Protect Your Files: How to Encrypt Files and Folders with EFS in Windows

Looking to enhance the security of your files and folders on Windows 10, 8 or 7? Discover how to encrypt them using EFS with this step-by-step guide. Keep your data safe and secure from unauthorized access today!

Encryption keys are connected to a Windows user account, so other users of the same PC won’t be able to access the encrypted data. EFS encryption does not provide comprehensive protection as in case with Bitlocker. First of all, the system stores the encryption keys locally so intruders can get access to them. There is also a chance of secret data being stored in system temporary or auxiliary files which are not encrypted.

Nevertheless, EFS is a quick and easy way to protect separate files and folders on a computer where several users may work. Encryption with EFS will not take long, so let’s have a look how it works.

How to start encrypting data

EFS is not available for Home versions of Windows 10, 8 or 7, so if you have one, that is unfortunate. There is no point in encrypting data if you don’t use a reliable password with your user account – access to encrypted data is granted automatically when the user who has encrypted the data logs into the system.

After the files are encrypted, the system will automatically create a backup key to let you have access to data if you have problems with logging into the system, and you can’t sign in your account. For this purpose, any removable media will do, and a USB drive will be the best choice.

How to enable EFS in Windows 10

Select files or folders to encrypt with EFS and then do the following:

  1. Start Windows Explorer in the Start menu, in the desktop or in the taskbar.
  2. Right-click on the file or folder and select “Properties” in the menu.
  3. In the tab “General” click on Advanced.
  4. Check the box next to Encrypt contents to secure data.
  5. Click OK, then Apply. You will see a dialogue box asking if you want to encrypt a selected folder only, or this folder and all of the folders and files inside it.
  6. Click “Apply changes to this folder only” or “Apply changes to this folder, subfolders and files”.
  7. Click OK.

The files encrypted with EFS will have a small lock-shaped symbol in the upper right corner of their icons. After encryption, no one is going to have access to such files until they sign in with your account.

How to create a backup copy of the EFS encryption key

After EFS is enabled, a small icon will appear in the taskbar. This is an EFS key backup notice.

  1. Connect a USB drive to the computer.

  2. Click on the EFS icon in the taskbar.

  3. Click Backup now (recommended).

  4. Click “Next”.

  5. Click “Next”.

  6. Check the box next to the password, then enter and confirm the password. Click “Next” to continue.

  7. Click “Browse” and go to the USB drive to save the file.

That’s all. If you lose access to your Windows account, you’ll be able to use the backup key to access encrypted files in your computer. If you delete accidentally the files and folders encrypted with EFS, use our programs to recover encrypted NTFS files.

Author: , Technical Writer

Vladimir Artiukh is a technical writer for Hetman Software, as well as the voice and face of their English-speaking YouTube channel, Hetman Software: Data Recovery for Windows. He handles tutorials, how-tos, and detailed reviews on how the company’s tools work with all kinds of data storage devices.

Editor: , Technical Writer

Oleg Afonin is an expert in mobile forensics, data recovery and computer systems. He often attends large data security conferences, and writes several blogs for such resources as xaker.ru, Elcomsoft and Habr. In addition to his online activities, Oleg’s articles are also published in professional magazines. Also, Oleg Afonin is the co-author of a well-known book, Mobile Forensics - Advanced Investigative Strategies.

  • Updated:
  • Evaluations:
  • 17
  • /
  • :

Share

Questions and answers

How are files encrypted in the EFS file system?

In the EFS (Encrypting File System) file system, files are encrypted using a public key encryption algorithm. Here are the general steps:

  1. A user selects the file or folder they want to encrypt.
  2. EFS generates a random symmetric encryption key to encrypt the file data.
  3. EFS retrieves the user's public key from the certificate stored in the user's profile.
  4. EFS uses the user's public key to encrypt the symmetric encryption key.
  5. EFS stores the encrypted file data and the encrypted symmetric key in the file's metadata.
  6. The encrypted file data and the encrypted symmetric key are stored on the disk.
  7. When the user wants to access the file, EFS retrieves the encrypted symmetric key from the file's metadata.
  8. The user's private key is used to decrypt the symmetric encryption key.
  9. The decrypted symmetric encryption key is used to decrypt the file data.
  10. The decrypted file data is loaded into memory and the user can access the file.

It is important to note that EFS encryption only provides protection against unauthorized access to the file. It does not provide protection against unauthorized modification or deletion of the file.

How to decrypt files encrypted with EFS?

To decrypt files encrypted with EFS, follow these steps:

  1. Log in to Windows with the same user account used to encrypt the files.
  2. Right-click on the encrypted file or folder, and select ""Properties.""
  3. In the ""Properties"" window, click on the ""Advanced"" button.
  4. In the ""Advanced Attributes"" window, uncheck the ""Encrypt contents to secure data"" option.
  5. Click ""OK"" to save the changes.
  6. If prompted, select the option to apply the changes to the file or folder, and its contents.
  7. The file or folder will be decrypted and can now be accessed without the need for the EFS key.

It is important to note that if the EFS key was lost or damaged, or if the user account used to encrypt the file was deleted or its profile was damaged, it may not be possible to decrypt the file using this method. In such cases, data recovery tools or specialized data recovery services may be required.

What encryption algorithms are used in EFS?

EFS (Encrypting File System) uses several encryption algorithms, including the Advanced Encryption Standard (AES), Triple Data Encryption Standard (3DES), and Data Encryption Standard (DES). AES is the default encryption algorithm used by EFS in Windows 10, Windows 8, and Windows 7. In earlier versions of Windows, 3DES and DES are used as the default encryption algorithms. EFS also supports other encryption algorithms, including the Rivest-Shamir-Adleman (RSA) algorithm, which is used for encrypting the symmetric encryption keys.

Who can open a file encrypted with EFS?

A file encrypted with EFS can be opened by the user who encrypted the file and by any other user who has been granted access by the original user or an administrator. Access is granted through the use of access control lists (ACLs) that specify which users or groups are allowed to access the file and what level of access they have. It is important to note that if the user's EFS certificate or private key is lost or damaged, it may not be possible to access the encrypted file, even if the user has been granted access through ACLs.

How to disable EFS?

To disable EFS, follow these steps:

  • Open the Local Group Policy Editor by typing ""gpedit.msc"" in the Start menu search box and pressing Enter.
  • Navigate to ""Computer Configuration"" > ""Windows Settings"" > ""Security Settings"" > ""Public Key Policies"".
  • Right-click ""Encrypting File System"" and select ""Properties"".
  • Select ""Do not use Encrypting File System"" and click ""OK"".
  • Restart your computer to apply the changes.

It is important to note that disabling EFS will make all previously encrypted files inaccessible. It is recommended to backup all encrypted files and decrypt them before disabling EFS.

Comments (11) #

  • Patty Downer 23.01.2018 23:13 #

    Is it possible to share encrypted files and folders with other users on the same computer?

    • Hetman Software 23.01.2018 23:48 #

      Yes, it is possible to share encrypted files and folders with other users on the same computer. This can be done by using encryption software, such as BitLocker or VeraCrypt. These programs allow users to encrypt files and folders and then share them with other users on the same computer. The recipient of the encrypted files and folders will need to have the appropriate encryption key in order to access the contents.

  • Douglas Hood 23.01.2018 20:01 #

    How can you check if EFS is enabled on your Windows system?

    • Hetman Software 23.01.2018 20:31 #

      You can check if EFS is enabled on your Windows system by opening the Local Group Policy Editor, navigating to Computer Configuration > Windows Settings > Security Settings > Public Key Policies, and checking for the presence of the Encrypting File System policy. You can also check the Properties of a file or folder to see if EFS is enabled.

  • Xavier Bagnall-Oakeley 23.01.2018 17:59 #

    Is EFS enabled by default in Windows?

    • Hetman Software 23.01.2018 18:18 #

      No, EFS is not enabled by default in Windows. It must be manually enabled by the user.

  • Rich Redshaw 23.01.2018 15:01 #

    Are there any alternative encryption tools for Windows that can be used alongside or instead of EFS?

    • Hetman Software 23.01.2018 15:20 #

      Yes, there are many alternative encryption tools for Windows that can be used alongside or instead of EFS. Some of the most popular options include BitLocker, VeraCrypt, AxCrypt, 7-Zip, and DiskCryptor. Each of these tools offers different features and levels of security, so it's important to research each one to determine which is best for your particular needs.

  • Booth Bloomfield 23.01.2018 12:00 #

    How can you decrypt files and folders encrypted with EFS?

    • Hetman Software 23.01.2018 12:25 #

      To decrypt files and folders encrypted with EFS, you will need to have access to the certificate and private key that was used to encrypt the files. You can then use the Certificate Manager tool in Windows to decrypt the files and folders.

  • Hetman Software: Data Recovery 20.07.2018 11:24 #

    Read about encrypting files and folders with EFS in Windows 10, 8 or 7 and recommend it to friends. If you do have any questions, don't hesitate to contact our technical support service - we will be happy to help you.

Post comment

Recommended For You