Windows 11 does not have a built-in option that adds a password prompt to a single folder. The native per-folder tool is encryption: the Encrypt contents to secure data setting in a folder’s Advanced attributes. It works only on Windows 11 Pro, Enterprise, or Education, because Microsoft states that file encryption is not available in Windows Home. If you are on Home, you can still protect a whole drive with Device Encryption on supported hardware, but you cannot lock one folder with a password using Windows alone.
What the built-in folder option actually does
The Windows feature for protecting an individual folder is the Encrypting File System (EFS). When you turn it on, Windows encrypts the files in the folder so that they are readable through your signed-in Windows user account on that PC. There is no password to type when you open the folder, and there is no separate prompt for another person to pass. That distinction matters: EFS keeps the contents unreadable to other accounts and to someone who copies the drive, but it is not a lock screen for the folder on your own account.
As an Amazon Associate I earn from qualifying purchases.
How to encrypt a folder in Windows 11
Use these steps on Windows 11 Pro, Enterprise, or Education.
Quick wins for a faster PC:
Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Repair Windows errors before they cause bigger problemsFix Now →- Open File Explorer and right-click the folder you want to protect.
- Select Properties.
- On the General tab, select Advanced.
- Check Encrypt contents to secure data, then select OK.
- Select Apply. If Windows asks whether to apply the change to subfolders and files as well, choose the option that matches what you need, then confirm.
Expected result: the folder’s Properties window closes, and the folder’s contents are encrypted. Files you later add inside an encrypted folder are generally encrypted too, but confirm this on your own system by checking the Advanced attributes of a new test file.
#1 Best Overall
- 1.1 GHz (boost up to 2.4GHz) Intel Celeron N5030 Quad-Core
Why the Encrypt contents option is missing
The most common reason the checkbox is absent is the Windows edition. Microsoft’s support documentation says file encryption is not available in Windows Home, so a Home PC will not show the option in the Advanced dialog. Check your edition in Settings > System > About before trying other fixes.
- Home edition: EFS is not available. Your realistic options are drive-level encryption where your hardware supports it, or an edition upgrade if you need folder-level encryption.
- Pro, Enterprise, or Education, but the box is still missing: the folder may be on a drive or file system that does not support EFS, such as some removable or network locations. Move the folder to a local NTFS drive and try again.
- Encrypted folder appears locked after a Windows reinstall or on another PC: EFS keys belong to the user account that encrypted the data. Sign in with that same account on the same installation before assuming the data is gone.
Device Encryption and BitLocker: drive protection, not folder passwords
Device Encryption and BitLocker are the other built-in encryption tools. They protect entire drives, so they help when a disk is removed and read on another computer, but they do not single out one folder for its own password. The table below shows how the options compare.
Rank #2
- 256 GB SSD of storage.
- Multitasking is easy with 16GB of RAM
- Equipped with a blazing fast Core i5 2.00 GHz processor.
| Option | What it protects | Windows edition or device availability | Threat it addresses | Recovery burden |
|---|---|---|---|---|
| EFS (Encrypt contents to secure data) | Selected files and folders | Pro, Enterprise, or Education; not Home | Other accounts and offline copies of files on the drive | Tied to your user account; keep access to that account |
| Device Encryption | Entire drive, including the system drive | Supported devices, including some running Windows Home; depends on hardware and firmware such as TPM and Secure Boot-related support | Offline access if a disk is removed | Recovery key needed after certain hardware or security changes |
| BitLocker Drive Encryption (manual) | Entire drive, chosen by you | Pro, Enterprise, or Education | Offline access if a disk is removed | 48-digit recovery key must be backed up |
| Controlled folder access | Protected folders from changes by untrusted apps | Windows Security feature; not a password gate | Ransomware-style changes by apps | Minimal, but legitimate apps may need to be allowed |
Check whether Device Encryption is available
Open Settings > Privacy & security > Device encryption. If the page is there and shows that encryption is on, your drive is already protected. If it does not appear, Microsoft says either that the device may not support Device Encryption or that the account you are signed in with is a standard user rather than an administrator. Sign in with an administrator account and check again. If the page still does not appear, the hardware prerequisites, such as TPM and Secure Boot-related support, are the next thing to verify.
Do these 3 things before closing this tab:
1Repair Windows errors before they cause bigger problems2Fix the driver behind crashes, sound loss and screen glitches3Clear out junk files and repair common Windows errorsTurn on BitLocker on Pro, Enterprise, or Education
On editions that include manual BitLocker, open the BitLocker Drive Encryption page in Control Panel and choose the drive to protect. BitLocker encrypts the whole drive, not the folder you selected, so it is a different level of protection from EFS. Plan on the recovery-key step described below before you start.
Rank #3
- 14" diagonal, 1366x768 resolution, HD BrightView LED, Glossy NON-TOUCH Display
Controlled folder access: useful, but not a folder lock
Controlled folder access is part of Windows Security’s ransomware protection. It can be turned on in Windows Security > Virus & threat protection > Manage ransomware protection. It restricts untrusted apps from changing or accessing the folders you protect, which helps against ransomware-style activity. It does not encrypt the folder, and it does not stop a person who uses your account from opening the folder. Once enabled, it can also block legitimate software, such as a program that edits files in a protected folder, until you allow that app in its trusted-app list.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Back up your BitLocker recovery key first
Microsoft describes a BitLocker recovery key as a unique 48-digit numerical password that unlocks an encrypted drive. Store the key before you rely on encryption, because Microsoft warns that it may be needed after a suspected security event or a hardware change.
Rank #4
- 【Efficient Performance】 Powered by Intel Core i3 processor (2 cores, 4 threads, up to 3.4GHz) with 12GB RAM and 256GB SSD. Handles multitasking, office software, online classes, and HD video streaming smoothly. Integrated Intel UHD Graphics 620
- Backlit Keyboard & Complete Package】Comes with a cool backlit keyboard. Comes with awebcam, dual stereo speakers (8Ω/1.0W each), DC charger, and user manual – ready for late-night studying, online classes, video conferencing, and daily productivity
- 【Vibrant Display】 15.6-inch Full HD (1920x1080) anti-glare screen with 16:9 aspect ratio delivers crisp images and vivid colors – perfect for studying, watching lectures, or entertainment. Thin-bezel design maximizes viewing area
- 【Fast Connectivity & Expansion】 Equipped with WiFi 6 (802.11ax) and Bluetooth 5.2 for stable, high-speed wireless. Features 3 x USB 3.0, HDMI 2.1, Type-C (supports PD3.0 fast charging), and a TF card slot expandable up to 2TB – easily connect external monitors, mice, drives, or expand storage for all your files
- 【Long Battery Life & Portable】 Built-in 11.55V 5000mAh/57.75Wh high-capacity battery delivers approximately 7 hours of mixed-use battery life – enough for a full day of classes and assignments. Lightweight at just 1.63kg (3.6 lbs) and 19.5mm thin, plus a compact packing size – easily slips into a backpack for campus, library, or coffee shop
- Save the key to your Microsoft account, to a file, or to a printed copy, and confirm you can find it on another device.
- A USB flash drive is one optional backup destination. Keep it somewhere separate from the computer, not in the same bag or drawer.
- Test the recovery path while you still have access. A key you have never looked at is not much use on the day you need it.
The 48-digit length is a property of the recovery key format described in Microsoft’s BitLocker documentation. It is not a security rating.
Choosing the right option
- You need one folder encrypted and run Windows 11 Pro or higher: use Encrypt contents to secure data.
- You run Windows 11 Home: check Device Encryption first. Folder-level encryption requires a different edition.
- You want to protect a laptop or external disk if it is lost: use Device Encryption or manual BitLocker, and back up the recovery key.
- You are worried about ransomware changing files: enable Controlled folder access and allow only the apps you trust.
Windows does not provide a native way to add a password prompt to one folder on Home edition. If your goal is a password at the moment someone opens the folder, Windows’ built-in options do not meet that goal on any edition, so you should choose among the tools above based on what you are actually protecting against.
Microsoft’s feature names, edition lists, and hardware prerequisites change between Windows releases. Check Microsoft’s current Windows support pages before following the steps above on a new build.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
