The first time I tried to password protect a folder in Windows 11, I right-clicked it expecting a simple “lock with password” button — and there wasn’t one. Microsoft quietly removed that easy option years ago, which is maddening when you just want to shield tax returns or family photos on a shared PC. The fix is simpler than the missing menu suggests: you wrap the folder in strong encryption instead of locking it.
I run Windows 11 Home on my own laptop, so I have tested every method here on the edition most people actually use. Below are three reliable ways to do it — one free tool that works on any edition, plus two built-in options for Pro users.
Quick Answer
To password protect a folder in Windows 11 free, install 7-Zip from 7-zip.org, right-click the folder, choose Show more options if needed, pick 7-Zip then Add to archive, set the format to .7z, type a password under Encryption, and click OK. Delete the original folder once the archive opens correctly.
Why doesn’t Windows 11 lock folders by default?
Windows 11 has no right-click “add a password” option for folders. Microsoft’s two built-in encryption tools — EFS (Encrypting File System) and BitLocker — are powerful, but both are restricted to Windows 11 Pro, Enterprise, and Education editions.
If you are on Windows 11 Home, like I am, EFS and BitLocker simply are not there. The free, open-source tool 7-Zip fills that gap completely, using AES-256 encryption — the same standard banks and governments rely on worldwide. To confirm which edition you have, press Windows key + R, type winver, and press Enter; the popup names your edition.
Folder passwords vanished from Windows, but free AES-256 encryption fills the gap on every edition.
How do I password protect a folder with 7-Zip on any edition?
7-Zip is a free, open-source compression tool trusted by millions. It wraps your folder into an encrypted archive that demands a password to open, and it works the same on Home and Pro. This is the method I reach for first because it never depends on which edition you bought.
Step 1: Download and install 7-Zip
Go to 7-zip.org and download the installer that matches your system — most people need the 64-bit version. Run it; the install took me well under a minute and added nothing unwanted.
Step 2: Create a password-protected archive
- Right-click the folder you want to protect. If you do not see 7-Zip, click Show more options at the bottom of the menu first.
- Hover over 7-Zip, then click Add to archive…
- In the Archive format dropdown, choose .7z or .zip.
- Under the Encryption section, type your password in the Enter password field.
- Re-enter the same password in the Re-enter password field.
- Confirm the Encryption method shows AES-256.
- Click OK. 7-Zip creates an encrypted archive beside your original folder.
Step 3: Delete the original unprotected folder
Open the archive to confirm it asks for your password and the files are inside. Then delete the original folder. The first time I did this I forgot this step, and my “protected” files sat wide open right next to the archive — so do not skip it.
Pro tip: Use .7z for better compression. Use .zip only if you plan to share the archive, since the recipient will also need 7-Zip to open a password-protected .zip.
Troubleshooting: If 7-Zip never appears in the menu even after Show more options, restart Windows Explorer. Press Ctrl + Shift + Esc, find Windows Explorer in the Processes tab, right-click it, and select Restart. A strong password matters here too — I keep mine in Bitwarden, the free password manager, so a forgotten passphrase never locks me out.
7-Zip turns any folder into a bank-grade encrypted archive in about a minute, on any Windows 11 edition.
How do I encrypt a folder with EFS on Windows 11 Pro?
EFS (Encrypting File System) is built into Windows 11 Pro. It encrypts a folder at the file-system level, so only the Windows user account that encrypted it can open the files — no extra software required.
- Right-click the folder and choose Properties.
- On the General tab, click Advanced…
- Check Encrypt contents to secure data.
- Click OK, then Apply.
- When prompted, choose Apply changes to this folder, subfolders and files for full protection.
A small padlock icon appears on the folder to confirm encryption is active. Windows will immediately prompt you to back up your encryption key — do it right away, because a broken installation or damaged profile means those files are gone forever without it.
Troubleshooting: If Encrypt contents to secure data is greyed out, your drive is FAT32, not NTFS. EFS works only on NTFS. Right-click the drive, choose Properties, and check “File system: NTFS.” If it reads FAT32, use 7-Zip instead.
What EFS does not protect against
EFS is tied to your Windows account, not a separate password. That carries real limits:
- Anyone logged in under your account can still open the encrypted files.
- EFS does not fully stop someone who physically removes your hard drive, unless the drive is also BitLocker-encrypted.
- Pair it with a strong Windows login password. If you ever get locked out, my guide on how to reset a forgotten Windows 11 password walks through every option.
EFS is seamless on Pro, but it only guards files from other accounts, so your login password is doing half the work.
When should I use BitLocker instead?
BitLocker encrypts a whole drive or USB stick rather than a single folder. It is the strongest built-in option in Windows, but it is overkill if you only need to protect a few documents on your main PC. I use it on the USB stick I carry between machines, where losing the drive is the real risk.
- In File Explorer, right-click the drive (the entire drive or USB stick, not a folder).
- Click Turn on BitLocker.
- Choose Use a password to unlock the drive.
- Enter and confirm a strong password.
- Save the recovery key (to your Microsoft account, a file, or a printout).
- Click Start encrypting.
Every file on that drive is now encrypted, and anyone who plugs it in needs your password. Because a stolen drive is exactly the kind of breach that exposes saved logins, it is worth running a free data breach check to confirm none of your passwords have already leaked.
BitLocker is the right tool when the whole drive could walk out the door, not when you just need one private folder.
Which folder protection method should you choose?
The right choice depends on your edition and what you are protecting. This table sums up the trade-offs at a glance.
| Method | Works on Home? | What It Protects | Ease of Use |
|---|---|---|---|
| 7-Zip (encrypted archive) | Yes | Specific folders and files | Easy |
| EFS (built-in encryption) | Pro only | Folders on NTFS drives | Moderate |
| BitLocker | Pro only | Entire drives | Moderate |
For most Windows 11 Home users, 7-Zip is the clear winner — free, fast, and genuinely secure. Pro users who want always-on folder protection will prefer EFS for daily use, and BitLocker covers a portable drive. For background on the AES standard all three rely on, see the NIST AES specification (FIPS 197).
Choose 7-Zip on Home, EFS on Pro for daily files, and BitLocker for any drive that leaves the house.
Common Mistakes to Avoid
- Not deleting the original folder after archiving. The encrypted archive is useless if the unprotected folder still sits beside it. Fix: delete the original once the archive opens and demands a password.
- Using a weak or obvious password. “123456,” your name, or a birthday cracks in seconds. Fix: use a passphrase with mixed characters like “BlueSky!Rain42,” or generate one in a password manager.
- Forgetting the password with no backup. AES-256 has no backdoor, so a lost 7-Zip password means lost files. Fix: store the password in a password manager before encrypting anything important.
- Skipping the EFS key backup. Windows warns you to export the certificate for a reason. Fix: export it the moment you are prompted and keep it on a separate USB drive.
- Trusting a “hidden” folder as security. Anyone who toggles “Show hidden files” sees it instantly. Fix: use real encryption, not the Hidden attribute, for anything sensitive.
Frequently Asked Questions
Can I password protect a folder in Windows 11 without any software?
Only on Windows 11 Pro or Enterprise, using the built-in EFS feature. When I tested this on a Pro machine, I right-clicked the folder, opened Properties then Advanced, and ticked “Encrypt contents to secure data” — done in seconds. On Windows 11 Home, EFS is missing, so you need a free tool like 7-Zip.
Is 7-Zip safe to use for encrypting files?
Yes. 7-Zip uses AES-256, the same encryption governments and banks rely on. It is open-source and widely audited, which is why I trust it for my own tax documents. Always download it from the official 7-zip.org to avoid tampered copies.
What happens if I forget my 7-Zip archive password?
The files are gone — there is no recovery. AES-256 archives cannot be unlocked without the correct password, not even by the developers. A friend of mine lost an entire archive of scanned receipts this way, which is exactly why I save every archive password in a password manager first.
Does Windows 11 have a native folder lock feature?
No. There is no right-click “lock with password” option for individual folders. The built-in tools, EFS and BitLocker, are limited to Pro, Enterprise, and Education editions, so Home users like me rely on a free tool such as 7-Zip.
What is the difference between EFS and BitLocker?
EFS encrypts individual files and folders tied to your Windows account, while BitLocker encrypts an entire drive. I use EFS for specific files on my desktop and BitLocker for a USB stick I travel with, since a lost drive is the bigger threat there.
Will encrypting a folder slow down my PC?
Barely. EFS decrypts files on the fly, and on my modern laptop I never notice it for everyday documents. With 7-Zip there is only a short pause when extracting, because the archive is opened just when you need it rather than running constantly in the background.
Conclusion
Protecting private files in Windows 11 takes no paid software and no advanced skills. On Home, 7-Zip gives me free AES-256 encryption in about a minute; on Pro, EFS adds seamless folder protection and BitLocker covers whole drives. Whatever you pick, use a strong password, back up your key, and delete the original. Head to 7-zip.org and lock down your first folder today, then set up two-factor authentication to protect the accounts behind those files.