Windows 11 has no built-in option to put a password on a single folder. To password protect a folder in Windows 11, the practical choices are a free archiver such as 7-Zip with AES-256 encryption, a BitLocker-encrypted virtual drive or USB stick (Pro), or Office's own document passwords. Encrypting File System (EFS) and Device Encryption protect data too, but they work through your Windows sign-in rather than a separate password.
| Method | Separate password? | Windows 11 Home | Windows 11 Pro | Best for |
|---|---|---|---|---|
| 7-Zip AES-256 archive | Yes | Yes | Yes | Sending or storing specific files |
| Virtual drive (VHDX) + BitLocker | Yes | No (can't create BitLocker volumes) | Yes | A lockable "vault" you use daily |
| BitLocker To Go (USB drive) | Yes | No (can't create BitLocker volumes) | Yes | Portable drives |
| Office "Encrypt with Password" | Yes | Yes | Yes | Individual Word, Excel, PowerPoint files |
| Encrypting File System (EFS) | No, tied to your account | No | Yes | Shared PCs with separate accounts |
| Device Encryption / BitLocker (system drive) | No, tied to sign-in | Device Encryption (supported hardware) | Yes, full BitLocker | Protecting a lost or stolen device |
Can you password protect a folder in Windows 11?
Not directly. Windows 11 has no "set password" option on folders, and Microsoft has never added one. Instead, you protect a folder by encrypting it, either inside a password-protected archive, a password-locked BitLocker virtual drive, or with EFS, which ties access to your Windows account. Which suits you depends on your edition and needs.
It helps to separate two ideas. Access control decides who can open a file while Windows is running. Encryption scrambles the data so it is unreadable without the right key, even if someone removes the drive.
What we commonly see: people find "folder lock" tricks online that simply hide a folder with a batch file. These offer no real protection, because anyone who shows hidden files or opens the drive on another PC can read everything. Use genuine encryption instead.
How do I password protect a folder in Windows 11 Home?
On Windows 11 Home, the most dependable method is to compress the folder into an encrypted archive with 7-Zip. Choose the 7z format, set a strong password, select AES-256 encryption and tick Encrypt file names. The archive cannot be opened, or even browsed, without the password, and it works on every edition of Windows.
- Download 7-Zip from its official website and install it.
- Right-click the folder and select Show more options > 7-Zip > Add to archive.
- Set Archive format to 7z.
- Under Encryption, type a strong password twice and make sure Encryption method shows AES-256.
- Tick Encrypt file names so nobody can see what the archive contains.
- Select OK, open the new archive to test the password, then securely delete the original unencrypted folder.
Cause and effect: if you keep the original folder after creating the archive, the unprotected copy is still sitting on your drive. Only delete it once you have confirmed the archive opens correctly with your password.
AES-256 is the Advanced Encryption Standard with a 256-bit key, the same algorithm family BitLocker uses. Its strength depends entirely on your password, so use a long passphrase rather than a short word.
How do I use EFS to encrypt a folder in Windows 11 Pro?
On Windows 11 Pro, right-click the folder, select Properties > Advanced, tick Encrypt contents to secure data and apply the change to the folder, subfolders and files. EFS then encrypts the contents with a certificate linked to your Windows account, so only you can open them, without needing a separate password.
- Right-click the folder and select Properties.
- On the General tab, select Advanced.
- Tick Encrypt contents to secure data and select OK.
- Select Apply, then choose Apply changes to this folder, subfolders and files.
- When Windows prompts you, back up your file encryption certificate and key to a USB drive and store it safely.
Encrypting File System (EFS) is a Pro, Enterprise and Education feature. On Windows 11 Home, the Encrypt contents to secure data box is greyed out.
Advanced nuance: EFS protects files from other user accounts and from someone who removes the drive, but anyone who can sign in as you can open them normally. It is not a password prompt. Losing your certificate, for example after a reinstall without a backup, can make the files permanently unreadable.
How do I create a password-protected virtual drive with BitLocker?
On Windows 11 Pro, create a virtual hard disk (VHDX) in Settings, then turn on BitLocker for it with a password. The VHDX file behaves like a separate drive that you unlock with your password when needed and lock again by ejecting it. It is the closest built-in equivalent to a password-protected folder.
- Open Settings > System > Storage > Advanced storage settings > Disks & volumes and select Create VHD.
- Enter a name, choose a location, set the size, select VHDX and Dynamically expanding, then select Create.
- Initialise the disk as GPT, then give it a label, a drive letter and the NTFS file system and format it.
- In File Explorer, right-click the new drive and select Show more options > Turn on BitLocker.
- Tick Use a password to unlock the drive, set a strong password and save the recovery key somewhere safe.
- Move your private files into the drive. To lock it, right-click it in File Explorer and select Eject.
To use it again, double-click the VHDX file to mount it, then enter your BitLocker password. The same Turn on BitLocker option also works for USB sticks, which Microsoft calls BitLocker To Go.
According to Microsoft's BitLocker overview, BitLocker is available on Pro, Enterprise and Education editions. If you are on Home and want this method, an upgrade key from Windows 11 Home to Pro unlocks BitLocker without reinstalling, as our Home to Pro upgrade guide explains.
What is the difference between BitLocker and Device Encryption?
Device Encryption is a simplified form of BitLocker that encrypts your whole system drive automatically on supported hardware, including many Windows 11 Home PCs. Full BitLocker, available on Pro, adds management options, password-protected removable and virtual drives, and encryption of extra drives. Neither one locks an individual folder with its own password.
Both protect data if your PC is lost or stolen, because the drive cannot be read without your Windows sign-in or recovery key. Once you are signed in, though, your files are open as normal.
To check Device Encryption, open Settings > Privacy & security > Device encryption. Microsoft's Device Encryption guide explains the hardware requirements and how the recovery key is linked to your Microsoft account.
What we commonly see: users discover Device Encryption was on only when a BIOS update or hardware change triggers a BitLocker recovery screen. Find your recovery key in your Microsoft account now, before you need it.
How do I password protect Word, Excel and PowerPoint files?
Microsoft Office can encrypt individual documents with a password. In Word, Excel or PowerPoint on Windows, select File > Info > Protect Document (or Protect Workbook or Protect Presentation) and choose Encrypt with Password. Enter a password twice, then save. The file can then only be opened with that password.
- Open the document and select File > Info.
- Select Protect Document and choose Encrypt with Password.
- Type a password, select OK, re-enter it and select OK again.
- Save the file.
Microsoft's add a password to a document guide warns that Office cannot recover a forgotten password, so store it in a password manager.
This works in current versions of Office such as Office 2024 Professional Plus, and it suits sharing sensitive spreadsheets or contracts by email, because the protection travels with the file.
Which method should you choose?
For most Windows 11 Home users, a 7-Zip AES-256 archive is the simplest way to password protect a folder. On Windows 11 Pro, a BitLocker-encrypted VHDX gives you a convenient lockable vault for everyday use. Use Office passwords for individual documents you share, and keep Device Encryption or BitLocker on to protect the whole drive.
- Occasional private files on Home: 7-Zip archive.
- A folder you open daily on Pro: BitLocker VHDX vault.
- A USB stick with sensitive files: BitLocker To Go on Pro, or a 7-Zip archive on the stick.
- Several people sharing one PC with separate accounts: EFS on Pro, plus a strong sign-in password for each account.
If you are deciding whether Pro's extra security tools are worth it, our Windows 11 Pro vs Home comparison sets out every difference, and a Windows 11 Pro licence includes BitLocker, EFS and Group Policy for new installs.
Frequently asked questions
Why is "Encrypt contents to secure data" greyed out?
The option is greyed out on Windows 11 Home because Encrypting File System is only included in Pro, Enterprise and Education. It can also be unavailable on drives that are not formatted as NTFS, such as FAT32 or exFAT USB sticks. Upgrading to Pro or using 7-Zip are the usual alternatives.
Can I lock a folder without any extra software?
Yes, on Windows 11 Pro, by using a BitLocker-encrypted virtual drive or EFS. On Windows 11 Home, there is no built-in way to give a folder its own password. Hiding a folder or using a batch-file "locker" does not encrypt anything and offers very little real protection.
What happens if I forget the password?
For 7-Zip and Office passwords, the files are effectively lost, because strong encryption has no back door. For BitLocker, your 48-digit recovery key unlocks the drive, so store it safely. For EFS, restoring your backed-up certificate restores access. Keep passwords and keys in a password manager.
Is 7-Zip encryption secure enough?
Yes, when used correctly. 7-Zip's AES-256 encryption in the 7z format, combined with the Encrypt file names option and a long, unique passphrase, offers strong protection. The weak point is usually the password itself, so avoid short words, reused passwords or personal details that others could guess.
Does BitLocker work on Windows 11 Home?
Windows 11 Home cannot turn on full BitLocker or create BitLocker-encrypted drives, though it can unlock drives encrypted on a Pro PC. Many Home devices instead support Device Encryption, which protects the whole system drive automatically. To get full BitLocker, upgrade the PC to Windows 11 Pro.
Related guides
- Windows 11 Pro vs Home: full feature comparison
- Upgrade Windows 11 Home to Pro without reinstalling
- Windows 10 end of support: what to do next
- How to shut down Windows 11: 8 quick ways
Links in this guide
| Link | Type | Why it helps |
|---|---|---|
| Windows 11 Home to Pro upgrade key | Internal | Unlocks BitLocker and EFS on a Home PC |
| Windows 11 Pro licence | Internal | Pro security features for a new install |
| Office 2024 Professional Plus | Internal | Password-encrypt Word, Excel and PowerPoint files |
| Home to Pro upgrade guide | Internal | Step-by-step edition upgrade |
| Windows 11 Pro vs Home | Internal | Compares all edition differences |
| 7-Zip official site | External | Safe download of the free archiver |
| Microsoft Learn: BitLocker overview | External | Edition requirements and how BitLocker works |
| Microsoft: Device Encryption | External | Requirements and recovery key details |
| Microsoft: add password to document | External | Official Office encryption steps |