File Encryption

The Encrypted File System, or EFS, provides an additional level of security for files and directories. It provides cryptographic protection of individual files on NTFS file system volumes using a public-key system.

Typically, the access control to file and directory objects provided by the Windows security model is sufficient to protect unauthorized access to sensitive information. However, if a laptop that contains sensitive data is lost or stolen, the security protection of that data may be compromised. Encrypting the files increases security.

To determine whether a file system supports file encryption for files and directories, call the GetVolumeInformation function and examine the FS_FILE_ENCRYPTION bit flag. Note that the following items cannot be encrypted:

• Compressed files
• System files
• System directories
• Root directories
• Transactions

Sparse files can be encrypted.

TxF does not support most operations on Encrypted File System (EFS) files. The only operations TxF supports are read operations, such as ReadEncryptedFileRaw.

In this section

Topic	Description
Handling Encrypted Files and Directories	A file marked encrypted is encrypted by the NTFS file system by using the current encryption driver.
Encrypted Files and User Keys	Lists the functions to use to create a new key, add a key to an encrypted file, query the keys for an encrypted file, and remove keys from an encrypted file.
Backup and Restore of Encrypted Files	The raw encryption functions enable backup of encrypted files.

For more information about encryption, see Adding Users to an Encrypted File.

For more information about cryptography, see Cryptography.

How to encrypt files and folders in Windows 10 [EASY GUIDE]

• Encrypting your most important files is not only extremely useful but also easier than you’d think.
• You have several methods to password-protect your documents, including an inbuilt Windows tool.
• For more guides on the same topic, see our dedicated File Encryption section on the website.
• Looking for a particular step-by-step guide? We’ve probably got it covered, so do a quick search in our How-To Hub.

• Unzip all major file formats: ZIP, RAR, 7Z, TGZ, TAR, etc.
• Encrypts the files you zip for maximum protection
• Manage your files easily (PC, Cloud, network)

Open archived files
with ease on your PC

Encrypting a certain file or folder is probably the best way to keep it safe, so only you can access that file or folder.

Microsoft’s developers decided to keep the built-in encryption method in Windows 10 similar to the previous method.

Still, it’s good from time to time to go through the file encryption methods available in Windows, but not exclusively.

How can I encrypt files or folders in Windows 10?

1. Use a dedicated encryption tool (recommended)

If you think that Windows’ own encryption tool isn’t good enough for your files, you can try with some third-party encryption software.

Actually, a right third-party tool is an even better choice than EFS, because it offers more options, so you’ll be able to keep your files as safe as possible.

There are a lot of free encrypting tools out there, but the best way is to get a premium software. It has many more features and it is a priority when it needs support from developers.

A first recommendation would be WinZip. You’ve probably heard of it since it’s currently the most popular file encryption and compression tool.

As a matter of fact, the program offers more file management options, including sharing, compressing, and backing up files.

The encryption option allows you to zip your files with certified 128 or 256-bit AES encryption, keeping your files safe from unwanted eyes.

Plus, with WinZip, you can create read-only PDFs and add watermarks to deter copying.

Other notable features of WinZip include finding, opening, editing, moving, and sharing the files stored on PCs, networks, or cloud services.

The tool can be fully integrated with Dropbox, G-Suite, or OneDrive.

WinZip

2. Use the built-in Encrypted File System

1. Right-click on the file/folder you want to encrypt and go to Properties.
2. On the General tab, click Advanced.
3. Under the Compress and encrypt attributes section, click on Encrypt content to secure data.
4. Click OK and close Properties.
5. Choose Apply changes to the folder, subfolders, and files.

That’s that, your folder is now encrypted and its text is shown in green color.

All subfolders and files of the encrypted folder are encrypted as well, but if you want to change that, repeat the process above, and choose to Apply changes to this folder only instead of Apply changes to this folder, subfolders, and files.

The EFS (Encrypted File System) is probably the fastest way to encrypt your files and folders in Windows 10 (and any other version of Windows since XP).

This is a very simple encryption tool, and you’ll make your files protected in a couple of minutes, with just a couple of clicks.

But before we show you how to encrypt your files with EFS, we have to warn you that you’ll be able to access the encrypted file only with the login of the account you encrypted the file with.

Other user accounts (if with administrative permissions) won’t be able to access it. Thus, make sure to remember or write down the password somewhere, or your file will stay locked forever.

You may also choose to protect your files before they can be accessed with a good VPN tool. We strongly recommend Private Internet Access VPN to secure your data.

It protects your PC from attacks while browsing, masks your IP address, and blocks all unwanted access to your computer.

Private Internet Access

How to back up your encryption key

1. Click on Back up your encryption key popup.
2. Choose Back up now.
3. Follow the instructions from the wizard.
4. Enter and re-enter your password.
5. Choose a place to which you’ll save your certificate and give a name to your encryption backup file.
6. Click Next, and Finish.

Usually, Windows will offer you an option to back up your encryption key right after you create it.

If you’re looking to encrypt a USB flash, we’ve got a list of the 12 best software solutions that will help you secure your files in no time.

3. Use Microsoft Office

1. Open the Office file you want to encrypt, and go to File.
2. Under Info, click on Protect document.
3. Choose Encrypt with password.
4. Enter your password and press Enter.
5. Re-enter your password, and click OK.

Your Office document is now encrypted, and you’ll have to enter a password you set before to access it.

As you can see, there are a couple of methods to keep your files safe, so it’s completely up to you which one you’ll use. If you have some questions or comments, just reach for the comments section below.

How to open encrypted files in Windows 10

• It’s quite complicated if you have an encrypted file and you don’t know the password to open it.
• There are a few ways to do it, including changing a few files settings and we’re guiding you through the whole process, so read below.
• Want to read more on the same sensitive topic? Check out the File Encryptions section on our website.
• We also have a dedicated File Opener page with everything you’d like to know about opening various types of files.

• Unzip all major file formats: ZIP, RAR, 7Z, TGZ, TAR, etc.
• Encrypts the files you zip for maximum protection
• Manage your files easily (PC, Cloud, network)

Open archived files
with ease on your PC

Windows has a built-in encryption utility that is meant to protect your files from being accessed through opening, reading, or modification by other users and/or computers.

This makes it easy for individuals and businesses alike to secure their private and sensitive information and files. However, opening such files requires an encryption key, plus you have to be logged in as an administrator.

With encryption keys all around us today, there’s a need to protect our sensitive and private data and information, so this is the best way to do it.

But the question most people will ask is how to open encrypted files because once these are protected with a password, there are only a few ways that can open it, besides knowing the password.

So if you don’t know the password of the encrypted file, you forgot or just don’t have it, we’ll show you how to open encrypted files in Windows 10.

How to open encrypted files in Windows 10

1. Use a dedicated program

There are different programs used to encrypt files that marked afterward so that you know that they are password-protected. The encrypted files can be opened, but you sometimes have to use the same programs that encrypted them.

WinZip is one such program, and one of the most popular.

The encryption option allows you to zip your files with certified 128- or 256-bit AES encryption, keeping your files safe from unwanted eyes. Plus, with WinZip, you can create read-only PDFs and add watermarks to deter copying.

However, to open an encrypted WinZip file you will also need the password. WinZip can’t help with the recovery of lost zip file passwords.

If you’re using the 256-bit AES encryption method, there is no other way of opening the file other than knowing the password. For the 128-bit or weak Zip 2.0 (Legacy) encryption, you can try using a password recovery tool available online.

Now, in order to avoid such an uncomfortable situation, we recommend having a password manager at hand to keep all your codes and passwords.

WinZip

2. Use Certificate Manager

1. Log in to the user account that encrypted the file you want to access
2. In the search box, type certmgr.msc and press Enter to open the Certificate Manager
3. Open the Personal category in the left pane
4. Click Certificates
5. Under Issued To, select the certificate that corresponds with your account name
6. Open Action menu
7. Go to All Tasks
8. Select Export and follow the prompts in the Export wizard
9. Click Yes,export the private key and Personal Information Exchange when prompted
10. Type a password for the certificate, and click Finish
11. Transfer the certificate file to the computer you want to open the file on
12. Open Certificate Manager on that computer
13. Select Personal
14. Open Action menu
15. Go to All Tasks and select Import
16. Follow the prompts in the Import wizard. Select the certificate file you moved, type the password and check the Mark this key as exportable box
17. Select Personal as the location for placing the certificate
18. Click Finish
19. Double click the encrypted file to open it. The certificate you transferred will give you access to the file.

3. Convert the file then open it

If you used EasyCrypto to encrypt a file, you won’t be able to convert it to any other format as the program doesn’t give a method of converting the files.

However, if you have any files that you want to be converted, and they’re inside the .encrypted file, decrypt them and then use a free file converter to change them.

4. Take ownership of the file or folder

1. Open File Explorer and find the file or folder you want to take ownership of.
2. Right-click the file or folder, click Properties
3. Click the Security
4. Click Advanced, and then click the Owner
5. Click Change, and then do one of the following:
   • To change the owner to a user or group that is not listed, click Other users and groups and, in Enter the object name to select (examples), type the name of the user or group, and then click OK.
   • To change the owner to a user or group that is listed, in the Change owner to box, click the new owner.

Note: You can change the owner of all subcontainers and objects within the tree, by selecting the Replace owner on subcontainers and objects checkbox. This is optional.

The owner of a file or folder controls the permissions set on the file/folder and to whom these are granted. The take ownership permission, or restore the files and directories user rights are the minimum requirements needed to perform this procedure.

An admin can take ownership of any file on the computer. However, assigning ownership may require you to elevate permissions by using User Access Control.

A user who has the Restore files and directories privilege can double-click Other users and groups and choose any user or group to assign ownership to.

Note: The Everyone group no longer includes the Anonymous Logon group.

5. Grant access to the encrypted file

1. Right-click the file to bring up the selection menu and click Properties
2. Select Advanced from the properties menu, which will open the Advanced Attributes section of Properties.
3. Click Details, which will display all of the encryption information. Select Add. This will open an add users window.
4. Select the user (yourself) to give access to the encrypted file. Click OK until you return back to the Properties window. Once to this window, click Apply. This will apply the changes. Click OK again to close out the properties window.
5. Double-click the encrypted file. It will now be opened.

Are there other ways you use to open encrypted files in Windows 10? Let us know what works for you, and if the methods above helped, by leaving a comment in the section below.