Quick wins for a faster PC:
Scan for outdated or missing drivers - takes under a minuteDriver Scan →Clear out junk files and repair common Windows errorsFree Scan →Some links on this page are affiliate links: if you buy through them we may earn a commission, at no extra cost to you.
The best free file-encryption software for Windows depends on what you need to protect. Use 7-Zip for a password-protected archive you can hand off, VeraCrypt for a reusable encrypted container or USB drive, Cryptomator for files that must remain individually synchronized in a cloud folder, and Windows EFS when your edition includes Microsoft’s built-in file encryption. The practical differences are where encryption happens, how files are shared, and whether Windows can open them without extra software.
Which free file-encryption tool should you use on Windows?
Match the software to the protection boundary rather than looking for one universal winner. An archive is ideal for a one-time transfer, a mounted volume is better for a working folder or removable disk, and a file-based vault is designed for cloud synchronization. EFS is the most integrated option, but it is unavailable in Windows Home.
As an Amazon Associate I earn from qualifying purchases.
The Tool Desk
Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →| Tool | Encryption scope | Sharing and portability | Cloud synchronization | Windows support and current version information | Operational complexity |
|---|---|---|---|---|---|
| 7-Zip | Individual files combined into a 7z or ZIP archive protected with AES-256 | Portable archive; the recipient needs an archive extractor and the password | Best for a finished archive, not continuous per-file editing | Windows 10 and Windows 11; project page lists version 26.05 dated October 21, 2026 | Low |
| VeraCrypt | Virtual encrypted disk, partition, whole device, USB media, or supported Windows system drive | Reusable mounted volume; the other computer needs VeraCrypt to mount it | Designed around a mounted volume rather than individually synchronized files | Current compatibility lists Windows 11 x64/ARM64 and Windows 10 version 1809 or later; home page reports version 1.26.30 released October 24, 2026 | Moderate to high |
| Cryptomator | Files and filenames inside a vault, using AES-256 | Vault can be copied between systems that support Cryptomator | Designed for Dropbox, Google Drive, OneDrive and other folder-based cloud locations; files synchronize individually | Windows download page lists version 1.19.3 and Windows 10 version 1803 minimum | Moderate |
| Windows EFS | Selected files and folders through Windows file properties | Integrated into Windows, but access and recovery depend on the Windows account and edition | Local-file feature rather than a cross-platform cloud-vault workflow | Microsoft documents it for Windows 10 and 11; file encryption is not available in Windows Home | Low when available |
How do I encrypt files with 7-Zip?
7-Zip is the simplest choice when you need to package a defined set of files, protect the package with a password, and send or store that package. The 7-Zip project describes the software as free and open source, with Windows shell integration and support for Windows 10 and 11.
Create an encrypted archive
- Select the files or folder in File Explorer.
- Open the context menu and choose 7-Zip, then Add to archive….
- Choose the 7z format when you want a 7z archive, or select ZIP when compatibility with a recipient’s existing tools is more important.
- In the encryption section, enter the archive password and select AES-256 encryption.
- Confirm the archive name and destination, then create the archive.
- Open the resulting archive once to verify that it asks for the password before exposing the contents.
For a hand-off, send the archive through one channel and communicate its password through a different channel, such as a phone call or a separate messaging service. Putting both the file and password in the same email account defeats much of the benefit.
Popular on Amazon
- Valued Carpenter Pencil Set: You will get 2 pcs solid carpenter pencils with 26 piece 2.8 mm refills, 1 replaceable sharpener, 1 plastic storage box.The complete carpenter pencils combination allows you to finish your work faster and more easily
- Deep Hole Marker Pencil: The deep-hole construction pencils adopts 45mm elongated tip design, which is more convenient to mark in the small hole or in other tight areas that other carpenter markers cannot reach
- Carpenter Pencils with Sharpener: The sharpener is screwed into the top of the work pencil, which won't get lost either. Built-in pencil sharpener that keep the lead with pointed and smooth to Improves line of sight in fine work
- Stronger Solid Lead: This work pencil is matched with a 2.8 mm thick lead , which is much thicker and stronger during the drawing process of construction work, it will not break or damage easily
- Marks on Various Surfaces: 3 colors solid construction pencil can marks on various surfaces,such as metal, plastic, wood, paper etc. Ideals for woodworkers, contractors, craftsmen, builders, merchants and masons
What 7-Zip protects—and what it does not
The archive protects the copy inside it. Your original files remain unencrypted in their original folder until you move or securely delete them after checking the archive. An archive is also a snapshot: if you edit the original later, you must create a new archive to include the changes.
Recipients need software that can read the chosen archive format and must know the password. Test the archive on a non-production copy before deleting originals, especially when it contains game saves, configuration files, or irreplaceable media.
How do I encrypt a USB drive or reusable workspace with VeraCrypt?
VeraCrypt is the relevant free option when you want an encrypted volume that you can mount, use like a drive, and dismount when finished. Its project describes it as free open-source disk-encryption software. It can create virtual encrypted disks, encrypt partitions and whole storage devices such as USB flash drives, and supports transparent operation for Windows system-drive encryption.
Create a file container for a working folder
- Install a current VeraCrypt release compatible with your Windows build. The current compatibility documentation lists Windows 11 x64 and ARM64, plus Windows 10 version 1809 or later.
- Open VeraCrypt and choose the option to create an encrypted volume.
- Select a file-container volume if you want one encrypted file that can live beside other data, then choose its location and size.
- Set a strong volume password and complete the volume-creation wizard.
- In the main VeraCrypt window, select the container file and an unused drive letter, then choose Mount and enter the password.
- Copy files into the mounted drive. When finished, close applications using those files and choose Dismount.
While mounted, the container behaves like a drive for normal file operations. When dismounted, its contents are not presented as ordinary files. Keep the container password and any recovery information in a safe place; losing the credentials can make the data inaccessible.
Use a USB flash drive as an encrypted volume
Back up the USB drive first because creating an encrypted device volume can erase existing contents. In the volume-creation wizard, select the device or partition option, identify the correct removable drive by its size and letter, and follow the prompts to format and encrypt it. Afterward, connect the drive, open VeraCrypt, select the device, mount it, work from the assigned drive letter, and dismount it before unplugging.
Encryption protects data at rest, not files after you have mounted the volume and opened them. Eject the USB drive only after dismounting, and avoid unplugging it while files are being written. A VeraCrypt-encrypted USB drive is portable, but the computer used to open it must have a compatible VeraCrypt installation and an available administrator policy that permits mounting.
When is whole-system encryption appropriate?
VeraCrypt can encrypt a Windows system drive with transparent real-time operation. That is a substantially larger change than protecting a folder: plan a complete backup, confirm the Windows version is supported, and ensure you understand the boot and recovery process before proceeding. For most readers who only need to protect documents, saves, or project files, a container or encrypted USB volume is easier to test and recover.
Also popular on Amazon
- Ergonomically Designed: Work in tight areas with a compact design that gets into tough spots
- Both tools are designed to fit into difficult to reach spaces
- Complete a wide range of applications with a high-performance motor that delivers up to 300 UWO, and an impact driver delivering up to 1,400 in-lbs of torque
- Both the DEWALT impact driver and drill driver feature integrated LED work lights with a convenient 20-second delay, ensuring enhanced visibility in dimly lit or challenging work areas
- One-Handed Loading - Keep one hand free with a 1/4 in. hex chuck that accepts 1 in. bit tips
How does Cryptomator protect files in cloud folders?
Cryptomator is designed for a folder-based vault whose files may live locally or in a service such as Dropbox, Google Drive, or OneDrive. It encrypts each file, protects filenames, and uses AES-256. Because files are handled individually inside the vault, a synchronization service can upload changed files rather than treating the entire vault as one opaque container.
Create and use a vault
- Install the Windows release. The download page lists version 1.19.3 and a Windows 10 version 1803 minimum.
- Open Cryptomator and choose to create a new vault.
- Choose a folder on a local disk or inside the folder synchronized by your cloud provider.
- Set the vault password and complete creation.
- Unlock the vault in Cryptomator. Windows presents the unlocked vault through a virtual location or drive supplied by the application.
- Work with the files there, allowing the cloud client to synchronize the encrypted vault files in the background.
- Lock the vault when you finish, particularly before shutting down or handing the computer to someone else.
The cloud service receives encrypted file contents and encrypted names rather than readable documents. The service can still see operational information such as that files exist and that encrypted data changes over time; Cryptomator is not a way to hide the existence of synchronization traffic.
Cloud-vault precautions
- Let synchronization finish before locking the vault or shutting down.
- Do not edit the same vault simultaneously on two devices unless you understand how your synchronization client handles conflicts.
- Keep an independent backup of the vault and its password. A synchronized copy is not the same as a versioned backup.
- Install Cryptomator on every device that must unlock the vault; ordinary cloud-drive access will show encrypted files instead of readable documents.
Can Windows encrypt files without installing another program?
Windows EFS can encrypt selected files or folders from File Explorer, but Microsoft explicitly says file encryption is not available in the Home edition. On an edition that includes EFS, it is convenient for local files because the workflow is built into the operating system.
Recommended Free Tools
Turn on EFS for a file or folder
- In File Explorer, right-click the file or folder and choose Properties.
- On the General tab, select Advanced.
- Enable Encrypt contents to secure data, then select OK.
- Apply the change to the folder, its contents, or both when Windows asks.
If the encryption checkbox is missing or unavailable, your Windows edition or policy does not provide EFS. Windows Home users need a third-party tool such as 7-Zip, VeraCrypt, or Cryptomator for the corresponding use cases.
EFS is best treated as an account-integrated local feature, not as a portable exchange format. Before relying on it for important data, establish how your organization or household will preserve the encryption credentials and recover files if the Windows profile, installation, or device fails.
What is the difference between archive, volume, vault, and EFS encryption?
The four approaches answer different operational questions. Choose based on how often files change and where they must be opened.
One-time transfer: choose an archive
Use 7-Zip when you have a finished batch of files to email, upload, or hand to another person. The archive is easy to copy and does not require keeping a mounted encrypted drive open, but every change requires rebuilding it.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Also popular on Amazon
- 【Great Compatibility】This Katerk 1/4 inch hex shank bit holder is specifically designed for 1/4 inch hex shank drill bits. It's compatible with most 1/4 fast hex handles, hex sockets, various electric screwdrivers, and handheld screwdrivers. The bit holder makes it a valuable addition for any handyman.
- 【Secure and Safe】Built with a secure backup nut design, each drill bit holder securely locks onto your bits, ensuring they stay firmly in place. Additionally, our bit holder incorporates a high-quality steel ball rolling design that holds up to several kilograms of weight, ensuring your various drill bits don't fall off.
- 【Easy One-Handed Operation】The bit holder for impact driver allows you to change bits single-handedly, simplifying your workflow. Its multi-color design further allows for quick identification of the drill bit you need.
- 【Compact and Convenient】Thanks to its compact size, this 1/4 inch bit holder is easy to carry around. The bit holder allows for easy attachment to various tools, making this a convenient addition to your construction accessories. The Katerk bit holder is cast from high-quality alloy material, promising a long product lifespan. Despite its rugged strength, the bit holder remains lightweight, making it portable.
- 【Cool Christmas Gift For Men Stocking Stuffers】 This screwdriver bit holder, driver bit holder, impact bit holder, can be given as a gift to your loved one, especially for anyone involved in construction or electrical work. It's a must-have for stocking stuffers for men and women, tools gifts for dad, tech gadgets for men, gifts for dad, gifts for him, gifts for husband, gifts for boyfriend, cool gadgets for men, and cool gifts for dad.
Persistent local workspace or removable media: choose a volume
Use VeraCrypt when files should remain available through a drive letter during a work session and hidden when the volume is dismounted. This is the strongest match for an encrypted USB flash drive or a large reusable workspace, with more setup and password-management responsibility.
Cloud folder with granular synchronization: choose a vault
Use Cryptomator when files must remain in a cloud-synchronized folder while their contents and names stay encrypted. Its per-file design is more suitable for ongoing edits across devices than a single large container file.
Local Windows-only convenience: choose EFS
Use EFS when your edition supports it and the files are intended to stay within Windows. It minimizes additional software, but it is not available in Windows Home and is less convenient for sharing with other operating systems or people.
How should you choose for common Windows scenarios?
| Situation | Most suitable choice | Reason |
|---|---|---|
| Send tax documents or a small set of game-mod files once | 7-Zip | A single password-protected archive is quick to create and transfer. |
| Carry a large private library on removable media | VeraCrypt | It can encrypt a USB device and expose it as a mounted drive only when unlocked. |
| Keep a private folder in a cloud-sync directory | Cryptomator | It encrypts file contents and names while preserving individual-file synchronization. |
| Protect a local folder on Windows Pro or another supported edition | EFS | The Properties workflow is integrated into Windows and requires no separate archive or vault. |
| Use Windows Home | 7-Zip, VeraCrypt, or Cryptomator | Microsoft states that EFS is unavailable in the Home edition. |
What passwords, backups, and recovery practices prevent data loss?
- Use a unique, long password for each archive, volume, or vault. A password that protects several locations creates a single point of failure.
- Store passwords in a reputable password manager or another protected offline record. Do not put the password in the same message as the encrypted archive.
- Maintain at least one backup that is independent of the encrypted working copy. Test that the backup can actually be opened.
- Keep the original unencrypted files until you have verified the encrypted copy, then remove unneeded plaintext copies from shared folders and recycle bins.
- Lock or dismount volumes when you leave the computer. Encryption cannot protect data that is currently unlocked and readable by an already-authorized process.
- Record which application and Windows version created each protected set. This makes future recovery easier when a machine is replaced.
What problems occur most often, and how do you fix them?
The archive opens but files are not updated
You are probably viewing an older 7-Zip snapshot. Close the archive, recreate it from the current source files, and verify the new archive before deleting the originals.
The recipient cannot open a 7-Zip archive
Confirm that the recipient has an extractor supporting the selected 7z or ZIP encryption and provide the password through a separate channel. If the password is correct but the archive is damaged, resend the archive from your verified local copy.
VeraCrypt will not mount a container or USB drive
Check that you selected the correct container or device, that the password is exact, and that the installed VeraCrypt release supports the Windows build. Do not initialize or format a device that contains the only copy of important data; restore from backup or investigate the device separately.
Cloud files show conflicts after using Cryptomator
Pause editing on other devices, allow one device to finish synchronization, and resolve duplicate or conflicted encrypted files using your cloud client’s version history. Keep the vault locked while a large synchronization operation is still in progress.
Also popular on Amazon
- Long Nib and Deep Hole Marker: Our mechanical carpenter pencil with 45mm nib is designed for easy marking of deep holes or narrow areas. These construction pencils are the great choice for woodworking tools, construction tools, carpenter tools, contractor tools, wood carpentry tools and architect tools
- Extra Refills in 2 Colors for Versatile Marking: The construction mechanical pencil comes with 12 extra 2.8mm refills, including 6 red and 6 black refills. The black refill is suitable for light surfaces, while the red wax is perfect for dark surfaces. Our carpenter mechanical pencil makes sure that you'll have an ample supply for extended use
- Built-in Sharpener: Our construction pencil comes with a built-in sharpener to ensure the mechanical pencil tip is always sharp and ready for use. Never buy an extra pencil sharpener again. A great tool for any woodworker pencil, contractor pencils. The refill can easily be extended or retracted with a simple click of the pencils mechanical, allowing you to work more efficiently and accurately
- Portable Clip Design: Our deep hole construction pencil features a portable clip design, easy to carry and attach to your pocket or tool box, so that you can keep the carpenter pencils mechanical close at hand, making it a convenient tool to have on the go. Great gifts choice for carpenters
- Stronger Pencil Lead: The black refills are made of lead, sturdy and smooth. The red refills are made of wax, clear and light. These marking pencils are much thicker and stronger than normal pencils during the marking process of construction work, suitable for various surfaces, such as glasses, metal, boards, floors, walls, furniture, etc. The written marks can be easily wiped with a wet paper towel when needed
The EFS checkbox is missing
Verify the Windows edition with Settings or System Information. Microsoft’s documented limitation is decisive: Windows Home does not provide EFS file encryption, so use an archive, volume, or vault instead.
How current are the listed Windows versions?
Software support changes faster than the encryption concepts. The 7-Zip project page lists version 26.05 dated October 21, 2026; VeraCrypt’s home page reports version 1.26.30 released October 24, 2026; and Cryptomator’s Windows download page lists version 1.19.3. VeraCrypt’s compatibility documentation specifies Windows 11 x64/ARM64 and Windows 10 version 1809 or later, while Cryptomator lists Windows 10 version 1803 as its minimum. Check the project’s current download and compatibility information immediately before installation, especially on an older Windows build or ARM device.
Frequently Asked Questions
What happens if I forget the encryption password?
These tools are designed so the provider cannot simply reset a lost archive, container, or vault password. Recovery is possible only if you retained a working backup, recovery credential, or an already-unlocked copy; otherwise the encrypted data may be unrecoverable.
Can I open a protected file while the computer is offline?
Yes, after the required software and vault or volume are already available locally. 7-Zip archives, VeraCrypt containers, Cryptomator vaults, and EFS-protected files do not require an internet connection for ordinary local access, although cloud synchronization obviously cannot update until connectivity returns.
Does encrypting a folder also encrypt its filename in every tool?
No. Cryptomator is specifically documented to protect filenames inside its vault. Do not assume that a visible folder name, archive name, or surrounding directory name is hidden merely because the file contents are encrypted.
Should I encrypt an entire game-installation folder?
Usually protect only saves, personal documents, credentials, or other sensitive assets. Encrypting a large installation adds management overhead and can interfere with launchers or synchronization; test a small representative folder before moving a complete library.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
