共享计算机并不总是最明智的做法,尤其是当您担心家人、朋友或恶意访问您文件的人时。您可以使用单独的用户帐户(use separate user accounts),但如果您的文件未加密,其他人仍有可能获得访问权限。
有几种方法可以在Windows 10中对文件夹进行密码保护。如果您有Windows 10 专业版(Windows 10 Pro)、企业版(Enterprise)或教育(Education)版,您还可以使用内置功能来加密文件或 USB 设备(encrypt files or a USB device)。或者,您可以使用密码压缩文件夹(zip up folders with a password),或者使用第三方软件创建加密文件夹。
使用 EFS 使用内置文件夹加密(Using Built-In Folder Encryption using EFS)
在Windows 10(Windows 10)中对文件夹进行密码保护的最简单方法之一是使用称为加密文件系统(Encrypted File System) (EFS)的内置文件夹加密系统。此方法仅适用于Windows 10 专业版、企业版或教育版(Windows 10 Pro, Enterprise, or Education)用户。
这种类型的加密使用您的Microsoft(Microsoft)或本地帐户凭据锁定文件夹(只要用户帐户有密码)。要访问该文件夹,用户需要知道您用于登录 PC 的相同登录详细信息。如果他们没有它,他们将无法访问该文件夹。
您还可以使用EFS 加密密钥(EFS encryption key)解密您的文件。首次使用EFS(EFS)加密文件夹时,系统会提示您备份此文件。
- 要使用此系统对文件夹进行密码保护,您需要右键单击桌面或Windows 文件资源管理器(Windows File Explorer)中的文件夹,然后按属性(Properties)选项。
- 在“属性”窗口的“(Properties)常规(General)”选项卡中,按“高级(Advanced)”按钮。这仅对附加驱动器上的文件可见。例如,对于网络驱动器(network drive)上的文件夹,您不会看到此选项。
- 在高级属性(Advanced Attributes)窗口中,单击加密内容以保护数据(Encrypt contents to secure data)复选框。按确定(OK)保存。
- 在“属性(Properties)”窗口中按OK(或Apply > OK)以保存您的加密设置。
- 保存后,您可以通过右键单击文件夹并按Properties > Advanced > Details来查看链接到该文件夹的用户帐户和恢复密钥。
- 首次使用此方法加密文件夹时,系统会要求您备份EFS加密密钥和证书。您可以(并且建议)将其保存到外部设备,例如USB闪存驱动器。在弹出窗口中按立即备份执行此操作,或按稍后(Back up now)备份(Back up later)。不建议按从不备份(Never back up),因为您以后可能无法检索文件。
- 在证书导出向导(Certificate Export Wizard)中,您将被引导创建加密证书和解密密码。Windows将自动为您的证书选择适当的格式,因此请按下一步(Next)继续。
- 为了保护您的密钥,您需要创建一个强密码(create a strong password)。确保启用密码复选框,然后在(Password)密码(Password)和确认密码(Confirm Password)框中提供合适的密码。在加密(Encryption)下拉菜单中,选择AES256-SHA256。按下一步(Next)继续。
- 在下一个菜单中确认文件的文件名,然后按Next。建议您将此文件存储在远离您的 PC 的地方,因此请使用可移动媒体来保存您的文件。
- 您可以确认您在最后阶段选择的选项。如果您满意,请按完成(Finish)保存证书文件。
此时,您的文件夹应该是安全的。您应该看不出有什么不同——您可以正常访问、编辑和移动文件夹。但是,对于其他用户,他们将需要您的帐户详细信息或加密密钥才能访问或对文件夹进行任何更改。
使用 7-Zip 加密文件夹(Encrypting Folders Using 7-Zip)
如果您想保护文件夹而不对其进行太多更改,您可能会决定对其进行加密。一种方法是使用开源存档软件7-Zip创建一个加密的、受密码保护的 zip 文件。(7-Zip)
- 为此,您需要在 PC 上下载并安装 7-Zip 。(download and install 7-Zip)安装软件后,您可以右键单击 PC 上的任何文件夹(在桌面或Windows 文件资源管理器(Windows File Explorer)中),然后按7-Zip > Add to archive。
- 在添加到存档(Add to Archive)窗口中,确保从存档(Archive)下拉菜单中选择7z 。在加密(Encryption)部分中,在输入密码(Enter password)和重新输入密码(Reenter password)框中键入安全密码。确保选择AES-256作为加密方法(Encryption method),如果要隐藏文件夹中保存的文件的名称,请单击以启用加密文件名(建议这样做)。(Encrypt file names)完成后按确定(OK)创建存档。
- 您的加密 7z 文件将出现在您未加密的文件夹旁边。您现在可以安全地删除原始文件夹以确保无法再访问它。当您(或其他人)尝试打开加密文件时,需要输入密码才能访问。
其他用于密码保护文件夹的第三方软件(Other Third-Party Software To Password Protect Folders)
虽然 7-Zip 可以创建包含您的文件夹的受密码保护的存档,但它不能对文件夹本身进行密码保护。如果您使用的是Windows 10 家庭(Home)版(这意味着您无法使用EFS和内置文件夹加密),那么您需要使用第三方软件来保护您的文件夹。
许多防病毒软件包(antivirus software packages)提供加密文件存储功能,包括Bitdefender Total Security。作为替代方案,您可以使用像AxCrypt这样的专用文件加密软件,它提供了安全文件夹(Secured Folders)功能。这是一项高级功能,但您可以通过 30 天免费试用来试用该软件。
AxCrypt不断监控这些文件夹,加密添加到其中的任何文件。这确保只有您可以访问文件夹中的文件。您可以使用自己的加密密码解密文件,但您还需要一个AxCrypt帐户才能使用该软件。但是,密码存储在本地。
- 要使用AxCrypt,您需要先安装软件并在首次启动时创建一个新帐户。启动后,单击安全文件夹(Secured Folders)选项卡。
- 默认情况下,AxCrypt将加密您文档文件夹中的MyCrypt文件夹。要添加新文件夹,请右键单击桌面或Windows 文件管理器(Windows File Manager)中的文件夹,然后按Axcrypt > Encrypt对其进行加密。
- 加密后,您将能够进入该文件夹,但其中包含的任何文件都将使用.axx文件扩展名进行加密。尝试打开它将打开AxCrypt客户端,您需要在其中使用您的解密密码首先解密文件并进行任何更改。如果您已经登录,则无需输入密码即可编辑任何文件。
- 如果您想稍后解密文件,请右键单击加密文件夹并按Axcrypt > Decrypt。这将禁用该文件夹的加密并删除任何现有的加密。
在 Windows 10 中保护您的重要文件(Protecting Your Important Files in Windows 10)
借助内置的文件夹加密和多种可用的第三方方法,在Windows 10中密码保护文件夹和保护您最重要的文件从未如此简单。借助适用于EFS和 7-Zip 文件的(EFS)AES 加密(AES encryption),您的文件将(接近)牢不可破,让您更加安心。
如果您想更进一步,没有什么能阻止您加密所有数据(encrypting all of your data),无论是在线还是离线。这对于在线数据来说是一个特别好的主意,特别是如果您发现您正在使用的网站或服务遭受数据泄露,但您也可以使用(suffered a data breach)Windows Bitlocker加密整个硬盘驱动器。
How to Password Protect a Folder in Windows 10
Sharing a computer isn’t always the most advіsable thing to do, especially if you’re worried about your fаmily, friends, or someоne malicious accessing your files. You could use separate user accounts, but if your files aren’t encrypted, it may still be possible for somebody else to gain access.
There are a few ways you can password protect folders in Windows 10. If you have Windows 10 Pro, Enterprise, or Education, you could also use built-in features to encrypt files or a USB device. Alternatively, you could zip up folders with a password, or use third-party software to create encrypted folders instead.
Using Built-In Folder Encryption using EFS
One of the simplest methods to password protect a folder in Windows 10 is to use the built-in folder encryption system called the Encrypted File System (EFS). This method is only available to Windows 10 Pro, Enterprise, or Education users.
This type of encryption locks a folder using your Microsoft or local account credentials (so long as the user account has a password). To access the folder, the user will need to know the same login details that you’d use to sign in to your PC. If they don’t have it, they can’t access the folder.
You can also decrypt your files using the EFS encryption key. You’ll be prompted to back this up when you first encrypt a folder using EFS.
- To password protect a folder using this system, you’ll need to right-click a folder on your desktop or in Windows File Explorer, then press the Properties option.
- In the General tab of the Properties window, press the Advanced button. This is only visible for files on an attached drive. You won’t see this option for folders on a network drive, for instance.
- In the Advanced Attributes window, click the Encrypt contents to secure data checkbox. Press OK to save.
- Press OK (or Apply > OK) in the Properties window to save your encryption settings.
- Once saved, you’ll be able to view user accounts and recovery keys linked to the folder by right-clicking the folder and pressing Properties > Advanced > Details.
- When you first encrypt a folder using this method, you’ll be asked to back up your EFS encryption key and certificate. You can (and are recommended to) save this to an external device, such as a USB flash drive. Press Back up now in the pop-up window to do this, or press Back up later. It isn’t advisable to press Never back up, as you may not be able to retrieve your files later.
- In the Certificate Export Wizard, you’ll be guided to create an encryption certificate and decryption password. Windows will select an appropriate format automatically for your certificate, so press Next to continue.
- To protect your key, you’ll need to create a strong password. Make sure to enable the Password checkbox, then provide a suitable password in the Password and Confirm Password boxes. In the Encryption drop-down menu, select AES256-SHA256. Press Next to continue.
- Confirm the file name for your file in the next menu, then press Next. It’s recommended that you store this file away from your PC, so use removable media to save your file.
- You can confirm the options you’ve selected at the final stage. If you’re happy, press Finish to save the certificate file.
At this point, your folder should be secured. You should see no difference—you can access, edit, and move the folder as normal. For other users, however, they’ll require your account details or encryption key to access or make any changes to the folder.
Encrypting Folders Using 7-Zip
If you want to secure a folder without making too many changes to it, you may decide to encrypt it. One way to do this is to use 7-Zip, the open-source archival software, to create an encrypted, password-protected zip file.
- To do this, you’ll need to download and install 7-Zip on your PC. Once the software is installed, you can right-click on any folder on your PC (on your desktop or in Windows File Explorer) and press 7-Zip > Add to archive.
- In the Add to Archive window, make sure to select 7z from the Archive drop-down menu. In the Encryption section, type a secure password in the Enter password and Reenter password boxes. Make sure that AES-256 is selected as the Encryption method, and click to enable the Encrypt file names if you want to hide the names of the files held within your folder (this is recommended). Press OK to create your archive once you’re done.
- Your encrypted 7z file will appear alongside your unencrypted folder. You can now safely delete the original folder to ensure it can no longer be accessed. When you (or somebody else) attempts to open the encrypted file, a password will be required to gain access.
Other Third-Party Software To Password Protect Folders
While 7-Zip can create a password-protected archive containing your folder, it can’t password protect the folder itself. If you’re using Windows 10 Home (meaning EFS and built-in folder encryption is unavailable to you), then you’ll need to use third-party software to protect your folders.
A number of antivirus software packages offer an encrypted file storage feature, including Bitdefender Total Security. As an alternative, you could use dedicated file encryption software like AxCrypt, which offers a Secured Folders feature. This is a premium feature, but you can try the software with a 30-day free trial.
AxCrypt constantly monitors these folders, encrypting any files that are added to it. This ensures that only you can access files within the folder. You can decrypt the files using your own encryption password, although you’ll also need an AxCrypt account to use the software. Passwords are stored locally, however.
- To use AxCrypt, you’ll need to first install the software and create a new account when you first launch it. Once launched, click the Secured Folders tab.
- By default, AxCrypt will encrypt the MyCrypt folder in your documents folder. To add a new folder, right-click a folder on your desktop or in Windows File Manager, then press Axcrypt > Encrypt to encrypt it.
- Once encrypted, you’ll be able to enter the folder, but any files held within it will be encrypted with the .axx file extension. Trying to open it will open the AxCrypt client, where you’ll need to use your decryption password to decrypt the files first and make any changes. If you’re already signed in, you won’t need to type your password in to edit any files.
- If you want to decrypt your files later, right-click an encrypted folder and press Axcrypt > Decrypt. This will disable encryption on that folder and remove any existing encryption.
Protecting Your Important Files in Windows 10
With folder encryption built-in and several third-party methods available, it’s never been easier to password protect a folder and protect your most important files in Windows 10. With AES encryption available for EFS and 7-Zip files, your files will be (close to) unbreakable, giving you additional peace of mind.
If you want to take things further, there’s nothing stopping you from encrypting all of your data, whether it’s online or offline. This is an especially good idea for online data, especially if you find out that a site or service you’re using has suffered a data breach, but you can also encrypt your entire hard drive using Windows Bitlocker.