How to Encrypt Your Files and Folders on Windows and Mac

By Alex Rivera Jul 11, 2026 8 min read How-To Guides

Encrypting your files prevents unauthorized access if your device is lost, stolen, or compromised. Here is how to encrypt files and drives on Windows and Mac.

Windows: BitLocker Drive Encryption

BitLocker encrypts entire drives on Windows Pro and Enterprise editions. Go to Control Panel > BitLocker Drive Encryption > Turn on BitLocker. It uses AES-128 or AES-256 encryption. BitLocker requires a TPM chip for secure key storage. Save your recovery key to your Microsoft account or a USB drive.

Windows: Encrypting File System (EFS)

EFS encrypts individual files and folders on Windows. Right-click a file or folder > Properties > Advanced > Encrypt contents to secure data. EFS is tied to your Windows user account. Only encrypted files appear green in File Explorer. EFS is not available on Windows Home edition.

Mac: FileVault Full-Disk Encryption

FileVault encrypts the entire startup disk on Mac. Go to System Settings > Privacy & Security > FileVault > Turn On. It uses XTS-AES-128 encryption. You can unlock with your iCloud account or a recovery key. FileVault must complete encryption before you remove the recovery key option.

Cross-Platform: VeraCrypt

VeraCrypt is a free open-source encryption tool for Windows, Mac, and Linux. It creates encrypted containers (virtual drives) or encrypts entire partitions. It supports AES, Serpent, and Twofish algorithms, including cascading combinations. VeraCrypt is more secure than BitLocker or FileVault because of its additional security measures.

Encryption Best Practices

Always back up your encryption keys and recovery codes. Use strong passwords (at least 12 characters). Enable full-disk encryption on all devices. Do not store encryption keys on the same device as encrypted data. Test your recovery process after encryption. Keep your OS and encryption software updated.