Encrypt Files and Folders with Encrypting File System (EFS) in Windows 10: You may have heard about BitLocker drive encryption available in Windows 10 but that’s not the only one encryption method out there, because Windows Pro & Enterprise Edition also offers Encrypting File System or EFS. The main difference between BitLocker & EFS encryption is that BitLocker encrypts an entire drive whereas EFS lets you encrypt individual files and folders.
BitLocker is very useful if you want to encrypt the entire drive to protect your sensitive or personal data and the encryption isn’t tied to any user account, in short, once BitLocker is enabled on a drive by an administrator, every single user account on that PC will have that drive as encrypted. The only drawback of BitLocker is that it is dependent on trusted platform module or TPM hardware which must come with your PC in order for you to use BitLocker encryption.
Encrypting File System (EFS) is useful for those who want to only protect their individual file or folders rather than the entire drive. EFS is tied to the particular user account i.e. encrypted files can only be accessed by the particular user account who encrypted those files & folders. But if a different user account is used then those files & folders will become completely inaccessible.
The encryption key of EFS is stored inside the Windows rather than the PC’s TPM hardware (used in BitLocker). The drawback of using EFS is that the encryption key can be extracted by an attacker from the system whereas BitLocker doesn’t have this shortcoming. But still, EFS is an easy way to quickly protect your individual files & folders on PC which is shared by several users. Anyway, without wasting any time let’s see How to Encrypt Files and Folders with Encrypting File System (EFS) in Windows 10 with the help of the below-listed tutorial.
Table of Contents
Encrypt Files and Folders with Encrypting File System (EFS) in Windows 10
Note: Encrypting File System (EFS) is only available with Windows 10 Pro, Enterprise, and Education edition.
Method 1: How to Enable Encrypting File System (EFS) in Windows 10
1.Press Windows Key + E to open File Explorer then navigate to the file or folder which you want to encrypt.
2.Right-click on this file or folder then select Properties.
3.Under General tab click on the Advanced button.
4.Now checkmark “Encrypt contents to secure data” then click Ok.
6.Next, click Apply and a pop-up window will open asking either Apply changes to this folder only or Apply changes to this folder, subfolders and files.
7.Select what you want then click OK to continue.
8.Now files or folders which you have encrypted with EFS will have a small icon on the top-right corner of the thumbnail.
If in future you need to disable the encryption on the files or folders, then simply uncheck “Encrypt contents to secure data” box under the folder or file properties and click OK.
Method 2: How to Encrypt Files and Folders with Encrypting File System (EFS) in Command Prompt
1.Press Windows Key + X then select Command Prompt (Admin).
2.Now type the following command into cmd and hit Enter:
Apply changes to this folder, subfolders and files: cipher /e /s:”full path of folder”
Apply changes to this folder only: cipher /e “full path of folder or file with extension”
Note: Replace full path of folder or file with extension with the actual file or folder which you want to encrypt, for example, cipher /e “C:\Users\Aditya\Desktop\Troubleshooter” or cipher /e “C:\Users\Aditya\Desktop\Troubleshooter\File.txt”.
3.Close command prompt when finished.
That’s is how you Encrypt Files and Folders with Encrypting File System (EFS) in Windows 10 but your work isn’t complete yet, as you still need to back up your EFS encryption key.
How to back up your Encrypting File System (EFS) encryption key
Once you enabled the EFS for any file or folder, a small icon will appear in the taskbar, probably next to the battery or WiFi icon. Simply click on the EFS icon in the system tray to open the Certificate Export Wizard. If you want a detailed tutorial of How to Back Up Your EFS Certificate and Key in Windows 10 then go here.
1.First, make sure to plug in your USB drive into the PC.
2.Now click on the EFS icon from the system try to launch the Certificate Export Wizard.
Note: Or Press Windows Key + R then type certmgr.msc and hit Enter to open Certificates Manager.
3.Once the wizard opens, click Back up now (recommended).
4.Click on Next and again click Next to continue.
5.On the Security screen, checkmark “Password” box then type a password in the field.
6.Again type the same password to confirm it and click Next.
7.Now click on Browse button then navigate to the USB drive and under file name type any name.
Note: This would be the name of the backup of your encryption key.
8.Click Save then click on Next.
9.Finally, click Finish to close the wizard and click OK.
This backup of your encryption key will come very handy if in case you ever lose access to your user account, as this backup can be used to access the encrypted file or folders on the PC.
- Enable or Disable Emoji Panel in Windows 10
- 7 Ways to Open Elevated Windows PowerShell in Windows 10
- Enable or Disable Indexing Of Encrypted Files In Windows 10
- Back Up Your EFS Certificate and Key in Windows 10
That’s it you have successfully learned How to Encrypt Files and Folders with Encrypting File System (EFS) in Windows 10 but if you still have any questions regarding this post then feel free to ask them in the comment’s section.