Encrypt Files and Folders in Windows 8.1 Pro with EFS
Protecting Your Files with Encrypted File System (EFS) in Windows
Windows 8 incorporates a built-in file encryption capability known as BitLocker; however, this feature is limited to the Pro or Enterprise editions. Furthermore, systems lacking a Trusted Platform Module (TPM) necessitate the use of a USB flash drive alongside BitLocker for functionality.
Encrypting Files and Folders with EFS
For those concerned about unauthorized access to their files by other system users, Windows has offered a straightforward method for encrypting files and folders – the Encrypted File Service (EFS) – since the release of Windows XP. This guide details the process of applying EFS to your data.
Important Note: Files and folders secured using EFS can only be decrypted utilizing the Windows login credentials used during the encryption process. While other system users will be able to view the files, they will be unable to open them, even with administrator privileges. Consequently, it is crucial to remember your login information, as losing it will result in permanent inaccessibility to your encrypted data.
Initiating the Encryption Process
To begin encrypting a file or folder, launch File Explorer. This can be done by clicking the File Explorer icon on the Taskbar if you are using the Desktop interface.
Alternatively, if you are on the Start screen, simply begin typing "explorer" (without quotation marks). The Search function will display and list matching results as you type. Select File Explorer from the presented options.
Once File Explorer is open, select the specific file or folder you wish to encrypt. For demonstration purposes, we will focus on a folder. Right-click on the selected folder and choose "Properties" from the context menu.
Within the Properties dialog box, navigate to the "General" tab. Then, click the "Advanced" button located in the "Attributes" section.
Confirming Encryption Settings
The Advanced Attributes dialog box will appear. Check the box labeled "Encrypt contents to secure data" and then click "OK".
Click "OK" again on the Properties dialog box to close it.
A confirmation dialog, "Confirm Attribute Changes," will be displayed. If you are encrypting a folder, you will be prompted to choose whether to encrypt only the folder itself or the folder along with all its subfolders and contained files. Select your desired option and click "OK". The Properties dialog box will then close.
Verification and Key Backup
Following the encryption process, the encrypted folder, or file, will be visually distinguished by displaying in green text. If you opted to encrypt a folder and its contents, all subfolders and files within will also be encrypted and appear in green.
Any new files or folders created within the main encrypted folder will automatically be encrypted as well.
A notification will appear in the Notification Area of the Taskbar, recommending that you back up your encryption key to safeguard against loss or corruption. Click this notification to initiate the backup process.
Note: If the notification disappears before you can click it, click the arrow in the Notification Area to reveal the Encrypting File System icon and click on it.
Backing Up Your Encryption Key
On the Encrypting File System dialog box, select "Back up now". Alternatively, you can choose "Back up later" to be reminded during your next login. However, it is strongly advised against selecting "Never back up the key".
Click "Next" on the initial screen of the Certificate Export Wizard.
Accept the default file format for the exported encryption certificate and key by clicking "Next".
Check the "Password" box and enter a robust password in both the "Password" and "Confirm password" fields. Click "Next".
On the "File to Export" screen, click "Browse".
Navigate to your preferred save location for the encryption certificate and key file. While saving to the hard drive is possible initially, it is highly recommended to transfer the file to an external storage device, such as a USB flash drive.
Click "Save".
The selected file path will be displayed in the "File name" field. Click "Next".
A summary of your chosen settings will be presented on the final screen. Click "Finish".
A dialog box will confirm the successful export. Click "OK" to close it.
Reversing Encryption
You can disable encryption on previously encrypted files or folders by selecting "Properties" for the respective items and toggling off the "Encrypt contents to secure data" option, as described in this article.
Related Information: For enhanced data protection, consider exploring TrueCrypt, a free tool that allows for data security and the creation of hidden volumes within encrypted containers.
