Encryption File System

5/10/2007

The NTFS file system supports encrypting files and folders to help secure data. Users who want to protect their data can encrypt local files and folders.

Encryption File System (EFS) only encrypts data when it is stored on disk. If the data is transferred over a network, use an encrypted networking protocol, such as IPSec.

Encrypt files or folders in one of the following ways:

  • From Explorer:
    1. Right-click the file or folder and select properties.
    2. In the General tab, choose Advanced.
    3. Select Encrypt contents to secure data to encrypt the file or folder.

- or -

  • From a command line:
    Use the cipher command to encrypt and decrypt a file or folder. For example,

    cipher /e /s:"D:\Encrypted Files" 
    

For more information, see this Microsoft Web site.

See Also

Concepts

NTFS Security Benefits

Other Resources

Best Practices for Security
Network Security Considerations
Local Security Considerations