Quick answer
- Windows 11 Pro: right-click folder → Properties → Advanced → Encrypt contents (EFS).
- Any Windows: zip the folder with 7-Zip using AES-256, or use BitLocker To Go on a USB drive.
- Mac: Disk Utility → File → New Image → Image from Folder → choose AES-256 encryption.
Which method do you need?
- Sending files to someone else? Use an encrypted ZIP. Universal, works everywhere.
- Protecting files on your own computer? Use your OS’s built-in encryption (EFS, BitLocker, or macOS Disk Image).
- Protecting an entire drive or USB? Use BitLocker (Windows) or FileVault (Mac full disk).
Password-protect a folder on Windows
Method 1 — encrypted ZIP (works on any Windows)
The simplest cross-version method. See our full guide on creating encrypted ZIPs. Summary: install 7-Zip, right-click the folder → 7-Zip → Add to archive, set a password, choose AES-256 encryption.
Method 2 — EFS (Windows Pro only)
EFS (Encrypting File System) encrypts folders transparently — they appear normal to you but are unreadable to anyone signed in with a different account.
- Right-click the folder → Properties → Advanced
- Check “Encrypt contents to secure data” Click OK, Apply.
- Back up your encryption certificate Windows will prompt you. Save it somewhere safe — if you lose it and re-install Windows, you lose access to the files.
EFS is tied to your user accountIf someone else logs in as you — or if you reset your password — they can read EFS-encrypted files. EFS protects against other accounts, not against someone with your sign-in.
Method 3 — BitLocker To Go (for USB drives)
Encrypts an entire USB drive with a password. Works on Windows Pro and Enterprise.
- Insert the USB
- Right-click the drive in File Explorer → Turn on BitLocker
- Choose “Use a password” and set a strong one
- Save or print the recovery key Don’t lose it.
Password-protect a folder on Mac
macOS doesn’t have a built-in “password-protect this folder” option. The cleanest replacement is a password-protected disk image (a .dmg that requires a password to mount).
- Open Disk Utility Applications → Utilities → Disk Utility.
- File → New Image → Image from Folder…
- Select your folder
- Encryption: 128-bit AES (or 256-bit for maximum security, slightly slower)
- Enter a strong password twice Uncheck “Remember in my keychain” if you want the password required every time.
- Image format: read/write (so you can add or change files)
- Save You now have a .dmg. Double-click to mount, enter password, use like a normal folder. Eject when done.
Third-party options
- VeraCrypt (free, open-source, all OSes) — creates encrypted containers similar to BitLocker. The gold standard for paranoid security.
- Cryptomator (free, open-source) — encrypts individual files on cloud storage (Dropbox, iCloud, etc.) so the cloud never sees plaintext.
- Folder Lock (Windows, paid) — drag-and-drop folder encryption with a nicer UI than EFS.