How To Encrypt A File In Windows 10

We are reader supported and may receive a commission when y'all make purchases using the links on our site.

How to encrypt files and folders in Windows 10, eight or 7

Looking to improve your security past encrypting your files or fifty-fifty your hard drives in Windows? We volition walk y'all through every footstep so you can proceed all of your sensitive data safe.

If yous encrypt files and folders in Windows, your information will become unreadable to unauthorized parties. Simply someone with the right password, or decryption key, tin make the data readable once again. This article will explain several methods y'all can utilise to encrypt your data.

Encryption options

To encrypt files and folders in Windows, y'all tin can use the 2 encryption capabilities built in to Windows (and a third option, depending on the software yous're using):

• BitLocker is the preferred and most secure method, but it will not allow you easily to select and encrypt private files and folders (you can do this past creating an encrypted file container using VHD .)
• Encrypting File Organization (EFS) is the culling, just is not recommended for super-sensitive information.
• The 3rd option to encrypt files and folders in Windows is to employ third-party software. For some operating system editions like Windows 10 Home, this is the only option.

Tip: Alternatively, if all y'all are concerned almost is avoiding somebody snooping at dwelling, yous can encrypt or password-protect individual MS Word or MS Excel files quickly from within documents. ComputerHope shows yous how.

See besides: How to encrypt email

Encryption trends

Research by Adventure Based Security found that 7.nine billion data records were breached between January and September 2019. However, earlier research from Gemalto has shown that less than v percent of breaches involved encrypted information.

The "2020 Thales Information Threat Report" highlights the following information on data encryption trends:

• The U.s.a. employs data encryption (63%) to protect sensitive data in the deject at college rates than the global sample (57%) that researchers looked at.
  
• But 61% of executives implement file encryption, while 59% implement database encryption.
• The implementation of file and database encryption simply increased slightly (by 1%) from 2018 to 2019.
• Retail companies have the everyman rate of encryption of sensitive information (54%). This means nigh half of the manufacture's data is non protected by encryption.

Before you lot start to encrypt files and folders in Windows

Keep the post-obit information in mind earlier you encrypt your information in Windows:

Encrypted files are non completely resistant to hacks

Encrypted files are not 100 percent secure. Hackers tin can (admitting with difficulty) bypass encryption. Yous're at adventure if you store cryptographic keys and passwords in an unencrypted file or if a hacker has planted a keylogger on your system. Keyloggers tin can be installed past malware on your computer. If y'all encrypt a single file with EFS, your figurer volition store an unencrypted version of that file in its temporary memory, so a hacker may still be able to access information technology. If your data is really valuable, consider a paid, expert, deject encryption solution.

Create backups

Always make unencrypted backups of your files in case you lose your passwords. Shop them in a safe physical location. This will ensure you can hands recollect them should your unabridged system become compromised.

Empathise your encryption needs

Make up one's mind exactly what yous want/need to encrypt. This will determine what encryption method y'all use. Read To encrypt or not to encrypt files and folders in Windows?

Be aware of EFS limitations

An EFS encrypted file loses its encryption if you motility it to a Fat 32 or exFAT bulldoze, or transmit it via a network or email. EFS also does not protect files from being deleted unless you have used Windows permissions to protect it. You lot cannot encrypt a compressed file or folder with EFS; you need to extract the contents starting time.

Related: Encryption Resource: A large listing of tools and guides

How does Windows encrypt files and folders?

BitLocker

BitLocker encrypts an entire volume on your hard drive (or a removable device), no matter who is logged in. To unlock a drive that is protected with BitLocker, anyone wanting access must enter a password or use a USB drive that unlocks the PC when information technology is inserted.

BitLocker uses trusted platform module (TPM) hardware. A TPM chip enables your device to support advanced security features. For example, when encryption is only at the software level, access may exist vulnerable to lexicon attacks. Because TPM is at the hardware level, it tin can protect against guessing or automated dictionary attacks. (You can use BitLocker without a TPM chip by using software-based encryption, simply it requires some extra steps for additional hallmark.)

To bank check if your device has a TPM bit:

1. Press the Windows key + 10 on your keyboard and select Device Manager .
2. Aggrandize Security devices .
3. If you accept a TPM chip, i of the items should read Trusted Platform Module with the version number.

BitLocker is available on:

• • Windows Vista and Windows 7: Enterprise and Ultimate editions
  • Windows 8 and 8.ane: Pro and Enterprise editions
  • Windows x: Pro, Enterprise, and Education editions
  • Windows Server 2008 and later

Annotation: BitLocker is non available for Windows Home editions.

Encrypting File Organisation (EFS)

EFS is the Windows congenital-in encryption tool used to encrypt files and folders on NTFS drives. Whatsoever individual or app that does non have the key cannot open encrypted files and folders.

Rather than encrypting your entire drive, EFS allows you manually to encrypt private files and directories. It works by making encrypted files available merely if the user who encrypted the files is logged in. Windows creates the encryption cardinal, which is itself encrypted and saved locally. The encryption process is piece of cake merely not very secure (it is possible, although difficult, for an aggressor to hack the fundamental.) It is also advisable to utilize a strong login password that other users of your PC cannot guess.

• Only available on Professional, Enterprise and Education editions of Windows

Some experts propose to simply use BitLocker as it is more than secure. However, information technology does depend on your personal circumstances. For home users, EFS may well exist sufficient protection from nosy family members.

Let's take a look at how to encrypt files and folders in Windows 10, 8, or seven pace-by-step. Windows Home editions practise non ship with EFS or BitLocker. Y'all volition have to upgrade or apply a third-party app to encrypt your data. For other editors of Windows, the basic process is the same; information technology is but the look-and-feel of the interface that is a bit dissimilar.

Notation: To encrypt your files and folders, you need to be comfortable navigating your OS, e.g. know how to admission the Command Console.

How to encrypt files and folders in Windows 10, 8, or vii

EFS

To encrypt a file or folder:

1. In Windows Explorer, right-click on the file or binder you lot wish to encrypt.
2. From the context-card, select Properties .
3. Click on the Advanced button at the lesser of the dialogue box.
4. In the Advanced Attributes dialogue box, under Compress or Encrypt Attributes , check Encrypt contents to secure data .
5. Click OK .
6. Click Apply .
7. If you selected a folder to encrypt, a Confirm Attribute Change dialogue box will exist displayed request if you lot desire to encrypt everything in the folder. Select Apply change to this folder only or Apply changes to this folder, subfolders and files, and click OK .
8. Click on the Back up your file encryption fundamental pop-up message. If the message disappears before you can click it, y'all can find it in the Notification Area for your OS.
9. Ensure yous have a USB flash bulldoze plugged into your PC.
10. Click Back up now (recommended).
11. Click Side by side to continue.
12. Click Next to create your certificate.
    
13. Accept the default file format to export and click Next .
14. Check the Countersign: box, enter your countersign twice, and click Side by side .
15. Navigate to your USB drive, blazon a proper name for the certificate and key you lot want to export, and click Salvage . The file will be saved with a .pfx extension.
16. Click Adjacent, Finish, and and so OK .
17. Eject your USB drive and put it somewhere condom.

To decrypt a file or folder:

• Follow the first six steps higher up, only uncheck the Encrypt contents to secure data box in Stride iv.

BitLocker

You can choose to unlock your drive during startup by inserting a USB flash drive or inbound a password. The process to encrypt an unabridged hard bulldoze is fourth dimension-consuming. Depending on the amount of information you lot have stored, it tin can take a long time, so make sure your computer is connected to an uninterrupted power supply for the duration. Yous will need to reboot for changes to have effect but y'all can work while the drive is existence encrypted.

To set BitLocker:

1. Get to the Control Panel .
2. Click Organization and Security .
3. Click BitLocker Drive Encryption .
4. Under BitLocker Drive Encryption , click Plough on BitLocker .
5. Select Enter a countersign or Insert a USB flash bulldoze . If you lot have chosen to use a USB flash bulldoze as a trigger to unlock your bulldoze, you can choose to do this with a password or smart card. In this example, we will use a password.
6. Enter a password and ostend it, and then click Next .
7. Select how to salve a recovery primal to regain access to your drive in instance you forget your password (e.one thousand. on a USB wink drive or to your Microsoft account), and click Adjacent.
8. Select an encryption option: Encrypt used disk space merely (faster) or Encrypt unabridged drive (slower), and click Next .
9. Choose from two more than encryption options: New encryption fashion (best for fixed drives) or Compatible mode (all-time for removable devices), and click Next .
10. Bank check Run BitLocker organisation bank check , which ensures that the recovery and encryption keys volition work, and click Continue .
11. Concluding, verify that BitLocker is turned on. To practise this, go to My PC in Windows Explorer and check for a Lock icon displayed next to the drive.

To disable or suspend BitLocker:

1. Printing the Windows fundamental + E to open Windows Explorer.
2. Click This PC .
3. Right-click the encrypted drive and select Manage BitLocker .
4. For each drive or partition encrypted, y'all tin can select to suspend BitLocker or completely disable information technology. Select the selection you want and follow the sorcerer.

3rd-party software to encrypt files and folders in Windows

See the section on 5  free encryption apps for Windows you can use with Abode editions below.

Troubleshooting: Encrypt contents to secure data option is grayed out [Solved]

The nigh common problem with some Windows editions is that sometimes when attempting EFS encryption, the Encrypt contents to secure data option is grayed out. If you lot are running a Windows OS Dwelling house edition, your only options are to upgrade to a Pro or Enterprise edition or use third-party software to encrypt your files.

Here are some suggestions you can endeavor to solve the problem in other versions:

• Scan for and fix whatever corrupted files on your calculator, and ensure your user account has not been compromised.
• Windows 10: Enable EFS using Windows Registry or the Command Line .
• Windows viii: Enable EFS using Windows Registry or by restarting the service
• All versions: Enable the EFS service .
• If you have the Compress contents to relieve disk space pick checked, the Encrypt contents to save data option will be automatically grayed out so you need to uncheck the former.

Note: Ensure you support your files and registry before attempting these fixes.

5 gratis encryption apps for Windows yous can use with Home editions

AxCrypt

Changes the file extension to a .AXX suffix, and the file can just exist opened with AxCrypt if you provide the password used to encrypt it. The software is very intuitive to utilise and is invoked from its own sub-menu in Windows Explorer.

Main features:

• Double-click to edit/view with any awarding
• Automated re-encryption after modification
• Absolutely no user configuration necessary (or possible) before use
• Open source under GNU General Public License
• All-encompassing command-line interface for scripting and programming

7-zip

Costless file archiver with a loftier pinch ratio and strong AES-256 encryption in 7z and ZIP formats.

Note: In Windows 7 and Windows Vista you must run 7-Zip File Manager in ambassador mode. To practice this, correct-click the seven-Cypher File Manager icon and so click Run as ambassador .

Chief features:

• Self-extracting capability for 7z format
• Integration with Windows Beat out
• Powerful File Manager
• Powerful command line version

Veracrypt

Cannot encrypt single files but it can protect partitions or entire drives. Veracrypt is a fork of its popular predecessor, TrueCrypt which is no longer maintained but still widely used.

Primary features:

• Encrypts an entire sectionalization or storage device such as a USB flash drive or hard drive
• Encrypts a partition or drive where Windows is installed (pre-boot authentication)
• Encryption is automatic, real-time (on-the-fly) and transparent
• Provides plausible deniability in case an attacker forces you lot to reveal the password: Subconscious volume ( steganography ) and hidden operating system

GNU Privacy Baby-sit

GnuPG is a complete and gratis implementation of the OpenPGP standard that allows yous to encrypt and sign your data.

Main features:

• A versatile key management organisation
• Access modules for all kinds of public primal directories
• Command line tool includes features for easy integration with other applications
• A wealth of frontend applications and libraries
• Provides support for S/MIME and Secure Beat out (ssh)

FolderLocker

If you do not desire to use third-party software, an interesting alternative from Laptop Mag is to create a FolderLocker to password-protect Windows 10 folders. It is rather a fatigued-out process initially just one time you have prepare up a FolderLocker, yous can easily drag and drop files into it. The writer warns, "…yes, the FolderLocker file can be reverse engineered by someone who understands the procedure, but this isn't meant to keep tech-savvy folks out, just nosy family members who you don't trust."

Likewise see: The best free apps to encrypt your files earlier uploading to the cloud .

To encrypt or not to encrypt files and folders in Windows?

If yous take files and/or folders on your computer that contain sensitive information, it is a good idea to employ encryption to keep this data from prying eyes. Encryption will also make it hard, if not impossible, for hackers to access this data if information technology falls into the wrong hands.

No encryption is 100 percent united nations-crackable, only trying to do and so is often just not worth the effort or within the means of criminals. However, if you use your computer for work or other people accept their ain accounts on your machine, your data is vulnerable. Good security and encryption practices can help safeguard information technology.

Encrypt files and folders in Windows that include the following data:

• Revenue enhancement invoices
• Countersign lists – Store passwords and pins on a separate device or use a password manager similar LastPass , DashLane , or TrueKey (only allows y'all to store up to xv passwords)
• Banking concern data
• Personally Identifiable Information (PII)
• Privileged employer data
• Intellectual holding

If yous practice not want certain information to appear on the internet or would shred it if information technology were a hard copy, chances are those files or folders should be encrypted.

Be warned: The FBI and NSA tin can crave U.South. companies to hand over information or encryption keys with a court guild. If you lot have encrypted files that may contain illegal data or provide information to assist constabulary enforcement agencies to investigate a criminal offense, the police force can force yous to decrypt them yourself.

Reported by ITGS news , "[In 2016] a courtroom ordered Paytsar Bkhchadzhyan from Los Angeles to unlock her iPhone device using her fingerprint. Equally iPhone storage is encrypted and the device was locked with Apple'south Touch ID, this was the merely way for police to access the data […] Bkhchadzhyan'southward defence claimed a fifth Amendment protection, but this was overruled past the court."

See also: 75+ free tools to protect your privacy online

How To Encrypt A File In Windows 10,

Source: https://www.comparitech.com/blog/vpn-privacy/encrypt-windows-files/

Posted by: hansencollow.blogspot.com

Share this post