How to Turn On or Off Paging File Encryption in Windows 11

What is Paging File Encryption?

Paging file encryption in Windows 11 adds a security layer to your computer’s virtual memory, which is extra storage used when your RAM is full.

Why does this matter? Right now, your paging file isn’t encrypted by default. This means that if someone gains access to your computer, they could potentially read the data stored there. Encrypting the paging file protects this data.

What happens when you encrypt it? Your data becomes safer. But your computer might work a little harder, which could slow it down slightly.

How to Check and Change Paging File Encryption

You can turn this encryption on or off using these methods:

• Using Command Prompt or Windows Terminal
• Using the Local Group Policy Editor
• Using the Windows Registry

Method 1Use Command Prompt or Windows Terminal

You can quickly turn paging file encryption on or off in Windows 11 using the Command Prompt or Windows Terminal with a simple command.

1. Open Windows Terminal as Administrator. To do this, search for “Windows Terminal” in the ⊞ Start menu, right-click it, and select Run as administrator. ⚠️ Admin required
2. Type this command and press Enter to check if encryption is on or off:
   
   fsutil behavior query encryptpagingfile
3. Look at the result:

   • If you see EncryptPagingFile = 0, encryption is off.
   • If it says EncryptPagingFile = 1, encryption is on.
4. To turn on encryption, type this command and press Enter:
   
   fsutil behavior set encryptpagingfile 1
   
   ⚠️ Admin required
5. To turn off encryption, type this command and press Enter:
   
   fsutil behavior set encryptpagingfile 0
   
   ⚠️ Admin required
6. 🔄 Restart your computer after running these commands. The changes won’t work until you do.

Method 2Use Local Group Policy Editor

If you have Windows 11 Pro or Enterprise, you can use the Local Group Policy Editor to manage paging file encryption through a visual interface.

1. Press ⊞ Win+R keys together.
2. Type gpedit.msc and press Enter to open the Local Group Policy Editor. ⚠️ Admin required
3. Navigate to this folder: Computer Configuration\Administrative Templates\System\Filesystem\NTFS
4. On the right side, find and double-click Enable NTFS pagefile encryption.
5. Choose one of these options:

   • Not Configured – The default setting.
   • Enabled – Turn on pagefile encryption.
   • Disabled – Turn off pagefile encryption.
6. Click OK and close the editor.
7. 🔄 Restart your computer to apply the changes.

Method 3Use Windows Registry Editor

For Windows versions without the Group Policy Editor, you can turn paging file encryption on or off using the Windows Registry Editor, but be careful.

1. Press ⊞ Win+R keys together.
2. Type regedit and press Enter to open the Registry Editor. ⚠️ Admin required
3. Go to this location: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\FileSystem
4. On the right side, find NtfsEncryptPagingFile and double-click it.
5. Change the value to:

   • 1 to turn encryption on
   • 0 to turn encryption off
6. Click OK and close the Registry Editor.
7. 🔄 Restart your computer to apply the change.

Summary

• Why encrypt your paging file? It keeps your data safer by stopping others from reading temporary files on your hard drive.
• What’s the downside? Turning on encryption may cause your computer to work a little harder, which can slow it down slightly.
• How many ways can you do this? You can use the Command Prompt, Local Group Policy Editor, or Registry Editor to change this setting.
• Don’t forget! Always 🔄 restart your computer after making changes for them to take effect.
• Need more help? Check the official Microsoft page: Enable Pagefile Encryption – Microsoft