method 2: Use Local Group Policy Editor

Use this method if you prefer a visual tool. Note: This only works on Windows 11 Pro or Enterprise editions.

1. Press Windows + R keys together.
2. Type gpedit.msc and press Enter to open the Local Group Policy Editor. ⚠️ Admin required
3. Navigate to this folder: Computer Configuration\Administrative Templates\System\Filesystem\NTFS
4. On the right side, find and double-click Enable NTFS pagefile encryption.
5. Choose one of these options:
   • Not Configured – The default setting.
   • Enabled – Turn on pagefile encryption.
   • Disabled – Turn off pagefile encryption.
6. Click OK and close the editor.
7. Restart your computer to apply the changes.

Method 3: Use Windows Registry Editor

If you don’t have access to the Group Policy Editor, you can use the Registry Editor instead. Be careful with this tool, and consider backing up your registry first.

1. Press Windows + R keys together.
2. Type regedit and press Enter to open the Registry Editor. ⚠️ Admin required
3. Go to this location: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\FileSystem
4. On the right side, find NtfsEncryptPagingFile and double-click it.
5. Change the value to:
   • 1 to turn encryption on
   • 0 to turn encryption off
6. Click OK and close the Registry Editor.
7. Restart your computer to apply the change.

Summary

• Why encrypt your paging file? It keeps your data safer by stopping others from reading temporary files on your hard drive.
• What’s the downside? Turning on encryption may cause your computer to work a little harder, which can slow it down slightly.
• How many ways can you do this? You can use the Command Prompt, Local Group Policy Editor, or Registry Editor to change this setting.
• Don’t forget! Always restart your computer after making changes for them to take effect.
• Need more help? Check the official Microsoft page: Enable Pagefile Encryption – Microsoft