How to Change Encryption Level for File Sharing Connections in Windows 11
You change the encryption level for file sharing connections in Windows 11 by adjusting network security settings within the Control Panel.
File sharing allows you to grant access to folders on your PC to other devices on your local network. Encryption protects these shared files during transfer, with Windows 11 defaulting to strong 128-bit encryption.
If you encounter compatibility issues with older devices that cannot support the default 128-bit encryption, you can downgrade the security to 40-bit or 56-bit encryption. This ensures older network hardware can still access your shared resources.
Adjust file sharing encryption in Windows 11 via Settings or Control Panel. Navigate to Advanced sharing settings, expand “All networks,” and choose “128-bit encryption” or “40- or 56-bit encryption” under File sharing connections.
Option 1Use Settings
This option works on Windows 11 version 22H2 KB5030310 Build 22621.2361.1 and newer.
- Open Settings by pressing ⊞ Win+I.
- Click Network & internet on the left side.
- Click Advanced network settings on the right side.
- Click Advanced sharing settings on the right side. Open Advanced sharing settings
- Click All networks to expand it.
- Under File sharing connections, choose one of these options:
- 128-bit encryption (default) — Use this for most modern devices.
- 40- or 56-bit encryption — Use this only if you have older devices that need it.
- Close Settings when done.
Option 2Use Control Panel
This option does not work on Windows 11 build 22509.1011.1 and newer. Use Option One instead.
- Open Control Panel and switch to icons view.
- Click the Network and Sharing Center icon.
- Click Change advanced sharing settings on the left side.
- Click to expand All networks.
- Under File sharing connections, choose one of these options:
- 128-bit encryption (default)
- 40- or 56-bit encryption
- Click Save changes.
- Close Control Panel when done.
Option 3Use the Registry
⚠️ Admin privileges required.
You can also change encryption settings by editing the Windows Registry. Follow these steps:
For 128-bit Encryption (Default)
Add or modify these registry values:
reg add "HKLM\SYSTEM\CurrentControlSet\Control\Lsa\MSV1_0" /v NtlmMinClientSec /t REG_DWORD /d 0x20000000 /f
reg add "HKLM\SYSTEM\CurrentControlSet\Control\Lsa\MSV1_0" /v NtlmMinServerSec /t REG_DWORD /d 0x20000000 /f
For 40- or 56-bit Encryption
Add or modify these registry values:
reg add "HKLM\SYSTEM\CurrentControlSet\Control\Lsa\MSV1_0" /v NtlmMinClientSec /t REG_DWORD /d 0 /f
reg add "HKLM\SYSTEM\CurrentControlSet\Control\Lsa\MSV1_0" /v NtlmMinServerSec /t REG_DWORD /d 0 /f
Summary
Windows 11 lets you control the encryption level used for file sharing. The default is 128-bit encryption, which is the safest choice for modern devices. If you have older devices that cannot support 128-bit encryption, you can switch to 40- or 56-bit encryption instead. You can make this change using Settings, Control Panel, or the Registry. Remember that you need admin rights to make these changes.
Does 🪟 Windows 11 have file encryption?
Encrypted File System is not available on Windows 11 Home Edition. It's important to note that the Encrypted File System is unavailable on Windows 11 Home Edition, so users should consider upgrading to Windows 11 Pro for this functionality.
Should I enable SMB encryption?
By default, when you create an SMB server on the storage virtual machine (SVM), SMB encryption is disabled. You must enable it to take advantage of the enhanced security provided by SMB encryption.
Does 🪟 Windows 11 support AES-256?
Symmetric and asymmetric encryption (support for AES 128/256 and RSA 512 to 16,384, in 64-bit increments and ECDSA over NIST-standard prime curves P-256, P-384, P-521)
Was this guide helpful?
About the Author
Richard
Tech Writer, IT Professional
Richard, a writer for Geek Rewind, is a tech enthusiast who loves breaking down complex IT topics into simple, easy-to-understand ideas. With years of hands-on experience in system administration and enterprise IT operations, he’s developed a knack for offering practical tips and solutions. Richard aims to make technology more accessible and actionable. He's deeply committed to the Geek Rewind community, always ready to answer questions and engage in discussions.
No comments yet — be the first to share your thoughts!