Want to hide files in a secret locked folder in Windows 10 or 11? Encrypting a folder allows you to lock the folder to anyone who doesn't have an encryption key. We'll show you how to encrypt files in Windows 10 or 11 Pro or Enterprise editions in File Manager, and how to use AxCrypt to lock folders if you're using Home edition.
Locking Folders in Windows Pro & Enterprise Editions
Press ⊞ Win+E to open File Explorer.
The File Explorer icon is a folder with a blue clip. You can click the File Explorer icon in the Windows Start menu or press the + to open File Explorer.
Navigate to the folder you want to lock.
Use File Explorer to navigate to where the folder you want to encrypt is stored on your computer.
Right-click the folder and click Properties.
Right-clicking a folder displays a context menu. Click at the bottom of that context menu.
Click Advanced.
It’s the button at the bottom of the Properties menu under the “General” tab. This displays the Advanced Attributes menu.
Click the checkbox next to “Encrypt contents to secure data” and click Ok.
This selects the option to encrypt the folder.
- This option is not available in Windows 10 & 11 Home Edition.
Click Apply.
It’s at the bottom of the Properties menu. This applies the changes you have made. A pop-up menu will appear asking if you want to encrypt just the folder or all the subfolders and contents within the folder.
Select “Apply changes to this folder, subfolders and files” and click Ok.
It’s the second radio option in the pop-up menu. This applies encryption to all the folders and all the contents within.
- Alternatively, you can click “Apply changes to this folder only” to apply the encryption to the folder only, and not to any of the subfolders or contents within.
Click Back up your file encryption key.
When you apply the encryption, you will receive a notification in the lower-right corner asking you to back up your file encryption key. Click the notification to display the options for backing up your encryption key.
Click Back up now (recommended).
It’s the first option that appears in the pop-up when you click the notification.
Click Next.
This page explains that the certificate export wizard will help you export the certificate for the encryption key. Click in the lower-right corner to continue.
Select the format you want to use and click Next.
The default file format is “Personal Information Exchange (.pfx),” but you can select one of the other options if you would rather use them instead.
- If you are not sure which option to select, go with the default Personal Information Exchange. Click Next to continue.
Click the checkbox next to “Password,” create a password and click Next.
To create a password, click the checkbox next to “Password” and then enter a password on the line below it. Enter the exact same password again on the line below “Confirm password” and then click in the lower-right corner.
Insert a USB thumb drive.
Since the certificate contains the key needed to open your encrypted folder, the safest place to save this file is on an external hard drive, such as a USB thumb drive. Insert a USB thumb drive into any available USB port on your computer.
Click Browse and select a location of your thumb drive.
Click the button that says “Browse” next to the bar that says “Filename.” Then select your USB drive.
Enter a filename and click Save.
Enter the filename for the encryption key certificate in the line that says “File name.” You can enter any filename you want, but you should use a filename that you recognize as the encryption key for your folder. Click when you are done.
- Be sure to save the USB drive in a safe location. You will need it if you are not able to access the encrypted folder for any reason.
Click Next and then click Finish.
After saving the encryption key certificate, click to continue to the last page in the Export wizard. The last page shows a recap of all the steps you have taken. Click to close the export wizard. The folder is now locked to all other users except for you.
- You can access your encrypted folders as long as you are signed into Windows under your user account. No other Windows user (including the admin) will be able to access the folder.
- If your user password is changed by an administrator, or you move the encrypted folder to another computer, you will not be able to access the folder. You will need to import the encryption key certificate to regain access to the folder.
Unlocking Folders in Windows 10 & 11 Pro or Enterprise
Insert the USB drive with your encryption key certificate.
Locate the USB thumb drive you used to save your encryption key certificate. Insert it into any USB port on your computer.
Click the Windows Start menu.
It’s the icon with the Windows logo in the lower-left corner by default.
- If your Windows password has changed or you move your encrypted files to another computer, you will need to import the certificate with the encryption key in order to regain access to your encrypted folder.
Type certificates.
This displays a list of all apps that manage certificates on your Windows computer.
Click Manage User Certificates.
This opens the Manage User Certificates app.
Click Personal.
It’s the first option in the list on the left in the Manage User Certificates application.
Right-click Certificates.
It’s the first option in the panel on the right side under Object Type.
Select All Tasks.
It’s the first option in the context menu that appears when you right-click “Certificates.”
Click Import.
It’s the second option under the “All Tasks” menu. This opens the Import Certificates wizard.
Click Next.
It’s in the lower-right corner of the Import wizard. This screen explains that the Wizard will walk you through the process of importing your certificates again.
Click Browse and select your encryption key certificate and click Next.
Your encryption key certificate should be stored on your USB drive. Click in the pop-up and navigate to the encryption key certificate on the USB drive, select it, and then click .
Enter your password and click Next.
This imports the certificates and allows you to access your encrypted folder again.
Locking Folders in Windows Home Edition
Download and install AxCrypt.
Windows Home Edition does not have the ability to encrypt and lock folders. However, AxCrypt is a free third-party tool you can use to encrypt and lock folders on all versions of Windows. Use the following steps to download and install Axcrypt:
- Go to https://axcrypt.net/download in a web browser.
- Click Download AxCrypt
- Click the AxCrypt Setup file in your web browser or Downloads folder.
- Click the checkbox next to “I agree to the license terms and agreement.”
- Click Install.
- Click Yes.
Click New User? Sign Up.
It’s at the bottom of the window that appears when you launch AxCrypt. This opens up a web page that allows you to sign up for a new AxCrypt account.
- If you already have an account, enter the email and password associated with your AxCrypt account and click Ok.
Sign up for an account.
You can sign up for a basic account for free. A basic account allows you to encrypt and lock folders on Windows. Use the following steps to sign up for an account:
- Click Free below the account options.
- Enter your email address in the bar that say “Email.”
- Click the checkbox next to “I am not a robot.”
- Click Sign Up.
- Check the email you used to sign up with and open the verification email from AxCrypt.
- Click Verify AxCrypt ID.
- Enter a password you want to use.
- Enter the password again and click Verify.
Launch AxCrypt.
AxCrypt has a green icon with an image that resembles a padlock. Click the AxCrypt icon in your Windows Start menu or Desktop.
Sign in to AxCrypt.
Enter the email address and password you used when you signed up for an AxCrypt account and click .
- You may be asked if you want to try a free 30 trial of the premium version of AxCrypt. If you don’t want to sign up for a premium subscription, click Not Now. You can continue to use the free version of AxCrypt for as long as you want.
Press ⊞ Win+E to open File Explorer.
File Explorer has an icon that resembles a folder with a blue clip. Click the File Explorer icon in the taskbar or Windows Start menu, or press the to open File Explorer.
Right-click the folder you want to lock.
Use File Explorer to navigate to the folder you want to encrypt. Right-click the folder to display a context menu next to it. You should see “AxCrypt” as an option in the context menu.
Hover over “AxCrypt” and click Encrypt.
It’s the first option in the AxCrypt submenu.
Click Ok in the AxCrypt client.
This begins encrypting all the files in the folder. They will be converted to “.axx” files. This indicates the files are encrypted. All encrypted files will be inaccessible until they are decrypted using AxCrypt.
- To decrypt a file or folder, make sure you are signed in to the AxCrypt client, right-click the file or folder, hover over AxCrypt and click Decrypt. Then click Ok in the AxCrypt client.
- You do not need to enter your AxCrypt password as long as you are signed in to the AxCrypt client.