Before you start
- Windows 10 or 11
- 7-Zip (free) or Windows Pro for BitLocker/EFS
Method 1 Create a password-protected 7-Zip archive
Without the password, nobody can open the files or even see their names. If you forget it, the files can’t be recovered, so store it in a password manager.
-
Step 1: Install 7-Zip
Download it from 7-zip.org and install it.
-
Step 2: Add the folder to an archive
Right-click the folder > 7-Zip > Add to archive (on Windows 11, click Show more options first).
-
Step 3: Set encryption
Choose Archive format: 7z, type a strong password twice, set Encryption method: AES-256 and tick Encrypt file names.
-
Step 4: Test, then delete the original
Click OK. Open the new archive to confirm it asks for the password, then delete the original folder and empty the Recycle Bin.
Method 2 Encrypt a USB stick or drive with BitLocker
Put private files on an encrypted USB stick or a dedicated drive. Windows Home has Device encryption for the main drive on supported PCs, but not BitLocker for USB drives.
-
Step 1: Open BitLocker
On Windows 10/11 Pro, Enterprise or Education, right-click the drive in File Explorer and choose Turn on BitLocker.
-
Step 2: Choose a password
Select Use a password to unlock the drive and enter a strong password.
-
Step 3: Save the recovery key
Save the recovery key to your Microsoft account, a file or print it. Then start encrypting.
Method 3 Encrypt a folder with EFS (Pro editions)
EFS ties encryption to your Windows user account: anyone logged in as you can open the files, but other accounts can’t. There’s no separate password.
-
Step 1: Open folder properties
Right-click the folder > Properties > Advanced.
-
Step 2: Encrypt contents
Tick Encrypt contents to secure data and click OK. Back up the encryption certificate when Windows prompts you.
Troubleshooting
I don’t see Turn on BitLocker
You’re on Windows Home. Use 7-Zip, or check Settings > Privacy & security > Device encryption for the main drive.
The Encrypt contents option is greyed out
EFS isn’t available on Windows Home, or the drive isn’t NTFS.
Frequently asked questions
Can I password protect a folder without software?
Not securely on Windows Home. On Pro, BitLocker and EFS are built in. 7-Zip is free and lightweight.
Is a ZIP password secure?
Windows’ built-in ZIP can’t set passwords, and old ZipCrypto is weak. Use 7-Zip with 7z format and AES-256.
What if I forget the password?
Encrypted files can’t be recovered without it. Keep it in a password manager.
Summary
For a single folder, make a 7-Zip archive with AES-256 and a strong password. For a drive or USB stick, use BitLocker. Skip the batch-file trick, which offers no real protection.
