How to Encrypt Files and Folders Using EFS in Windows 10

Windows 10 offers built-in tools for encrypting files and folders, including the Encrypting File System (EFS). This feature enables users to securely store sensitive data, protecting it from unauthorized access. In this guide, we’ll go over how to use EFS to encrypt data on a Windows 10 computer.

What is EFS (Encrypting File System)

EFS, or Encrypting File System, is a Windows component that allows users to encrypt files and folders at the file system level. This means only users with the corresponding certificate or encryption key can access encrypted data. EFS automatically encrypts data upon saving, providing a high level of security with minimal user intervention.

Benefits of Using EFS

  • Ease of use — enabling EFS takes just a few steps.
  • Automatic protection — data is secured as soon as it’s encrypted.
  • File system-level support — no need for additional software.

How to Encrypt a File or Folder Using EFS in Windows 10

  1. Select the file or folder you want to encrypt. Open Windows File Explorer and locate the desired file or folder.
  2. Open the properties of the item. Right-click on the file or folder and select “Properties” from the context menu.
  3. Go to the “Advanced” section. In the Properties window, click the “Advanced” button at the bottom of the “General” tab.
  4. Enable encryption. Check the box labeled “Encrypt contents to secure data” and click “OK”.
  5. Apply the changes. Click “Apply” to finalize the settings. You’ll be prompted to choose whether to encrypt only the current file or also include subfolders if encrypting a folder.

What to Do After Encrypting Files or Folders

After encrypting a file or folder with EFS, Windows will automatically create a certificate and encryption key associated with your account. It’s recommended to back up the encryption key to ensure access to your data in case of lost account credentials.

How to Back Up the Encryption Certificate

  1. Open “Control Panel” and go to the “Certification Authority” section, or use the certmgr.msc command through “Run”.
  2. Locate your certificate associated with EFS and choose “Export”, following the instructions in the Export Wizard.
  3. Save the certificate file in a secure location, and if necessary, protect it with a password.

Important Notes and Warnings

When using EFS, keep the following considerations in mind:

  • Encrypted files and folders are accessible only under the account that initiated the encryption.
  • If the certificate is deleted and no backup is available, recovering access to encrypted data may be extremely difficult.
  • Backing up keys and certificates is a crucial step for ensuring data security.