Recommended Free Tools
Yes—Windows can encrypt selected files or folders without a separate app, but that option is unavailable in Windows Home. Home users may still have Device Encryption, which protects supported drives rather than individual files. For USB drives and other removable storage, BitLocker To Go is available on Windows Pro, Enterprise, and Education.
Choose the kind of protection you need
Windows has three relevant built-in options, and they protect different things. File encryption applies to selected files or folders. Device Encryption protects the operating-system drive and fixed drives. BitLocker Drive Encryption lets you choose drives, including removable drives, on supported editions.
As an Amazon Associate I earn from qualifying purchases.
| Option | What it protects | Windows availability | How you start |
|---|---|---|---|
| File or folder encryption | Selected files or folders | Not available in Windows Home | File or folder Properties > Advanced |
| Device Encryption | Operating-system and fixed drives | Available on some supported devices, including some Windows Home devices | Settings > Privacy & security > Device encryption |
| BitLocker Drive Encryption | Selected operating-system, fixed data, or removable data drives | Windows Pro, Enterprise, and Education; not Windows Home | Manage BitLocker |
Encrypt a particular file or folder
On a Windows edition that supports it, use the built-in Encrypting File System (EFS) control. Microsoft’s instructions are in its file and folder encryption guidance.
- In File Explorer, right-click the file or folder and select Properties.
- On the General tab, select Advanced.
- Check Encrypt contents to secure data, then select OK.
- Select Apply, then OK. If Windows asks whether to apply the change to subfolders and files, choose the scope you intend.
This encrypts the selected content in place; it does not create a separate archive that asks for a password whenever someone opens it. Windows uses its account and encryption mechanisms to control access. Protect your Windows account credentials and keep access to the account and its recovery options: the checkbox is not a replacement for them.
#1 Best Overall
- High-speed USB 3.0 performance of up to 150MB/s(1) [(1) Write to drive up to 15x faster than standard USB 2.0 drives (4MB/s); varies by drive capacity. Up to 150MB/s read speed. USB 3.0 port required. Based on internal testing; performance may be lower depending on host device, usage conditions, and other factors; 1MB=1,000,000 bytes]
- Transfer a full-length movie in less than 30 seconds(2) [(2) Based on 1.2GB MPEG-4 video transfer with USB 3.0 host device. Results may vary based on host device, file attributes and other factors]
- Transfer to drive up to 15 times faster than standard USB 2.0 drives(1)
- Sleek, durable metal casing
- Easy-to-use password protection for your private files(3) [(3)Password protection uses 128-bit AES encryption and is supported by Windows 7, Windows 8, Windows 10, and Mac OS X v10.9 plus; Software download required for Mac, visit the SanDisk SecureAccess support page]
What Windows Home users can do
Microsoft says the file-and-folder encryption feature is not available in Windows Home. Device Encryption may nevertheless be available, depending on the device. It encrypts the operating-system drive and fixed drives, not just a folder you choose. Microsoft explains how to check this in its Device Encryption guidance.
- Sign in with an administrator account.
- Open Settings > Privacy & security > Device encryption.
- If the setting is present, turn it on and follow the prompts.
Device Encryption can turn on during setup or sign-in when a Microsoft or work/school account is used. Setting up Windows with a local account does not automatically turn it on. If the setting is missing, the device may not support the feature, or the signed-in account may not have administrator privileges.
Rank #2
- USB-C 2-in-1 storage OTG: The Lexar JumpDrive Dual Drive D40E features USB Type-A and Type-C connectors in a slim, portable form factor for easy device compatibility
- Transfer speeds up to 100MB/s: Based on internal testing, performance may vary depending upon the host device, interface, and usage conditions. 1MB=1,000,000 bytes
- Plug and Play: Widely compatible with USB Type-C smartphones, tablets, laptops, Macs, and traditional Type-A devices, no software installation required. The 360° swivel design allows for easy switching between connectors without the hassle of losing a cap
- Durable & Compact: The Lexar D40E USB memory stick features a metal enclosure, withstands temperatures from 0° to 50° C (32°F to 122°F), and is lightweight at 26g with dimensions of 70.4 x 16.9 x 11.7mm
- Security & Warranty: Securely protects files using an advanced security software solution with 256-bit AES encryption. Backed by a Lexar 3-year limited warranty
To check a device’s reported support status, open System Information and look for Device Encryption Support. Microsoft lists possible blockers such as a disabled or unusable TPM, Windows Recovery Environment not being configured, and unsupported PCR7 binding. PCR7 issues can be related to Secure Boot being disabled or peripherals being connected during boot.
Encrypt a USB drive or another selected drive
For manual drive encryption, Microsoft documents BitLocker Drive Encryption for Windows Pro, Enterprise, and Education—not Home. It can protect operating-system drives, fixed data drives, and removable data drives. Removable storage is handled by BitLocker To Go; see Microsoft’s BitLocker Drive Encryption guidance.
Rank #3
- Transfer speeds up to 10x faster than standard USB 2.0 drives (4MB/s); up to 130MB/s read speed; USB 3.0 port required. Based on internal testing; performance may be lower depending upon host device. 1MB=1,000,000 bytes
- Backward compatible with USB 2.0
- Secure file encryption and password protection(2)
On a supported edition, search Windows for Manage BitLocker, open it, and follow the controls for the drive you want to encrypt. The protected item is the entire USB drive, not an individual file or folder on it. A USB flash drive is therefore relevant only if your goal is to carry encrypted storage; buying one does not add file encryption to a Windows Home PC.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Save and verify your recovery key
Drive encryption can make data inaccessible if Windows requests a recovery key and you cannot provide it. Microsoft describes the BitLocker recovery key as a unique 48-digit numerical password. A recovery prompt may appear if Windows detects possible unauthorized access or a hardware, firmware, or software change. Read Microsoft’s BitLocker recovery-key guidance and make sure you can retrieve the key before relying on encryption.
Rank #4
- High-speed USB 3.0 performance of up to 150MB/s(1) [(1) Write to drive up to 15x faster than standard USB 2.0 drives (4MB/s); varies by drive capacity. Up to 150MB/s read speed. USB 3.0 port required. Based on internal testing; performance may be lower depending on host device, usage conditions, and other factors; 1MB=1,000,000 bytes]
- Transfer a full-length movie in less than 30 seconds(2) [(2) Based on 1.2GB MPEG-4 video transfer with USB 3.0 host device. Results may vary based on host device, file attributes and other factors]
- Transfer to drive up to 15 times faster than standard USB 2.0 drives(1)
- Sleek, durable metal casing
- Easy-to-use password protection for your private files(3) [(3)Password protection uses 128-bit AES encryption and is supported by Windows 7, Windows 8, Windows 10, and Mac OS X v10.9+; Software download required for Mac, visit the SanDisk SecureAccess support page]
When Device Encryption is enabled automatically, Microsoft says the key is associated with the Microsoft account or work/school account used during setup. With manually enabled BitLocker Drive Encryption, you choose where to save the key. Verify that the account or location is accessible; do not assume a key has been backed up just because encryption is on.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
