How to Turn On SMB Client Encryption in Windows 11

What is SMB Client Encryption?

SMB client encryption in Windows 11 is a security feature that scrambles your network data, like files and printers, to keep it safe from anyone trying to snoop on your connection. It ensures that when your PC talks to other computers over the network, the information shared is kept private and secure.

Why Should You Turn On SMB Client Encryption?

• It protects your data from being intercepted or snooped on by others.
• It helps prevent hackers from stealing sensitive information.
• It makes your network safer overall.

How to Check and Turn On SMB Client Encryption Using PowerShell

You can turn on SMB client encryption in Windows 11 using PowerShell, a tool that lets you quickly change settings by typing commands. To do this, you’ll need to open Windows Terminal as an administrator and then use specific commands to enable the feature.

1. [ADMIN REQUIRED] Open Windows Terminal as Administrator. You can do this by searching “Windows Terminal” in the ⊞ Start menu, right-clicking it, and choosing Run as administrator.
2. Click the Windows PowerShell tab (if it’s not already selected).
3. Type this command and press Enter to check if encryption is required:
   
   Get-SmbClientConfiguration | FL RequireEncryption
4. If you see RequireEncryption : False, it means encryption is OFF.
5. To turn ON SMB client encryption, type this command and press Enter:
   
   Set-SmbClientConfiguration -RequireEncryption $true -Confirm:$false
6. If you want to turn OFF encryption later, use:
   
   Set-SmbClientConfiguration -RequireEncryption $false -Confirm:$false

How to Turn On SMB Client Encryption Using Windows Registry Editor

Turning on SMB client encryption in Windows 11 can also be done using the Windows Registry Editor, a tool that stores many important system settings. This method involves navigating to a specific location in the registry and changing a value to activate the encryption.

1. [ADMIN REQUIRED] Open the Registry Editor by typing regedit in the ⊞ Start menu and pressing Enter.
2. Navigate to this location:
   
   Computer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Lanman\Workstation\Parameters
3. Look for an entry called RequireEncryption in the right pane.
4. If it’s there, double-click it and change the value to 1 to turn encryption ON, or 0 to turn it OFF.
5. If it’s not there, 🖱️ right-click on a blank space, choose New > DWORD (32-bit) Value, name it RequireEncryption, and set its value to 1 to enable encryption.
6. Close the Registry Editor and 🔄 restart your computer to apply the changes.

How to Turn On SMB Client Encryption Using Local Group Policy Editor

The Local Group Policy Editor is another way to turn on SMB client encryption in Windows 11, letting you easily adjust advanced settings. By opening this editor and going to a specific network setting, you can enable the encryption for your SMB client connections.

1. [ADMIN REQUIRED] Open Local Group Policy Editor by searching Edit group policy in the ⊞ Start menu and clicking it.
2. Go to this folder:
   
   Computer Configuration > Administrative Templates > Network > Lanman Workstation
3. On the right side, find and double-click Require Encryption.
4. Choose one of the options:

   • Not Configured – Default setting (encryption not required)
   • Enabled – SMB client will require encryption to connect
   • Disabled – Same as not configured (encryption not required)
5. Click OK and 🔄 restart your PC for the changes to take effect.

Summary