Windows Security Guide  >  Folder Protection

How to Encrypt a Folder in Windows 10 — 3 Methods

Protecting sensitive files requires more than just hiding them. Learn how to genuinely encrypt your folders in Windows 10 using built-in tools and professional software.

Windows folder encryption software concept for protecting files on a Windows PC
Editorial Team • Updated Oct 2023 • 12 min read
Quick Answer

To encrypt a folder in Windows 10 natively, right-click the folder, select Properties > Advanced, and check Encrypt contents to secure data. However, this feature (EFS) is only available in Windows 10 Pro/Enterprise. If you use Windows 10 Home, or if the option is greyed out, you must use dedicated encryption software like Folder Lock to secure your files.

Table of Contents

At a Glance

Understanding Folder Encryption in Windows 10

When you create a folder in Windows 10, the files inside are generally accessible to anyone who logs into your user account, and theoretically accessible to anyone who removes your hard drive and plugs it into another computer. Encryption scrambles this data into an unreadable format using a complex algorithm. Without the correct decryption key (a password or certificate), the files appear as gibberish.

Beginner visual explaining how encryption protects folders and sensitive files

Windows 10 offers built-in tools like the Encrypting File System (EFS) and BitLocker, but there is a major catch: Windows edition compatibility. Both EFS and BitLocker are exclusively available in Windows 10 Pro, Enterprise, and Education editions. If you are running Windows 10 Home (which the vast majority of consumer PCs use), native folder encryption is disabled by default.

"The biggest mistake users make is confusing 'hiding' a folder with 'encrypting' it. A hidden folder can be revealed with a single checkbox in File Explorer. An encrypted folder mathematically locks the data away." — Data Security Editorial Team

Windows 10 End-of-Life Security Implications

With Windows 10 reaching its official End-of-Life (EOL) in October 2025, Microsoft will stop providing security patches. As the OS becomes more vulnerable to external exploits, applying file-level encryption to your sensitive data at rest becomes even more critical to mitigate potential OS-level security gaps.

What encryption method suits your need?

Not sure which route to take? Answer a quick question to see which method fits your Windows setup and security requirements.

1. Which version of Windows 10 are you running?

Recommended: Dedicated Software (Method 2)

Since Windows 10 Home lacks built-in folder encryption, or if you need to lock folders from other users on the same account, third-party software like Folder Lock is your only secure option. It provides AES-256 encryption without relying on Windows Pro features.

Skip to Method 2

Recommended: Native EFS or BitLocker (Methods 1 & 3)

You have access to Microsoft's native tools. You can use EFS for individual folders tied to your user account, or BitLocker to encrypt your entire drive. If you need portable, password-based lockers, consider Method 2 as well.

Skip to Method 1
The Guide

How to Encrypt a Folder in Windows 10

Below, we cover the three most reliable approaches to folder encryption, ranging from built-in OS features to specialized security software.

Method 1: Using EFS (Encrypting File System)

Difficulty:

EFS is Microsoft's built-in file and folder encryption tool. It is tied to your specific Windows user account. When you encrypt a folder with EFS, it decrypts automatically when you log in, making it seamless. However, if another user logs into their account on the same PC, they will be denied access.

How it works:

  1. Right-click the folder you want to protect and select Properties.
  2. Click the Advanced button in the General tab.
  3. Check the box that says Encrypt contents to secure data.
  4. Click OK, then Apply.
  5. Choose whether to apply changes to just this folder or all subfolders and files.
Windows File Explorer interface used when configuring folder encryption settings
Best For
  • Windows 10 Pro/Enterprise users
  • Protecting files from other local user accounts
  • Seamless background decryption
Limitations
  • Not available in Windows 10 Home (option is greyed out)
  • Does not protect files if you leave your account logged in
  • Losing your Windows password/certificate means permanent data loss

Method 2: Using Dedicated Encryption Software

Difficulty:

For Windows 10 Home users, or those who want password-protected vaults that are independent of their Windows login, third-party software is required. Programs like Folder Lock or VeraCrypt create encrypted "lockers" or volumes using AES-256 encryption.

Unlike EFS, this method requires you to manually enter a master password to mount and access the secure folder. When you close the program, the folder instantly locks down, making it highly secure against physical tampering or shared computer scenarios.

AES-256 encryption illustration representing strong file and folder protection
Folder Lock 10 main screen showing the Windows desktop encryption interface
Best For
  • Windows 10 Home users
  • Creating portable encrypted USB drives
  • Highest level AES-256 data-at-rest security
Limitations
  • Requires installing third-party software
  • Forgetting the master password means data is unrecoverable

Method 3: Full Disk Encryption via BitLocker

Difficulty:

If you need to encrypt everything on your computer, not just a single folder, BitLocker is the native solution for Windows 10 Pro users. It encrypts the entire drive (or partition). If someone steals your laptop and tries to extract the hard drive, the data is completely unreadable.

Full disk encryption software concept illustrating whole-drive data protection
Best For
  • Corporate laptops prone to physical theft
  • Compliance requirements (HIPAA, GDPR)
Limitations
  • Does not encrypt individual folders uniquely
  • Once the PC is booted and unlocked, data is accessible to anyone using the PC

Method Comparison: EFS vs BitLocker vs VeraCrypt vs Folder Lock

Method Win 10 Home? Protection Scope Cost Best Use Case
Native EFS No File/Folder level Free (Built-in) Multi-user local PCs (Pro editions)
BitLocker No Full Disk / Partition Free (Built-in) Device theft protection
VeraCrypt Yes Virtual Volume / Disk Free (Open Source) Highly technical users / plausible deniability
Folder Lock Yes Folder / Virtual Locker Paid (Free Trial) Consumer ease-of-use & portable lockers
Encryption software explainer comparing protected files, folders, and secure storage methods

The Tool We Recommend for Most Users

Of all the options we covered, we recommend Folder Lock for the vast majority of Windows 10 Home and Pro users. While built-in tools are adequate for basic local user segregation, they fall short if you need to create password-protected vaults that you can sync to the cloud or move to a USB drive.

Folder Lock provides AES-256 encryption without the steep technical learning curve of open-source tools. We appreciate that it operates independently of your Windows login, ensuring your data stays locked even if your PC is left unattended.

AES-256 Encryption Works on Win 10 Home Cloud Syncing Stealth Mode
Try Folder Lock Free → Get the Full Version →
Folder Lock 10 product boxshot for Windows file and folder encryption
[Folder Lock Dashboard Interface]

Folder Lock Capabilities

If you opt for the software route, here is a reference list of what the recommended tool offers in terms of folder encryption capabilities:

Core Protection

On-the-Fly AES-256 Encryption

Creates dynamic virtual lockers. Data is decrypted in memory only when accessed, leaving no unencrypted footprints on your hard drive.

Folder Lock 10 lockers screen showing encrypted virtual locker storage

Portable Lockers

Convert encrypted lockers into standalone executables. This allows you to securely transport encrypted folders on USB drives and access them on other PCs without installing the software.

Folder Lock 10 portable lockers screen for carrying encrypted files on USB drives
Privacy Additions

Stealth Mode

Allows the application to run hidden from the desktop and taskbar, accessible only via a custom hotkey combination.

Stealth mode security concept for hiding a privacy application from casual view

Secure Wallets

A secondary encrypted vault specifically formatted for storing sensitive text data like credit card numbers, passwords, and banking details.

Folder Lock 10 secure wallet screen for storing protected card and banking details

How to Encrypt a Folder Using Folder Lock

If you've decided to use the software approach, here is the step-by-step tutorial.

  1. Install and Set Master Password: Download the software. Upon first launch, create a strong Master Password. Warning: This is unrecoverable if lost.
  2. Create a Locker: Navigate to the "Encrypt Files" section and click "Create Locker".
  3. Set Path and Size: Choose where to save the locker file and set its maximum storage capacity.
  4. Mount the Drive: Once created, open the locker. It will mount as a virtual drive (e.g., Drive Z:) in Windows Explorer.
  5. Move Your Data: Drag and drop your sensitive folders into this new virtual drive.
  6. Lock Down: Close the locker within the application. The virtual drive disappears, and your data is securely encrypted.
Folder Lock 10 protect folders screen used to secure folders from unauthorized access

Troubleshooting Windows 10 Encryption

Users frequently run into native Windows limitations when attempting to secure their data. Here is how to resolve the most common issues.

Windows lock screen security illustration for troubleshooting encrypted folder access

Cause: You are using Windows 10 Home edition, which does not support the Encrypting File System (EFS). Alternatively, the drive may be formatted as FAT32 instead of NTFS, or a registry policy has disabled EFS.

Fix: Verify your Windows edition (Settings > System > About). If you are on Home, you must upgrade to Windows 10 Pro or use third-party encryption software like Folder Lock. If you are on Pro, ensure the drive is formatted as NTFS.

Cause: You do not have the proper administrative or ownership permissions for the folder, or another program is currently using the files inside.

Fix: Right-click the folder, go to Properties > Security > Advanced, and ensure your user account is listed as the Owner with Full Control. Close any applications that might be accessing the folder's contents.

For EFS: If you lost access due to reinstalling Windows or moving to a new PC, you must import the EFS encryption certificate backup (.pfx file) you generated when you first encrypted the folder. Without it, the data is permanently lost.

For Folder Lock: Because the software uses zero-knowledge AES-256 encryption, the master password cannot be bypassed. If you forgot it, verify your account login, check for any saved recovery keys you may have exported, or locate the license email to contact vendor support for account assistance (note: they cannot decrypt the data for you).

Choosing the Right Encryption Software for Your Needs

If you are deciding between the free native tools and a paid dedicated solution, it comes down to usability versus cost.

Built-in OS Tools
Folder Lock Pro
$0

Native Windows 10 Pro Features

  • EFS file-level encryption
  • BitLocker full disk encryption
  • Tied to Windows user account

Requires Windows 10 Pro ($99 upgrade from Home)

$39.95

Lifetime License

  • AES-256 Virtual Lockers
  • Works on Windows 10 Home
  • Portable USB Lockers
  • Secure Cloud Backup Integration
View Full Pricing →
"After trying several other folder lockers, this one finally did what it promised. No complex menus or gimmicks. It locked files instantly and even worked on USB drives." — Jason Kaur, Small Business Owner

Frequently Asked Questions

Encryption Basics

What is the difference between encrypting and locking a folder?
Locking or hiding a folder generally just changes its visibility attributes or sets basic access controls; the underlying data remains in plain text. Encrypting a folder fundamentally scrambles the raw data using cryptographic algorithms (like AES-256). Even if someone bypasses the OS, encrypted data remains unreadable without the key.
How do I encrypt a folder in Windows 10?
You can use the native Encrypting File System (EFS) if you have Windows 10 Pro by right-clicking the folder, selecting Properties > Advanced, and checking 'Encrypt contents to secure data'. For Windows 10 Home, you must use third-party software to create encrypted lockers.
How to remove encryption from a folder in Windows 10?
For EFS, simply reverse the process: right-click the folder, go to Properties > Advanced, and uncheck 'Encrypt contents to secure data'. For third-party tools, you must mount the encrypted locker, move the files out into a normal Windows folder, and then delete the locker.

Windows Limitations

Can I encrypt a folder in Windows 10 Home?
Not natively. Windows 10 Home does not include EFS or BitLocker. You must download dedicated encryption software, such as Folder Lock or VeraCrypt, to secure folders on the Home edition.
What does 'Encrypt contents to secure data' mean in Windows 10?
This is the activation setting for Microsoft's Encrypting File System (EFS). It tells Windows to transparently encrypt the file on the hard drive and tie the decryption key to your specific Windows user profile.
How to encrypt a folder in Windows 10 without BitLocker?
BitLocker is for full-disk encryption. To encrypt just a specific folder without it, use EFS (if on Windows 10 Pro) or utilize file-level encryption software that creates virtual secured volumes.

Technical & Security

What is AES-256 and why is it the standard?
Advanced Encryption Standard (AES) with a 256-bit key length is a cryptographic cipher trusted globally. It is virtually immune to brute-force attacks with current computing technology, making it the industry standard for securing sensitive data at rest.
Does encryption slow down my PC significantly?
Modern processors include hardware-accelerated AES instruction sets (AES-NI). Because of this, on-the-fly encryption and decryption happen almost instantaneously with negligible impact on overall PC performance, especially on SSDs.
What happens to encrypted files if I forget the password?
Because genuine encryption relies on complex math rather than simple software roadblocks, losing the master password or the encryption certificate generally means the data is permanently unrecoverable. Always maintain secure backups of your passwords or recovery keys.
Can encrypted files be decrypted without the key?
No, assuming a strong algorithm like AES-256 was used. Without the specific cryptographic key generated by your password, it is mathematically infeasible to decrypt the data.

The Bottom Line

Encrypting a folder in Windows 10 ensures your sensitive data remains for your eyes only. While Windows 10 Pro users can rely on EFS for basic local segregation, third-party software offers the only secure path for Windows 10 Home users, and the best path for those needing portable, AES-256 secured vaults.

Security shield protecting sensitive digital files and encrypted personal data
Try Folder Lock Free → View Full Version Pricing →