How to Password Protect a Folder on Windows 11 (5 Methods That Actually Work)

Windows 11 does not have a “set password on this folder” option — right-clicking a folder and opening Properties gives you no password field at all. That has not stopped anyone from looking for one, and it has created a market of shady “folder lock” apps that do not actually protect anything. The good news: five methods genuinely work, and the best one is available on every edition of Windows 11. I tested the leading method end to end, and this guide shows exactly which option fits your situation.

Quick answer: For most people, the answer is a password-protected 7-Zip archive with AES-256 encryption. It works on Windows 11 Home and Pro, it asks for a real password before opening anything, and it costs nothing. If you open the folder every day, a VeraCrypt container or a BitLocker virtual drive is more convenient; if you run Windows 11 Pro, the built-in EFS encryption and BitLocker are also options.

First, the honest truth: there is no folder password in Windows 11

Windows protects files, not folders, and it does so through encryption rather than a password prompt on the folder itself. That distinction matters, because it explains why every legitimate method below works the way it does:

• Encrypted archives and containers (7-Zip, VeraCrypt) wrap your files in an encrypted package that genuinely asks for a password.
• Built-in encryption (EFS, BitLocker) ties decryption to your Windows account or a drive key — strong protection, but no password prompt on the folder itself.
• OneDrive Personal Vault puts a second identity check in front of a cloud folder — a fingerprint, PIN, or code — rather than a password on the folder.

Any guide that promises a one-click folder password inside Windows itself is selling you a trick. The sections below cover what actually works, in order of usefulness.

Check your Windows edition before you start

Two of the five methods require Windows 11 Pro, Enterprise, or Education. Check yours first: open Settings > System > About and read the Edition line.

Which method should you use?

Method 1: Password protect a folder with a 7-Zip encrypted archive (recommended)

This is the method I recommend to most readers, and the one I tested hands-on. 7-Zip is a well-established open-source archiver, and its 7z format with AES-256 encryption is the same standard used by security-conscious teams everywhere. The archive is a single password-protected file you can copy to a USB drive, back up, or email.

Step 1. Download 7-Zip from the official site (7-zip.org/download.html) and install it. Download it only from 7-zip.org — copycat download sites bundle adware.

Step 2. In File Explorer, right-click the folder you want to protect. On Windows 11, click Show more options first, then choose 7-Zip > Add to archive.

Step 3. Set Archive format to 7z. The zip format works too, but only 7z supports hiding the file names.

Step 4. Under Encryption, enter a strong password twice, set Encryption method to AES-256, and tick Encrypt file names.

Step 5. Click OK, then open the new archive to confirm it asks for your password. Only then delete the original folder — and empty the Recycle Bin, or the unprotected copy is still sitting on your drive.

What my test confirmed: I created an AES-256 encrypted archive and checked all three failure modes. Without the password, extraction failed outright. With a wrong password, extraction failed too. With the correct password, every file came back byte-for-byte identical. One surprise worth knowing: if you skip the Encrypt file names checkbox, anyone who opens the archive can see the file names — they just cannot open the contents. Tick that box.

The catch: there is no password recovery. If you forget the password, the files inside are unrecoverable by anyone, including you. Store the password in a password manager before you delete the original folder. If the files are a single PDF rather than a folder, our guide to password protecting a PDF without Adobe covers the document-specific options.

Method 2: VeraCrypt container — a private drive you mount with a password

If you open the folder daily, re-extracting an archive every time gets old. VeraCrypt, the open-source successor to TrueCrypt, creates an encrypted container file that mounts as an extra drive letter when you enter its password, and vanishes when you dismount it. It works on Windows 11 Home and Pro, and the container file is portable — copy it to another PC with VeraCrypt installed and it opens there too.

Step 1. Download VeraCrypt from the official site (veracrypt.fr/en/Downloads.html) and install it.

Step 2. Open VeraCrypt and click Create Volume > Create an encrypted file container > Standard VeraCrypt volume.

Step 3. Choose where to save the container file and how large it should be — pick a size with room to grow, because resizing later is a hassle.

Step 4. Set a strong password (VeraCrypt recommends 20 or more characters), choose the default AES encryption, and format the volume. VeraCrypt’s own beginner’s tutorial walks through each screen.

Step 5. To use it, pick a drive letter in VeraCrypt, click Select File, choose your container, click Mount, and enter the password. Copy files into the new drive, then Dismount when you are done. Like 7-Zip, there is no password recovery — VeraCrypt cannot reset it for you.

Method 3: BitLocker on a virtual drive (Windows 11 Pro only)

BitLocker normally encrypts whole drives, but on Pro you can aim it at a virtual hard disk file instead, which gives you a password-protected “folder” that behaves like a drive. Microsoft’s BitLocker documentation covers the encryption itself (learn.microsoft.com — BitLocker).

Step 1. Open Disk Management (right-click Start, or search for it), go to Action > Create VHD, and create a fixed-size or dynamically expanding .vhdx file where you want it stored.

Step 2. Right-click the new disk and choose Initialize Disk, then create a simple volume and format it as NTFS.

Step 3. In File Explorer, right-click the new drive, choose Show more options > Turn on BitLocker, and set a password to unlock the drive. Save the 48-digit recovery key somewhere safe — a printed copy or a different device, not inside the drive itself.

Step 4. Copy your files into the drive, then right-click it and choose Eject to lock it. Double-clicking the .vhdx file later reattaches it and asks for the password. The big advantage over 7-Zip and VeraCrypt: if you forget the password, the recovery key still opens the drive.

Method 4: EFS encryption (Windows 11 Pro only)

The Encrypting File System is Windows’ own per-file encryption. It is the only method here that requires no extra software and no password prompt — files open normally when you are signed in to your account, and stay unreadable to every other account on the PC. Microsoft’s own guide confirms the steps and the key limitation: file encryption is not available in the Home edition of Windows.

Step 1. Right-click the folder and choose Properties, then click Advanced on the General tab.

Step 2. Tick Encrypt contents to secure data, click OK, then Apply and choose Apply changes to this folder, subfolders and files.

Step 3. When Windows offers to back up your encryption key, accept it. Save the certificate backup to a USB drive and give it a password. This is not optional housekeeping: without that backup, a Windows reinstall or a reset account can lock you out of your own files permanently.

Be honest about what EFS does not do: it does not ask anyone for a password, and it does not protect your files from someone who knows your Windows password or PIN. It protects against other user accounts on the same PC and against someone reading the drive from another machine. If the Encrypt checkbox is greyed out, you are on Windows 11 Home or the drive is not NTFS — use Method 1 instead.

Method 5: OneDrive Personal Vault — a second identity check in the cloud

Personal Vault is a protected area inside your OneDrive. Every time you open it, you pass a second identity check — a fingerprint, face scan, PIN, or code — even if someone is already sitting at your unlocked PC. It is included with every Microsoft account, and the vault locks itself after 20 minutes of inactivity.

Step 1. In File Explorer, open your OneDrive folder and double-click Personal Vault. Verify your identity with the code sent to your email or phone.

Step 2. Move or upload your sensitive files into the vault. Microsoft’s Personal Vault support page documents the setup (support.microsoft.com — Personal Vault).

The trap: a free OneDrive account can store only 3 files in Personal Vault. A Microsoft 365 Personal or Family subscription lifts that limit — but Microsoft 365 Basic does not, despite being a paid plan. A folder full of documents will hit the 3-file ceiling immediately, so keep the vault for your most sensitive items and use 7-Zip or VeraCrypt for the rest. Also note that Personal Vault is an identity check, not zero-knowledge encryption: Microsoft can still access files stored in OneDrive.

Methods that do not protect anything — skip these

• Hiding the folder. Hidden folders are revealed in two clicks in File Explorer. Hiding is organization, not security.
• “Folder lock” batch scripts. The widely shared .bat trick only hides the folder until you type a password — and the password sits in plain text inside the script itself.
• Renaming or burying the folder. Security through obscurity fails the moment anyone searches the drive.
• Unknown “folder lock” apps. Random lock apps from publishers you cannot verify can read, copy, or ransom the very files you wanted to protect. Stick to the established tools above.

What happens if you forget the password?

This is the question to answer before you lock anything away. 7-Zip archives and VeraCrypt containers have no back door: a forgotten password means the contents are gone, full stop. BitLocker gives you a 48-digit recovery key — the one method with a genuine safety net. EFS depends on the certificate backup Windows prompts you to make. Personal Vault falls back to your Microsoft account recovery options. Whatever method you choose, put the password or recovery key in a password manager first, and test opening the locked folder once before deleting the original. If you ever do lose files, our guide to recovering permanently deleted files on Windows 11 covers what can still be salvaged — but note that properly encrypted files cannot be recovered by any tool, which is exactly the point.

FAQs