How to Change Windows 11 File Sharing Encryption Level

Option 1Change Encryption Using Windows Settings (🪟 Windows 11 Version 22H2 and newer)

Windows 11 file sharing encryption can be adjusted directly through the Settings ⚙️ app on version 22H2 and newer. Open Settings by pressing the Win+I, go to Network & internet, and select Advanced network settings. This method lets you control network security without using advanced tools.

1. Open Settings. Press the Windows key + I keys on your keyboard.
2. Go to Network & internet. In the left-hand menu, click “Network & internet.” Then, on the right side, click “Advanced network settings.”
3. Find Advanced sharing settings. Scroll down on the “Advanced network settings” page and click on “Advanced sharing settings.”
4. Expand All networks. Under “Advanced sharing settings,” click the arrow next to “All networks” to see more options.
5. Choose your encryption level. Look for the “File sharing connections” menu. You have two choices:
   

   • 128-bit encryption (recommended): This is the most secure option and is usually the default. Use this if your devices support it.
   • 40- or 56-bit encryption: Choose this if you have trouble connecting with older devices or specific network hardware. This is less secure but works with more devices.

   Click your preferred option from the drop-down menu.

   Advertisement
6. Close the Settings window. Your changes are saved automatically.
   

Option 2Change Encryption Using Control Panel (Older 🪟 Windows 11 Versions)

Windows 11 file sharing encryption on older system versions is managed through the Control Panel. Open the Control Panel from the Start menu and set your view to large or small icons. This provides access to the network and sharing settings needed to adjust your encryption level.

1. Open Control Panel. Click the Start button, type Control Panel, and then click on the Control Panel app in the search results.
   

   💡TipMake sure your Control Panel is set to view by “Large icons” or “Small icons” to see all options.

   If it's set to “Category,” click “Network and Internet” first.

2. Go to Network and Sharing Center. Click on the “Network and Sharing Center” icon.
   
3. Access Advanced sharing settings. On the left side of the Network and Sharing Center, click “Change advanced sharing settings.”
4. Expand All networks. Click the arrow next to “All networks” to show more options.
5. Select your encryption level. Under the “File sharing connections” section, choose either:

   • 128-bit encryption (recommended)
   • 40- or 56-bit encryption
   Click the circle next to your choice.
6. Save changes. Click the “Save changes” button at the bottom. If you don't do this, your setting won't be applied.
   

   Save changes by clicking the "Save changes" button. Without saving, your setting will not be applied. If you do not see the "File sharing connections" option, you are likely using a newer Windows 11 version (version 22H2 or later) where this setting resides in the Settings app.

7. Close the Control Panel window.
   

Option 3Manually Change Encryption Using Registry Editor

Registry Editor allows you to manually change Windows 11 file sharing encryption when Settings or Control Panel options are not enough. Go to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System to back up your registry before making any changes.

Before you start: It's a good idea to back up your registry. Open Registry Editor, navigate to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System, and save a copy of your registry.

To Use 128-bit Encryption (Default and Recommended)

Windows 11 file sharing encryption uses 128-bit encryption by default to provide maximum security for your network. Open Registry Editor by typing regedit in the Start menu, then locate the registry path HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet to verify or apply this setting.

1. Open Registry Editor. Click the Start button, type regedit, and click “Registry Editor.” Click “Yes” if a User Account Control (UAC) prompt appears.
2. Go to the correct registry path. In the Registry Editor, use the left pane to go to this location:
   HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\MSV1_0
   

   You can also copy and paste this path into the address bar at the top of the Registry Editor and press Enter.

3. Change or create the NtlmMinClientSec value. In the right pane, look for a value called NtlmMinClientSec. If it's there, double-click it. If not, right-click in an empty space, select New, and then choose DWORD (32-bit) Value. Name it exactly NtlmMinClientSec.
   

   • Value Name: NtlmMinClientSec
   
   
   • Value Type: REG_DWORD
   • Value Data: 20000000 (in hexadecimal)

   Enter 20000000 into the “Value data” box and click “OK.”

   Advertisement
4. Change or create the NtlmMinServerSec value. Look for a value called NtlmMinServerSec. If it's not there, create it as a new DWORD (32-bit) Value. Double-click it.
   

   • Value Name: NtlmMinServerSec
   • Value Type: REG_DWORD
   • Value Data: 20000000 (in hexadecimal)

   Enter 20000000 into the “Value data” box and click “OK.”

   💡TipThe hexadecimal value 20000000 tells Windows to use 128-bit encryption.

   The hexadecimal value 20000000 tells Windows to use 128-bit encryption. This is the most secure setting.

5. Close Registry Editor.
6. Restart your computer. This helps make sure the changes are applied correctly.
   

To Use 40- or 56-bit Encryption (Less Secure, More Compatible)

Windows 11 file sharing encryption can be lowered to 40-bit or 56-bit to fix compatibility issues with older network devices. Open Registry Editor by pressing the Windows key + R, typing regedit, and going to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet. Note that this reduces your security level.

1. Open Registry Editor. Press Windows key + R, type regedit, and press Enter. Click “Yes” on the UAC prompt.
2. Go to the correct registry path. Navigate to this path:
   HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\MSV1_0
3. Change or create the NtlmMinClientSec value. In the right pane, find or create the NtlmMinClientSec value (as a DWORD (32-bit) Value if it doesn't exist).
   

   • Value Name: NtlmMinClientSec
   • Value Type: REG_DWORD
   • Value Data: 0 (in hexadecimal)

   Double-click the value, enter 0 in the “Value data” box, and click “OK.”

   Advertisement
4. Change or create the NtlmMinServerSec value. Find or create the NtlmMinServerSec value (as a DWORD (32-bit) Value if needed).
   

   • Value Name: NtlmMinServerSec
   • Value Type: REG_DWORD
   
   
   • Value Data: 0 (in hexadecimal)

   
   

   Double-click the value, enter 0 in the “Value data” box, and click “OK.”

   Warning: Setting these values to 0 allows older, weaker encryption methods (40- or 56-bit) to be used. This makes your file sharing connections much less secure.

5. Close Registry Editor.
6. Restart your computer. This is needed for the registry changes to work.
   

Summary

Windows 11 file sharing encryption protects data sent across your local network and can be adjusted based on device compatibility. Newer systems use the Settings app, older builds use Control Panel, and Registry Editor handles manual tweaks. Choose your security level carefully to balance safety and device access.