How to Turn On or Off Paging File Encryption in Windows 11

What is Paging File Encryption?

Paging file encryption in Windows 11 protects temporary data stored on your hard drive. Physical memory fills up fast during heavy workloads, prompting Windows 11 to lean on a virtual memory file known as the paging file to handle overflow data. Encrypting this paging file stops others from reading it if they gain access to your drive.

Random Access Memory (RAM) runs out during intensive tasks, causing Windows 11 to use the paging file to store temporary data. The paging file does not encrypt sensitive data by default, allowing unauthorized users to read stored information if they access the computer. Encrypting the paging file protects this temporary data from snooping and unauthorized access, safeguarding information stored by the system.

What happens during encryption? Data becomes safer. The computer might work a little harder, however, which can slow performance slightly.

How to Check and Change Paging File Encryption

Enabling or disabling this encryption requires specific configuration methods:

• Using Command Prompt or Windows Terminal
• Using the Local Group Policy Editor
• Using the Windows Registry

Method 1Use Command Prompt or Windows Terminal

Command Prompt or Windows Terminal offers a fast way to check the current status of paging file encryption in Windows 11. Search for “Windows Terminal” in the Start menu ⊞, right-click the result, and select Run as administrator. Typing a specific command reveals this security feature’s status instantly, bypassing complex settings menus.

1. Open Windows Terminal as Administrator. To do this, search for "Windows Terminal" in the Start menu, right-click it, and select Run as administrator. ⚠️ Admin required
2. Type this command and press Enter to check if encryption is on or off:
   
   fsutil behavior query encryptpagingfile
3. Look at the result:

   • If you see EncryptPagingFile = 0, encryption is off.
   • If it says EncryptPagingFile = 1, encryption is on.
4. To turn on encryption, type this command and press Enter:
   
   fsutil behavior set encryptpagingfile 1
   
   ⚠️ Admin required
5. To turn off encryption, type this command and press Enter:
   
   fsutil behavior set encryptpagingfile 0
   
   ⚠️ Admin required
6. Restart your computer after running these commands. The changes won't work until you do.

Method 2Use Local Group Policy Editor

Windows 11 Pro or Enterprise editions allow toggling paging file encryption through the Local Group Policy Editor. Press the Windows key + R on your keyboard, type gpedit.msc into the run box, and press Enter to open the Local Group Policy Editor. This tool offers a visual interface for managing the security setting without command lines, making navigation more accessible.

1. Press Windows + R keys together.
2. Type gpedit.msc and press Enter to open the Local Group Policy Editor. ⚠️ Admin required
3. Navigate to this folder: Computer Configuration\Administrative Templates\System\Filesystem\NTFS
4. On the right side, find and double-click Enable NTFS pagefile encryption.
5. Choose one of these options:

   • Not Configured – The default setting.
   • Enabled – Turn on pagefile encryption.
   • Disabled – Turn off pagefile encryption.
6. Click OK and close the editor.
7. Restart your computer to apply the changes.

Method 3Use Windows Registry Editor

Systems lacking the Group Policy Editor rely on the Registry Editor to control paging file encryption in Windows 11. This Registry Editor method involves making a specific change to the Windows 11 system registry. Extreme care prevents unintended system instability during these registry edits.

1. Press Windows + R keys together.
2. Type regedit and press Enter to open the Registry Editor. ⚠️ Admin required
3. Go to this location: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\FileSystem
4. On the right side, find NtfsEncryptPagingFile and double-click it.
5. Change the value to:

   • 1 to turn encryption on
   • 0 to turn encryption off
6. Click OK and close the Registry Editor.
7. Restart your computer to apply the change.

Summary

• Why encrypt your paging file? It keeps your data safer by stopping others from reading temporary files on your hard drive.
• What's the downside? Turning on encryption may cause your computer to work a little harder, which can slow it down slightly.
• How many ways can you do this? You can use the Command Prompt, Local Group Policy Editor, or Registry Editor to change this setting.
• Don't forget! Always restart your computer after making changes for them to take effect.
• Need more help? Check the official Microsoft page: Enable Pagefile Encryption - Microsoft