How to Turn On SMB Client Encryption in Windows 11

What is SMB Client Encryption?

SMB client encryption in Windows 11 is a built-in security feature that scrambles data sent across your local network so prying eyes cannot read your shared files and printer traffic. It forces your PC to encrypt information every time you connect to another computer, keeping your private files safe from network snoops.

If the other computer does not support secure encryption, your PC will not connect to it. This helps keep your information safe.

Why Should You Turn On SMB Client Encryption?

• It protects your data from being intercepted or snooped on by others.
• It helps prevent hackers from stealing sensitive information.
• It makes your network safer overall.

How to Check and Turn On SMB Client Encryption Using PowerShell

PowerShell lets you turn on SMB client encryption in Windows 11 by running a quick command as an administrator. You use this method when you want to force your computer to secure all outgoing network connections without digging through graphical menus.

1. [ADMIN REQUIRED] Open Windows Terminal as Administrator. You can do this by searching “Windows Terminal” in the Start menu ⊞, right-clicking it, and choosing Run as administrator.
2. Click the Windows PowerShell tab (if it’s not already selected).
3. Type this command and press Enter to check if encryption is required:
   
   Get-SmbClientConfiguration | FL RequireEncryption
4. If you see RequireEncryption : False, it means encryption is OFF.
5. To turn ON SMB client encryption, type this command and press Enter:
   
   Set-SmbClientConfiguration -RequireEncryption $true -Confirm:$false
6. If you want to turn OFF encryption later, use:
   
   Set-SmbClientConfiguration -RequireEncryption $false -Confirm:$false

How to Turn On SMB Client Encryption Using Windows Registry Editor

Windows Registry Editor lets you turn on SMB client encryption in Windows 11 by creating or changing a specific registry key value. You use this manual method if you prefer editing system settings directly or if command-line tools are not working on your PC.

1. [ADMIN REQUIRED] Open the Registry Editor by typing regedit in the Start menu and pressing Enter.
2. Navigate to this location:
   
   Computer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Lanman\Workstation\Parameters
3. Look for an entry called RequireEncryption in the right pane.
4. If it's there, double-click it and change the value to 1 to turn encryption ON, or 0 to turn it OFF.
5. If it's not there, right-click on a blank space, choose New › DWORD (32-bit) Value, name it RequireEncryption, and set its value to 1 to enable encryption.
6. Close the Registry Editor and restart your computer to apply the changes.

How to Turn On SMB Client Encryption Using Local Group Policy Editor

Local Group Policy Editor lets you turn on SMB client encryption in Windows 11 through a graphical menu meant for managing advanced security rules. You use this option if your version of Windows includes the policy editor and you want an easy interface instead of typing commands.

1. [ADMIN REQUIRED] Open Local Group Policy Editor by searching Edit group policy in the Start menu and clicking it.
2. Go to this folder:
   
   Computer Configuration > Administrative Templates > Network > Lanman Workstation
3. On the right side, find and double-click Require Encryption.
4. Choose one of the options:

   • Not Configured - Default setting (encryption not required)
   • Enabled - SMB client will require encryption to connect
   • Disabled - Same as not configured (encryption not required)
5. Click OK and restart your PC for the changes to take effect.

Summary