How to Change Encryption Level for File Sharing Connections in Windows 11

Option 1Use Settings

You can change the encryption level for Windows 11 file sharing connections using ⚙️ the Settings app, but this method only works on newer versions of Windows 11, specifically build 22621.2361.1 or later.

1. ⚙️ Open Settings by pressing ⊞ Win+I.
2. Click Network & internet on the left side.
3. Click Advanced network settings on the right side.
4. Click Advanced sharing settings on the right side.  Open Advanced sharing settings
5. Click All networks to expand it.
6. Under File sharing connections, choose one of these options:

   • 128-bit encryption (default) — Use this for most modern devices.
   • 40- or 56-bit encryption — Use this only if you have older devices that need it.
7. Close Settings when done.

Option 2Use 🎛️ Control Panel

If you’re using an older version of Windows 11, you can change the encryption level for file sharing connections through the 🎛️ Control Panel, as this method is not compatible with builds 22509.1011.1 and newer.

1. Open 🎛️ Control Panel and switch to icons view.
2. Click the Network and Sharing Center icon.
3. Click Change advanced sharing settings on the left side.
4. Click to expand All networks.
5. Under File sharing connections, choose one of these options:

   • 128-bit encryption (default)
   • 40- or 56-bit encryption
6. Click Save changes.
7. Close 🎛️ Control Panel when done.

Option 3Use the Registry

⚠️ Admin privileges required.

You can also change encryption settings by directly editing the Windows Registry, which is like a central database for your system’s settings. Follow these steps:

For 128-bit Encryption (Default)

For 128-bit Encryption (Default): You’ll need to add or change specific entries in the Registry.

reg add "HKLM\SYSTEM\CurrentControlSet\Control\Lsa\MSV1_0" /v NtlmMinClientSec /t REG_DWORD /d 0x20000000 /f
reg add "HKLM\SYSTEM\CurrentControlSet\Control\Lsa\MSV1_0" /v NtlmMinServerSec /t REG_DWORD /d 0x20000000 /f

For 40- or 56-bit Encryption

For 40- or 56-bit Encryption: Similarly, you’ll add or change different entries here.

reg add "HKLM\SYSTEM\CurrentControlSet\Control\Lsa\MSV1_0" /v NtlmMinClientSec /t REG_DWORD /d 0 /f
reg add "HKLM\SYSTEM\CurrentControlSet\Control\Lsa\MSV1_0" /v NtlmMinServerSec /t REG_DWORD /d 0 /f

Summary

Windows 11 lets you control the encryption level for file sharing, with 128-bit being the safest default for modern computers, though you can switch to 40- or 56-bit for older devices if needed.