Want to put a password on a folder so nobody else can open it? Windows doesn’t have a right-click “add password” option for folders. Not in Windows 11, not in Windows 10, and not in Home or Pro.
But there are good ways to password protect a folder, and the best ones are free. I’ll show you four of them, which ones need Windows Pro, and which one I’d use.
Every method here works the same on a desktop PC or a laptop.
The Short Version
- Quickest, free, any Windows: 7-Zip. Right-click the folder, choose 7-Zip, Add to archive, type a password and tick Encrypt file names.
- For files you open every day: a VeraCrypt vault. It appears as a drive when you unlock it and vanishes when you lock it.
- Windows Pro, nothing to install: a virtual drive locked with a BitLocker password.
- Windows Pro, no password at all: EFS encryption, which is tied to your Windows sign-in.
Table of contents
- Can You Password Protect or Lock a Folder in Windows?
- Which Method Should You Use?
- Method 1: Password Protect a Folder with 7-Zip
- Method 2: Lock Your Files in a VeraCrypt Vault
- Method 3: A Password-Protected Virtual Drive with BitLocker (Windows Pro)
- Method 4: Encrypt a Folder with EFS (Windows Pro)
- What About BitLocker, Device Encryption and USB Sticks?
- Troubleshooting
- FAQ
- Summary
Can You Password Protect or Lock a Folder in Windows?
Not on its own. No edition of Windows 11 or Windows 10 lets you lock a single folder with a password. There’s no setting for it and nothing in File Explorer.
What Windows does have is encryption. Encryption scrambles your files so they can’t be read without the right key. Some kinds use a password as the key, others use your Windows sign-in.
Hiding a folder isn’t the same thing either. Anyone can tick Hidden items in File Explorer and there it is. I explain the difference in how to hide folders in Windows.
Windows 11 can now make zip and 7z files by itself, but it can’t put a password on them. For that you need 7-Zip.
What About the Notepad Batch File Trick?
You’ll find videos showing a “folder locker” made from a few lines typed into Notepad. Don’t rely on it.
It only hides the folder, and the password is written in plain text inside the file. Anyone who right-clicks it and chooses Edit can read it.
If you’re not sure a password is what you need, my guide to the ways to keep files private on a PC starts from who you’re keeping them from.
Which Method Should You Use?
| Method | Asks for a password? | Windows edition | Best for |
|---|---|---|---|
| 7-Zip | Yes | Any, Home or Pro | Locking a folder quickly, or sending it to someone |
| VeraCrypt | Yes | Any, Home or Pro | Private files you open and change often |
| BitLocker virtual drive | Yes | Pro, Enterprise, Education | A locked folder without installing anything |
| EFS | No, it uses your Windows sign-in | Pro, Enterprise, Education | Keeping other user accounts on the same PC out |
Not sure which edition you have? Open Settings > System > About and look at Edition under Windows specifications.
My advice: on Windows Home, use 7-Zip for the odd folder and VeraCrypt for anything you open regularly. Both are free.
Method 1: Password Protect a Folder with 7-Zip
7-Zip is free, open source and has been around since 1999. It’s mainly for zipping files, but it can add AES-256 encryption and a password at the same time. It’s the quickest way to lock a folder.
If you don’t have it yet, my guide on how to password protect files with 7-Zip shows where to download it safely, with every step in pictures.
- Right-click the folder you want to lock. In Windows 11, click Show more options.
- Point to 7-Zip and click Add to archive.
- Set Archive format to 7z.
- Under Encryption, type your password and type it again to confirm.
- Leave Encryption method on AES-256 and tick Encrypt file names.
- Click OK.
7-Zip makes a new .7z file next to your folder. Open it and it asks for the password before it shows you anything.
Delete the Original
7-Zip doesn’t touch your original folder, so it’s still sitting there unlocked.
Check the .7z file opens with your password, then delete the original folder and empty the Recycle Bin.
Why 7z and not zip? A zip file still shows the names of the files inside, even without the password. A 7z file with Encrypt file names ticked hides those too.
The one drawback: to change a file, you have to take it out, edit it and put it back. For files you work on every day, VeraCrypt is a better option.
Method 2: Lock Your Files in a VeraCrypt Vault
VeraCrypt is also free and open source, but it works differently. It creates an encrypted vault, a single file that opens as a drive in File Explorer when you type the password.
While it’s unlocked, you use it like any other drive. Save straight into it, drag files in, edit them. When you click Unmount, the drive disappears and everything inside is locked again.
There’s no password reset. Forget it and the files are gone for good, so write it down and keep it somewhere safe.
Setting one up takes about ten minutes. I’ve written a separate guide on how to use VeraCrypt, from the download to locking it again.
Method 3: A Password-Protected Virtual Drive with BitLocker (Windows Pro)
If you have Windows 11 Pro or Windows 10 Pro, you can build your own password-protected folder without installing anything. It’s the same idea as VeraCrypt, a locked file that opens as a drive, made with tools already in Windows.
There are two parts. First you create a virtual hard disk (VHD), then you lock it with a BitLocker password.
Create the Virtual Drive
- Open Settings > System > Storage.
- Click Advanced storage settings, then Disks & volumes.
- Click Create VHD.
- Give it a name, choose where to save it (your Documents folder is fine) and set a size, for example 10 GB.
- Choose VHDX and Dynamically expanding, then click Create.
- Choose GPT and click Initialize.
- Give the drive a label, leave the file system as NTFS and click Format.
Dynamically expanding means the file starts small and grows as you add files, up to the size you set. Not sure how big to make it? See kilobytes, megabytes and gigabytes explained.
On Windows 10
Windows 10 doesn’t have Create VHD in Settings. Right-click the Start button, open Disk Management, then click Action > Create VHD.
Lock It with a Password
- Open File Explorer and click This PC. Your new drive is there.
- Right-click it, click Show more options, then Turn on BitLocker.
- Tick Use a password to unlock the drive, type your password twice and click Next.
- Save the recovery key. Saving it to your Microsoft account is easiest. Don’t save it on the virtual drive itself.
- Click through the remaining screens, leaving the settings as they are, then click Start encrypting.
Locking and Unlocking It
To lock it, right-click the drive in This PC and choose Eject. The drive disappears and the VHDX file it lives in stays locked.
To open it again, double-click the VHDX file. The drive comes back with a padlock on it. Double-click the drive, type your password and click Unlock.
After a restart the drive won’t be there until you double-click the VHDX file again, so it’s locked every time your PC starts.
Want to know more about BitLocker itself? See my guide on how to use BitLocker.
Method 4: Encrypt a Folder with EFS (Windows Pro)
EFS (Encrypting File System) is built into Windows Pro, Enterprise and Education. It isn’t in Windows Home.
This is the one most people find when they search for how to encrypt a folder in Windows, and it catches people out. EFS doesn’t use a password. The lock is tied to your Windows user account.
When you’re signed in, the files open as normal. When someone else signs in with their own account, they can’t open them, even if they’re an administrator.
The catch is that anyone who sits down at your PC while you’re signed in can open them too.
How to Encrypt a Folder with EFS
- Right-click the folder and click Properties.
- On the General tab, click Advanced.
- Tick Encrypt contents to secure data and click OK.
- Click Apply.
- Choose Apply changes to this folder, subfolders and files and click OK.
A small padlock appears on the folder’s icon. Anything you save into it from now on is encrypted as well.
Back Up Your Encryption Key
Straight after, Windows asks you to back up your file encryption key. Do it.
If your user account gets corrupted, or someone else resets your Windows password, that backup is the only way back into the files.
- Click the Back up your file encryption key message.
- Click Back up now (recommended).
- Follow the wizard, give the backup a password and save it to a USB stick you keep somewhere safe.
EFS Only Protects the Copy on Your PC
Email a file from an encrypted folder, or upload it somewhere, and the copy that goes is an ordinary unencrypted file.
If other people use your PC, give each of them their own user account. Otherwise everyone is signed in as you, and EFS has nothing to protect you from.
What About BitLocker, Device Encryption and USB Sticks?
These come up whenever you search for encrypting files, so here’s where they fit.
BitLocker (Windows Pro) and Device Encryption (many Windows Home PCs) encrypt your whole drive, not one folder. They protect you if the PC is lost or stolen, because nobody can take the drive out and read it.
What they don’t do is stop someone using your PC while it’s switched on and signed in. For that you still need one of the methods above.
Can BitLocker encrypt just one folder? Not directly. The virtual drive in Method 3 is the way round it.
USB sticks: BitLocker To Go puts a password on a whole USB stick or external drive. You need Windows Pro to set it up, but any Windows PC can open it with the password. Here’s how to password protect a USB stick with BitLocker To Go.
Troubleshooting
Encrypt Contents to Secure Data Is Greyed Out
Usually the PC is running Windows Home, which doesn’t include EFS. Check under Settings > System > About.
On Home, use 7-Zip or VeraCrypt instead. On a work or school PC, the IT department may have switched EFS off.
People Can Still See the File Names in My 7-Zip File
You made a zip instead of a 7z, or Encrypt file names wasn’t ticked. Make it again with Archive format set to 7z and the box ticked.
My Virtual Drive Has Disappeared
That’s normal after a restart or after you eject it. Double-click the VHDX file to bring it back, then unlock it with your password.
I’ve Forgotten My Password
For a BitLocker drive, use the recovery key you saved. If you saved it to your Microsoft account, sign in to your account online and look under your devices.
For 7-Zip and VeraCrypt there’s no way back in. That’s what makes them secure, and it’s why the password needs writing down.
FAQ
Q: Can I password protect a folder in Windows 11 Home without extra software?
A: No. Windows Home has no built-in way to lock a folder with a password. The free programs 7-Zip and VeraCrypt both work on Home.
Q: Is hiding a folder the same as password protecting it?
A: No. A hidden folder isn’t locked. Anyone who ticks Hidden items in File Explorer can see it and open it. A password protected folder can’t be opened without the password.
Q: If I forget my 7-Zip or VeraCrypt password, can Microsoft reset it?
A: No. They have nothing to do with Microsoft and there’s no reset. Keep your password written down somewhere safe, away from the PC.
Q: Does Windows 11 have a password protected folder?
A: Not on the PC itself. The nearest thing is Personal Vault in OneDrive, which needs a code or your fingerprint to open. Free OneDrive accounts can keep up to three files in it.
Q: How do I lock a folder on my laptop?
A: Exactly the same way as on a desktop PC. Every method in this guide works on Windows laptops.
Q: Do I need to buy a folder lock program?
A: No. 7-Zip and VeraCrypt are free and use proper encryption. Be wary of free folder locker apps that only hide your files.
Q: Can BitLocker encrypt a single folder?
A: Not directly, it encrypts whole drives. You can get round it by creating a virtual drive and turning on BitLocker for that.
Q: Can I password protect a USB stick?
A: Yes. BitLocker To Go puts a password on the whole stick. You need Windows Pro to set it up, but any Windows PC can open it with the password.
Summary
Windows can’t put a password on a folder by itself, but you’ve got good options:
- 7-Zip for a quick lock on any version of Windows.
- VeraCrypt for private files you use every day.
- A BitLocker virtual drive if you have Windows Pro and don’t want extra software.
- EFS if you have Windows Pro and just want to keep other user accounts out.
Whichever you choose, write the password down and keep it away from the PC. None of them has a reset button.
Related Posts
How to Use VeraCrypt to Encrypt a Folder
Set up your own encrypted vault, step by step.
How to Use 7-Zip to Password Protect Files
Lock files and folders with a password before you send them.
How to Keep Files Private on a PC
From hiding a folder to locking the whole drive, and who each one stops.
Beware of Device Encryption on Windows 11 Home
Device Encryption is silently being enabled on all Windows 10 and Windows 11 Home editions that meet the hardware requirements and you’re signed in with a Microsoft account.
It’s very important that you check whether or not device encryption is enabled on your computer and if it is, then you MUST either disable it or find your recovery key. I’ll show you how to do both.
You can find this and other related step by step guides in – At Home Computer Security Guides
Written by Jeff Porter. I’ve been fixing Windows PCs since 2010 and I’m CompTIA Network+ certified. More about me