How to Encrypt Files on Your Computer

Encrypting files on your computer means converting them into scrambled data that only someone with the right key or password can read. It protects sensitive documents if your laptop is lost, stolen, or accessed by someone you don’t trust.

Built-In Full-Disk Encryption

The easiest starting point is to encrypt your entire drive. This protects everything automatically without you having to remember to encrypt individual files.

Read also: How to Protect Your Email from Hackers (Complete Guide)

• Windows: Use BitLocker, available on Windows Pro and Enterprise. Go to Settings > Privacy & Security > Device Encryption, or search for “Manage BitLocker” in the Start menu. Save your recovery key somewhere safe (not on the same drive).
• macOS: Turn on FileVault in System Settings > Privacy & Security > FileVault. Apple lets you store the recovery key in your iCloud account or write it down.
• Linux: Most distributions offer LUKS encryption during installation. For existing systems, tools like cryptsetup handle disk and partition encryption.

Full-disk encryption only protects data when the machine is powered off or locked. Once you log in, files are readable, so combine it with a strong login password.

Encrypting Individual Files and Folders

When you only need to protect specific documents, or want to send an encrypted file to someone, per-file encryption is the way to go.

7-Zip (Free, Cross-Platform)

7-Zip can create password-protected archives using AES-256, a strong and widely trusted standard. Right-click a file, choose 7-Zip > Add to archive, set the format to 7z or zip, enter a password, and check “Encrypt file names” for extra privacy.

VeraCrypt (Encrypted Containers)

VeraCrypt creates an encrypted “container” file that mounts as a virtual drive. Anything you drop inside is encrypted on the fly. It is excellent for an ongoing collection of sensitive files and supports hidden volumes for plausible deniability.

GnuPG (For Email and File Encryption)

GPG uses public-key cryptography. You can encrypt a file so only the recipient’s private key can open it: gpg --encrypt --recipient [email protected] document.pdf. It is the standard for secure file and email exchange among technical users.

Choosing Strong Passwords and Keys

Encryption is only as strong as the password protecting it. A short, guessable password makes even AES-256 trivial to break with modern cracking tools.

• Use a passphrase of at least 14 characters, ideally a string of random words.
• Store passwords in a password manager rather than reusing them.
• For full-disk encryption, keep your recovery key offline, for example printed and stored in a safe.
• Never email an encrypted file and its password together.

Encrypting Cloud and Backup Files

Files synced to Google Drive, Dropbox, or OneDrive are stored on someone else’s servers. For an extra layer, encrypt them before upload using tools like Cryptomator, which creates an encrypted vault inside your cloud folder. This way the provider only ever sees scrambled data. Apply the same logic to external backup drives using BitLocker To Go or VeraCrypt.

Frequently Asked Questions

Is encrypting my files legal?

In most countries, including the US and across the EU, personal file encryption is completely legal. A few jurisdictions have restrictions or can legally compel you to disclose passwords, so check your local laws if you travel internationally with encrypted data.

Will encryption slow down my computer?

Modern processors include hardware acceleration (AES-NI) for encryption, so the performance impact of full-disk encryption is usually negligible on machines made in the last decade. You may notice a slight delay only with very heavy disk activity.

What happens if I forget my encryption password?

Without the password or a recovery key, the data is effectively unrecoverable, which is the point of strong encryption. Always set up and safely store a recovery key when one is offered, and back up critical files separately.

Is BitLocker or FileVault enough on its own?

Full-disk encryption protects against physical theft when the device is off. For files you share, sync to the cloud, or want protected even while logged in, add per-file encryption with a tool like 7-Zip, VeraCrypt, or Cryptomator.