How to Turn On SMB Client Encryption in Windows 11

What is SMB Client Encryption?

SMB client encryption is a security setting in Windows 11 that scrambles your network data, like files and printers, to keep it safe from snoops.

Starting with Windows 11 Insider Preview Build 25982, Windows can make sure that all connections to other computers use encryption. If the other computer does not support secure encryption, your PC will not connect to it. This helps keep your information safe.

Why Should You Turn On SMB Client Encryption?

• It protects your data from being intercepted or snooped on by others.
• It helps prevent hackers from stealing sensitive information.
• It makes your network safer overall.

How to Check and Turn On SMB Client Encryption Using PowerShell

You can turn on SMB client encryption in Windows 11 using PowerShell, a command-line tool that lets you quickly change settings.

1. [ADMIN REQUIRED] Open Windows Terminal as Administrator. You can do this by searching “Windows Terminal” in the ⊞ Start menu, right-clicking it, and choosing Run as administrator.
2. Click the Windows PowerShell tab (if it’s not already selected).
3. Type this command and press Enter to check if encryption is required:
   
   Get-SmbClientConfiguration | FL RequireEncryption
4. If you see RequireEncryption : False, it means encryption is OFF.
5. To turn ON SMB client encryption, type this command and press Enter:
   
   Set-SmbClientConfiguration -RequireEncryption $true -Confirm:$false
6. If you want to turn OFF encryption later, use:
   
   Set-SmbClientConfiguration -RequireEncryption $false -Confirm:$false

How to Turn On SMB Client Encryption Using Windows Registry Editor

Turning on SMB client encryption in Windows 11 can also be done through the Windows Registry Editor, which stores many important system settings.

1. [ADMIN REQUIRED] Open the Registry Editor by typing regedit in the ⊞ Start menu and pressing Enter.
2. Navigate to this location:
   
   Computer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Lanman\Workstation\Parameters
3. Look for an entry called RequireEncryption in the right pane.
4. If it’s there, double-click it and change the value to 1 to turn encryption ON, or 0 to turn it OFF.
5. If it’s not there, 🖱️ right-click on a blank space, choose New > DWORD (32-bit) Value, name it RequireEncryption, and set its value to 1 to enable encryption.
6. Close the Registry Editor and 🔄 restart your computer to apply the changes.

How to Turn On SMB Client Encryption Using Local Group Policy Editor

The Local Group Policy Editor offers another way to turn on SMB client encryption in Windows 11, letting you adjust advanced settings easily.

1. [ADMIN REQUIRED] Open Local Group Policy Editor by searching Edit group policy in the ⊞ Start menu and clicking it.
2. Go to this folder:
   
   Computer Configuration > Administrative Templates > Network > Lanman Workstation
3. On the right side, find and double-click Require Encryption.
4. Choose one of the options:

   • Not Configured – Default setting (encryption not required)
   • Enabled – SMB client will require encryption to connect
   • Disabled – Same as not configured (encryption not required)
5. Click OK and 🔄 restart your PC for the changes to take effect.

Summary