ThisCalculator

Everyday

Encrypt Single Files and Folders in Windows 10

Updated · Standard formula, shown below

Encrypt Single Files and Folders in Windows 10

You can encrypt single files and folders in Windows 10 using built-in tools: Encrypting File System (EFS) for NTFS drives, or a password-protected ZIP archive for individual files. This article explains both methods step by step, plus when to use each and how to avoid common pitfalls.

Why Encrypt Files in Windows 10?

Encryption scrambles data so that only someone with the correct key or password can read it. If your laptop is stolen, or you share a computer with others, encryption prevents casual snooping and protects sensitive documents like tax returns, contracts, or personal notes. Windows 10 offers two built-in approaches: EFS for folders and files on NTFS volumes, and encrypted ZIP folders for individual files. Both are free, but they work differently and have different limitations.

Encrypting Files and Folders with EFS

EFS (Encrypting File System) is a Windows feature that transparently encrypts files and folders on NTFS drives. It ties the encryption to your Windows user account, so you can access the data automatically when you log in. To encrypt a file or folder:

  1. Right-click the file or folder and select Properties.
  2. Click the Advanced button in the General tab.
  3. Check Encrypt contents to secure data and click OK.
  4. In the confirmation dialog, choose whether to apply the change to the folder only or to all subfolders and files.
  5. Click OK and then Apply. The file/folder name will turn green in File Explorer.

If you encrypt a folder, new files added later are automatically encrypted. If you encrypt only a single file, moving it out of the folder may decrypt it if the destination does not support encryption (e.g., a FAT32 USB drive).

Encrypting a Single File as a Password-Protected ZIP

For a single file that you want to share or store on a non-NTFS drive, a password-protected ZIP is a practical alternative. Windows 10 does not have a built-in option to password-protect ZIP files, but you can use the 7-Zip or WinRAR free tools. With 7-Zip:

  1. Right-click the file, select 7-Zip > Add to archive.
  2. In the Archive format, choose zip.
  3. In the Encryption section, enter a strong password and select Encrypt file names if you want to hide the file list.
  4. Click OK. The resulting .zip file is encrypted with AES-256.

This method works for any file type and the encrypted ZIP can be moved to any drive or sent via email. The downside is that you must manually re-zip the file every time you edit it.

EFS vs. ZIP Encryption: How to Choose

Use EFS when you want seamless, automatic encryption for files that stay on your own computer. It is ideal for protecting a folder of documents that you access regularly. Use a password-protected ZIP when you need to send a file to someone else, store it on a USB drive, or when the file is too large to keep in an encrypted folder (e.g., a video). EFS also requires a professional edition of Windows 10 (Pro, Enterprise, or Education); Home edition does not support EFS. ZIP encryption works on any edition.

Backing Up Your EFS Certificate

EFS uses a digital certificate stored in your Windows profile. If you lose that certificate (e.g., after reinstalling Windows) or your password, you will not be able to open your encrypted files. Therefore, you must back up the certificate:

  1. Press Win + R, type certmgr.msc, and press Enter.
  2. Expand Personal > Certificates.
  3. Right-click your certificate (it will have a key icon) and select All Tasks > Export.
  4. Follow the wizard, choose to export the private key, and set a strong password.
  5. Store the exported .pfx file in a safe location (e.g., a password manager or a locked drawer).

Without this backup, you risk permanent data loss. It is a common misconception that EFS files can be recovered by resetting your Windows password – that does not work.

Common Problems and How to Avoid Them

  • File names turn green but encryption is not applied – Check that the drive is NTFS. If it is FAT32 or exFAT, EFS is unavailable.
  • Cannot encrypt a file because it is in use – Close the file and any program that has it open.
  • Encrypted files cannot be opened on another computer – EFS is tied to your user account. To share, export the certificate or use a ZIP with a password.
  • Encrypted file is copied to a USB drive and becomes readable – EFS is not applied to the copy if the destination does not support it. Use a password-protected ZIP for portable files.
  • Windows asks for a password when opening an encrypted ZIP – That is normal; enter the password you set when creating the ZIP.

Alternatives: BitLocker and Third-Party Tools

If you need to encrypt an entire drive or a USB stick, Windows 10 Pro and Enterprise include BitLocker. BitLocker encrypts the whole volume, so you do not have to worry about individual files. For Windows 10 Home, you can use Device Encryption (available on many modern laptops) or free third-party tools like VeraCrypt. VeraCrypt lets you create an encrypted container or encrypt a whole drive, and it works on all editions. However, these are more complex than EFS or ZIP encryption and are overkill for a single file.

Frequently Asked Questions

Can I encrypt a file without a password?

Yes, EFS encrypts files without a password prompt because it uses your Windows login. The encryption is transparent. If you want a password prompt, use a ZIP with a password or a tool like VeraCrypt.

Does EFS work on Windows 10 Home?

No. EFS is available only in Windows 10 Pro, Enterprise, and Education. Home users can use password-protected ZIPs or third-party encryption tools.

What happens if I forget my Windows password and I have EFS files?

If you reset your Windows password, you may lose access to your EFS files because the encryption key is stored in your profile. That is why backing up the certificate is essential. Without the backup, recovery is usually impossible.

Can I encrypt a folder that contains system files?

Yes, but it is not recommended. Encrypting system folders can cause boot problems or make Windows unstable. Stick to user data folders.

Is a password-protected ZIP as secure as EFS?

If you use AES-256 encryption (as 7-Zip and WinRAR do), the ZIP is very secure. The main risk is a weak password. EFS uses your Windows account, which may be easier to compromise if your account password is weak. For most personal files, both are fine.

Related

Method: the standard formula for this calculation, rounded as each result states. See how the calculators work or report an error.