iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
Windows does not provide a universal password prompt for an ordinary folder. Instead, you can encrypt selected files with EFS where supported, encrypt an entire drive with Device Encryption or BitLocker, or put files in a password-unlocked VeraCrypt container. Choose based on whether you need to protect a device, selected files, or a collection you can unlock and carry separately.
Choose the protection that matches what you need
| Option | What it protects | How access is unlocked | Availability and trade-off |
|---|---|---|---|
| EFS file or folder encryption | Selected files or folders | Associated with the Windows user account and its key material; it does not create a separate folder password. | Not available in Windows Home. The Microsoft instructions do not establish a universal way to make EFS files portable across unrelated Windows accounts. |
| Device Encryption or BitLocker | An operating-system or data drive, not just one folder | Normal drive access, with a recovery key needed if normal unlocking fails. | Device Encryption depends on device support and setup. Manually managed BitLocker Drive Encryption is available on Pro, Enterprise, or Education. |
| VeraCrypt container | A virtual encrypted volume containing files and folders | Enter the password to mount the volume, then dismount it when finished. | Requires compatible software on a computer that needs to open it. The password must be retained; no password recovery is promised. |
Encrypt selected files with EFS
EFS is Microsoft’s built-in option for encrypting selected data on supported Windows editions. It is tied to the Windows account and its encryption key material, rather than a password you can hand to another person to unlock a folder. Check your Windows edition and confirm the setting is present before relying on it: Microsoft says file encryption is not available in Windows Home.
- In File Explorer, right-click the file or folder you want to encrypt and select Properties.
- On the General tab, select Advanced.
- Check Encrypt contents to secure data, then select OK.
- Apply the change in the Properties window. If encrypting a folder, choose whether the change applies to its contents when prompted.
Microsoft’s instructions for Windows 10 and 11 are at How To Encrypt a File or Folder. Because EFS depends on Windows account key material, do not assume an encrypted file will be straightforward to open after moving it to another account or computer. Keep an appropriate backup and check that you can access it before relying on EFS for important data.
Quick wins for a faster PC:
Repair Windows errors before they cause bigger problemsFix Now →Scan for outdated or missing drivers - takes under a minuteDriver Scan →Clear out junk files and repair common Windows errorsFree Scan →Encrypt a whole drive with Device Encryption or BitLocker
Use drive encryption when your concern is someone removing a drive or trying to read it offline—for example, after a laptop is lost or stolen. It protects more than a particular folder, so it is not a way to assign a distinct password to one directory.
#1 Best Overall
- Easily store and access 2TB to content on the go with the Seagate Portable Drive, a USB external hard drive
- Designed to work with Windows or Mac computers, this external hard drive makes backup a snap just drag and drop
- To get set up, connect the portable hard drive to a computer for automatic recognition no software required
- This USB drive provides plug and play simplicity with the included 18 inch USB 3.0 cable
- The available storage capacity may vary.
Device Encryption
Device Encryption can automatically encrypt the operating-system drive and fixed drives on supported devices, including some Windows Home devices. Availability depends on the hardware and setup. Microsoft says it may turn on during setup or sign-in with a Microsoft, work, or school account; a local account does not turn it on automatically. When enabled through an account, the recovery key is associated with that account.
Look in Windows Settings for the Device Encryption control. If it is not shown, the device may not support the feature; Microsoft’s Device Encryption in Windows page explains how to check device prerequisites in System Information.
Rank #2
- Easily store and access 5TB of content on the go with the Seagate portable drive, a USB external hard Drive
- Designed to work with Windows or Mac computers, this external hard drive makes backup a snap just drag and drop
- To get set up, connect the portable hard drive to a computer for automatic recognition software required
- This USB drive provides plug and play simplicity with the included 18 inch USB 3.0 cable
- The available storage capacity may vary.
BitLocker Drive Encryption
BitLocker Drive Encryption offers manual drive encryption on Windows Pro, Enterprise, and Education. Microsoft distinguishes it from Device Encryption, which is designed for simpler automatic use. See Microsoft’s BitLocker overview for the edition distinction and drive-encryption details.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Protect your recovery key
A BitLocker recovery key is a unique 48-digit numerical password that can unlock an encrypted drive if normal unlocking fails. A security event or a hardware, firmware, or software change can trigger a recovery prompt. Without the key, you may be unable to access the drive.
Rank #3
- Easily store and access 1TB to content on the go with the Seagate Portable Drive, a USB external hard drive.Specific uses: Personal
- Designed to work with Windows or Mac computers, this external hard drive makes backup a snap just drag and drop. Reformatting may be required for Mac
- To get set up, connect the portable hard drive to a computer for automatic recognition no software required
- This USB drive provides plug and play simplicity with the included 18 inch USB 3.0 cable
- The available storage capacity may vary.
Microsoft says the key is typically saved to a Microsoft account or a managed work or school account, depending on setup. It can also be backed up to USB storage, a separate file, or a printed copy. Check that a backup exists and that you can access it before depending on drive encryption. Keep a USB backup or printout separate from the computer: someone who steals both may be able to bypass the protection. Follow Microsoft’s BitLocker recovery-key backup instructions.
Use a password-unlocked VeraCrypt container
If you specifically want a password prompt when opening a collection of files, a VeraCrypt container is a practical option. It is a file that functions as a virtual encrypted disk, not an ordinary Windows folder with a built-in password. VeraCrypt says a volume encrypts its file system, including file names, folder names, and file contents.
Rank #4
- Easily store and access 4TB of content on the go with the Seagate Portable Drive, a USB external hard drive.Specific uses: Personal
- Designed to work with Windows or Mac computers, this external hard drive makes backup a snap just drag and drop
- To get set up, connect the portable hard drive to a computer for automatic recognition no software required
- This USB drive provides plug and play simplicity with the included 18 inch USB 3.0 cable
- The available storage capacity may vary.
- Create a file container in VeraCrypt and set its password, following the application’s volume-creation process.
- Mount the container by selecting it in VeraCrypt and entering the password. It appears as a drive you can use in File Explorer.
- Save or move the files you want protected into that mounted volume.
- When finished, close files stored there and dismount the volume in VeraCrypt.
You can store the container file on a computer or on a USB flash drive. A normal USB drive is only storage; it is not encrypted or password-protected just because it is removable. Anyone who needs to open the container will need compatible software and the password. Forgetting the password can make the data inaccessible. VeraCrypt describes containers and USB storage in its FAQ.
For managed Microsoft 365 organizations: Purview labels
In supported Windows 11 and Microsoft 365 organizational environments, an administrator can configure sensitivity labels and protection that users apply through File Explorer. Depending on policy, protection can include custom permissions. This is a managed information-protection workflow, not a general consumer folder lock.
Best Value
- [Upgraded Version] - This external hard drive features a mirrored logo stripe combined with a striped anti-slip design, and the rounded corners of the casing make it easier to grip. The stripes also have a heat dissipation function, ensuring stable and fast data transfer.
- 【Ultra-thin and quiet】 - The motherboard adopts JMicron 578 noise-free solution, giving you a quiet working environment. Lightweight and portable size designed to fit in your pocket for easy portability.
- 【Ultra-Fast Data Transfers】 - Pairing this external hard drive with JMicron 578 solution USB 3.0 and USB 2.0 interfaces enables blazing-fast data transfer. It boasts theoretical read speeds of up to 125MB/s and write speeds of up to 103MB/s.
- 【Plug and Play】 - With no software to install, just plug it in and the drive is ready to use.The hard disk chip is wrapped with an aluminum anti-interference layer to increase heat dissipation and protect data.
- 【What You Get】 - 1 x Portable Hard Drive, 1 x USB 3.0 Cable, 1 x User Manual, Gift-type shell packaging ,Three-year manufacturer's warranty and free technical support services.
Microsoft notes an important limitation: applying a label to a folder applies the operation to files and subfolders selected at that time. Files created in the folder later are not automatically configured. See Label and protect files in File Explorer in Windows.
Which option should you use?
- Protect a lost or stolen computer or drive: Check whether Device Encryption is available; use BitLocker Drive Encryption if your Windows edition supports it and you need manual control. Safeguard and verify the recovery key.
- Encrypt selected files on a supported Windows edition: Consider EFS if its account-linked access model suits you and you have a backup plan.
- Unlock a collection with a password or carry it between computers: Use a VeraCrypt container, and make sure the computers that need it can run compatible software.
- Apply organization-managed access rules: Ask your Microsoft 365 administrator whether Purview labels are configured for your environment.
None of these choices should be treated as a way to hide files from someone using your computer while you are signed in and the files are already open. For a container, dismount it when you are done; for drive encryption, protection is aimed at offline access to the drive.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
Free tools Windows power users keep installed
One-click scans. No signup required.
