How to Encrypt Files and Folders with EFS in Windows 10, 8 or 7

The Encrypting File System (EFS) was first introduced in Windows 2000 and is still available in all versions of Windows 10, 8 or 7 except for Home version. EFS is similar to encryption by Bitlocker, and it allows encrypting separate files and folders while Bitlocker works with the entire disk. EFS is not a full-fledged file system, but an add-on based on NTFS and allowing to encrypt particular files on the fly.

Encryption keys are connected to a Windows user account, so other users of the same PC won’t be able to access the encrypted data. EFS encryption does not provide comprehensive protection as in case with Bitlocker. First of all, the system stores the encryption keys locally so intruders can get access to them. There is also a chance of secret data being stored in system temporary or auxiliary files which are not encrypted.

Nevertheless, EFS is a quick and easy way to protect separate files and folders on a computer where several users may work. Encryption with EFS will not take long, so let’s have a look how it works.

How to start encrypting data

EFS is not available for Home versions of Windows 10, 8 or 7, so if you have one, that is unfortunate. There is no point in encrypting data if you don’t use a reliable password with your user account — access to encrypted data is granted automatically when the user who has encrypted the data logs into the system.

After the files are encrypted, the system will automatically create a backup key to let you have access to data if you have problems with logging into the system, and you can’t sign in your account. For this purpose, any removable media will do, and a USB drive will be the best choice.

How to enable EFS in Windows 10

Select files or folders to encrypt with EFS and then do the following:

1. Start Windows Explorer in the Start menu, in the desktop or in the taskbar.
2. Right-click on the file or folder and select “Properties” in the menu.
3. In the tab “General” click on Advanced.
4. Check the box next to Encrypt contents to secure data.
5. Click OK, then Apply. You will see a dialogue box asking if you want to encrypt a selected folder only, or this folder and all of the folders and files inside it.
6. Click “Apply changes to this folder only” or “Apply changes to this folder, subfolders and files”.
7. Click OK.

The files encrypted with EFS will have a small lock-shaped symbol in the upper right corner of their icons. After encryption, no one is going to have access to such files until they sign in with your account.

How to create a backup copy of the EFS encryption key

After EFS is enabled, a small icon will appear in the taskbar. This is an EFS key backup notice.

1. Connect a USB drive to the computer.
2. Click on the EFS icon in the taskbar.
3. Click Backup now (recommended).

4. Click “Next”.

5. Click “Next”.

6. Check the box next to the password, then enter and confirm the password. Click “Next” to continue.

7. Click “Browse” and go to the USB drive to save the file.

That’s all. If you lose access to your Windows account, you’ll be able to use the backup key to access encrypted files in your computer. If you delete accidentally the files and folders encrypted with EFS, use our programs to recover encrypted NTFS files.

Source: https://hetmanrecovery.com/recovery_news/how-to-encrypt-files-and-folders-using-efs-in-windows-10-8-or-7.htm