How to Turn On or Off Paging File Encryption in Windows 11

What is Paging File Encryption?

Paging file encryption in Windows 11 protects temporary data stored on your hard drive by scrambling it so no one can read it if they steal your drive. When your computer runs out of physical memory, Windows uses the paging file (a space on your hard drive) to store overflow data, making encryption important for privacy.

When physical memory (RAM) runs out during heavy tasks, Windows uses a hidden virtual memory file called the paging file to store temporary data. The paging file does not encrypt sensitive data by default, allowing unauthorized users to read stored information if they access the computer. Encrypting the paging file protects this temporary data from snooping and unauthorized access, safeguarding information stored by the system.

What happens during encryption? Data becomes safer. The computer might work a little harder, however, which can slow performance slightly.

How to Check and Change Paging File Encryption

Enabling or disabling this encryption requires specific configuration methods:

• Using Command Prompt or Windows Terminal
• Using the Local Group Policy Editor
• Using the Windows Registry

Method 1Use Command Prompt or Windows Terminal

Windows Terminal lets you check or change paging file encryption in Windows 11 using a quick command. You can open Windows Terminal as an administrator, run a specific command to see if the feature is turned on, and secure your virtual memory without digging through menus.

1. Open Windows Terminal as Administrator. To do this, search for "Windows Terminal" in the Start menu, right-click it, and select Run as administrator. ⚠️ Admin required
2. Type this command and press Enter to check if encryption is on or off:
   
   fsutil behavior query encryptpagingfile
3. Look at the result:

   • If you see EncryptPagingFile = 0, encryption is off.
   • If it says EncryptPagingFile = 1, encryption is on.
4. To turn on encryption, type this command and press Enter:
   
   fsutil behavior set encryptpagingfile 1
   
   ⚠️ Admin required
5. To turn off encryption, type this command and press Enter:
   
   fsutil behavior set encryptpagingfile 0
   
   ⚠️ Admin required
6. Restart your computer after running these commands. The changes won't work until you do.

Method 2Use Local Group Policy Editor

Local Group Policy Editor provides a built-in menu to turn paging file encryption on or off in Windows 11 Pro and Enterprise editions. You can open this tool using the Run dialog box to change your system security settings without using command line tools.

1. Press Windows + R keys together.
2. Type gpedit.msc and press Enter to open the Local Group Policy Editor. ⚠️ Admin required
3. Navigate to this folder: Computer Configuration\Administrative Templates\System\Filesystem\NTFS
4. On the right side, find and double-click Enable NTFS pagefile encryption.
5. Choose one of these options:

   • Not Configured – The default setting.
   • Enabled – Turn on pagefile encryption.
   • Disabled – Turn off pagefile encryption.
6. Click OK and close the editor.
7. Restart your computer to apply the changes.

Method 3Use Windows Registry Editor

Registry Editor lets you enable paging file encryption in Windows 11 Home editions where the Group Policy Editor is missing. By opening regedit and changing a specific system value, you can force Windows to secure your virtual memory.

1. Press Windows + R keys together.
2. Type regedit and press Enter to open the Registry Editor. ⚠️ Admin required
3. Go to this location: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\FileSystem
4. On the right side, find NtfsEncryptPagingFile and double-click it.
5. Change the value to:

   • 1 to turn encryption on
   • 0 to turn encryption off
6. Click OK and close the Registry Editor.
7. Restart your computer to apply the change.

Summary

• Why encrypt your paging file? It keeps your data safer by stopping others from reading temporary files on your hard drive.
• What's the downside? Turning on encryption may cause your computer to work a little harder, which can slow it down slightly.
• How many ways can you do this? You can use the Command Prompt, Local Group Policy Editor, or Registry Editor to change this setting.
• Don't forget! Always restart your computer after making changes for them to take effect.
• Need more help? Check the official Microsoft page: Enable Pagefile Encryption - Microsoft