How to Encrypt or Decrypt Files and Folders with EFS in Windows 11

This article describes steps one can take to encrypt or decrypt files and folders with Encrypted File System (EFS) in Windows 11.

The Encrypted File System, or EFS, provides an additional level of security for files and folders or directories. It provides cryptographic protection of individual files on NTFS file system volumes using a public-key system.

If you lose a Windows device with sensitive information, and files are folders are not encrypted, your data may be compromised. Encrypting the files and folders on your device increases security.

When a folder is encrypted, new files and folders that are saved there will automatically be encrypted by EFS.

Encrypted File System is not available on Windows 11 Home edition.

The following items cannot be encrypted in Windows: compressed files, system files and directories, root directories and transactions data.

Below is how to encrypt or decrypt files and folders using EFS in Windows 11.

How to encrypt or decrypt files and folders using EFS in Windows 11

As described above, The Encrypted File System, or EFS, provides an additional level of security for files and directories. It provides cryptographic protection of individual files on NTFS file system volumes using a public-key system.

There are multiple ways to encrypt or decrypt files and folders in Windows 11. Below are few steps one can take to accomplish this.

Encrypting or decrypting files and folders using the Properties option

Windows folder and file Properties command allows you to quickly encrypt or decrypt an entire folder or file.

Here’s how to do that.

Select the folder or file you want to encrypt or decrypt. Then right click on the folder or file and select Properties on the context menu.

On the General tab, click on the Advanced button.

On the Advanced Attributes window, check the box next to “Encrypt contents to secure data” to encrypt the folder or file and click OK.

To decrypt, simply uncheck the box and click OK.

Once you click OK, you will be prompted to “Apply changes to this folder only” or “Apply changes to this folder, subfolders and files“.

Make your selection and click OK.

If encrypting a file, you will get a prompt to “Encrypt the file and its parent folder” or “Encrypt the file only“. Make your selection and click OK.

Encrypting or decrypting files and folders using commands

Windows allows you to encrypt and decrypt files using commands. Open Windows Terminal and select either Windows PowerShell or Command Prompt.

Then run the commands below to encrypt a file or folder.

cipher /e "<full file path>"

Type in the full path of the file.

Example:

cipher /e C:\Users\Richard\Secret\Document.txt

To decrypt, run cypher command with the /d switch.

cipher /d "<full file path>"

Example:

cipher /d C:\Users\Richard\Secret\Document.txt

Encrypting or decrypting folders using the commands

You can encrypt or decrypt folders using the command prompt or Windows PowerShell. Open Windows Terminal and select either Windows PowerShell or Command Prompt.

To encrypt a folder, run the commands below.

cipher /e /s:"<full folder path>"

Example:

cipher /e /s:"C:\Users\Richard\Secret\Document"

To decrypt a folder, run the commands below:

cipher /d /s:"<full folder path>"

Example:

cipher /d /s:"C:\Users\Richard\Secret\Document

That should do it!

Conclusion:

This post showed you how to encrypt or decrypt files and folders in Windows 11. If you find any error above or have something to add, please use the comment form below.