How to Encrypt Files in Windows 11

What is Encryption?

Think of encryption as a lockbox for sensitive documents. The data is scrambled so that only authorized accounts can read it. If a laptop or drive is lost or stolen, the files stay unreadable even when someone plugs the drive into another machine.

Why encrypt your files? If your hardware is stolen, your personal documents stay unreadable to the thief as long as the encryption is in place.

What happens when you encrypt a folder? Files you add to that folder later are encrypted automatically. There is no need to repeat the steps for each new document.

This feature ties encryption to your Windows user account. You open your own files as normal, with no password prompt. Other user accounts on the same PC get an access denied message.

Important Things to Know

This built-in file encryption is not available on Windows 11 Home. It requires Windows 11 Pro or higher, and the Enterprise and Education editions also include it. On Home, the encryption option in the steps below will be missing or greyed out.

Some items cannot be encrypted this way:

• Compressed files. A file or folder with NTFS compression turned on can’t be encrypted until you clear the compression option. ZIP archives are the compressed items most people think of, so treat them with the same caution.
• Core system files.
• Mandatory operating system folders.

The drive must also be formatted as NTFS. Drives formatted as FAT32 or exFAT, which are common on USB sticks, will not offer the option.

To check a drive, open This PC, right-click the drive and click Properties. The General tab shows the file system.

How to Lock or Unlock Files and Folders Using Properties

The graphical menus are the fastest way to secure individual files or folders. No restart is needed. The change takes effect as soon as you confirm it with OK.

Steps to Encrypt (Lock) a File or Folder:

These steps show how to encrypt files in Windows 11 so that only your user account can open them.

1. Open File Explorer📁. Browse to the file or folder you want to protect, and note which drive it is on.
2. Right-click the item and click Properties. Selecting the item and pressing Alt+Enter does the same. The Properties window opens.
3. Click Advanced… on the General tab. The Advanced Attributes window opens.
4. Check Encrypt contents to secure data. If the box is greyed out, you are probably on Windows 11 Home, the drive is not NTFS, or compression is ticked. If compression is ticked, clear Compress contents to save disk space first, then tick the encryption box.
5. Click OK in the Advanced Attributes window. The window closes and you are back in Properties.
6. Click OK or Apply in the Properties window. An Encryption Warning or Confirm Attribute Changes window appears.
7. Choose whether to encrypt just this item or everything inside it. The next section explains what each choice does.
8. Click OK to apply the choice. A small padlock appears on the icon of the encrypted item.
9. Back up your file encryption key if Windows prompts you. Skipping this can leave the files unrecoverable if you lose your profile.

The next few paragraphs explain the screens behind those steps. First, right-click your folder or file and choose Properties. This is step 2 above.

In the Properties window, stay on the General tab. Click the Advanced… button near the bottom to open the extra attribute options.

In Advanced Attributes, the checkboxes control the final lock. Check Encrypt contents to secure data, then click OK. If the checkbox is greyed out, go back to the causes listed in step 4.

When you apply the change, Windows asks how far the encryption should reach.

For a folder, there are two choices: encrypt only the selected folder, or the folder and all its contents, including subfolders. Pick the second option to protect everything already inside.

How to Decrypt (Unlock) a File or Folder

To reverse the process, open the same menu: Properties › General › Advanced. Clear the Encrypt contents to secure data checkbox and click OK. Then click OK or Apply in the Properties window.

The item goes back to an unencrypted state. Do this while signed in to the account that encrypted it.

How to Lock or Unlock Files and Folders Using Commands

Encryption can also be handled from a command-line interface: Windows Terminal, PowerShell, or Command Prompt. This suits scripts and jobs that touch many items at once. The same limits apply as in the graphical method: Pro or higher, and an NTFS drive.

To Open Windows Terminal:

Open PowerShell

Open Command Prompt

To Encrypt (Lock) a File

To encrypt a single file, use this command:

cipher /e "FullFilePathHere"

Replace FullFilePathHere with your file’s location. If the path contains spaces, put it in quotation marks. For example:

cipher /e "C:\Users\UserName\SecretDocument.txt"

To Decrypt (Unlock) a File

For the next task, use this command. Swap in your own path, and use quotation marks if it contains spaces:

cipher /d "FullFilePathHere"

Example:

cipher /d "C:\Users\UserName\SecretDocument.txt"

To Encrypt (Lock) a Folder and Everything Inside

For the next task, use this command. The same rules about your own path and quotation marks apply:

cipher /e /s:"FullFolderPathHere"

Example:

cipher /e /s:"C:\Users\UserName\SecretDocument"

To Decrypt (Unlock) a Folder and Everything Inside

For the last task, use this command. Again, replace the path with your own:

cipher /d /s:"FullFolderPathHere"

Example:

cipher /d /s:"C:\Users\UserName\SecretDocument"

Summary

• Encryption helps keep your private files safe from others.
• You can encrypt or decrypt files easily using Properties or commands.
• Encrypting files is a good idea if your computer is lost or stolen.
• If you have Windows 11 Home, encryption with this method is not available. Consider upgrading to Windows 11 Pro.
• Stay safe and protect your data!