How To Encrypt A Folder | Built-in Tools for Windows Mac & Linux

Encrypting a folder relies on your operating system. Windows EFS, macOS Disk Utility, and Linux gocryptfs handle the job without extra software.

Every operating system ships with a way to lock down your data. The trick is knowing which button to push—and when the built-in tools aren’t enough, free standalone apps plug the rest of the holes. The safest and most efficient way how to encrypt a folder starts not with downloading extra software, but with checking what’s already built into your system. Below are the exact steps for Windows, macOS, and Linux, plus the cross-platform tools that tie them together.

How to Encrypt a Folder on Windows (Native EFS)

Windows Pro, Enterprise, and Education users have access to the Encrypting File System (EFS), a transparent encryption layer that locks files automatically using your user account certificate. Right-click the folder you want to protect and select Properties. On the General tab, click the Advanced button. Check the box labeled Encrypt contents to secure data, then click OK and Apply. Windows will ask whether to apply the change to this folder only or to all subfolders and files as well—choose the scope that fits your needs. A yellow notification in File Explorer will later prompt you to back up your encryption key; do not skip this step, because losing access to your user account without the certificate backup means losing the data permanently.

Windows Home users do not have EFS. The best fallback is to create an encrypted archive using 7-Zip (with AES-256) or use a cross-platform tool like VeraCrypt. On supported editions, EFS is the fastest route to folder-level encryption with zero ongoing effort during daily use.

How to Encrypt a Folder on macOS

Apple’s Disk Utility turns an entire folder into a password-protected disk image—a single .dmg file that behaves like a mounted drive. Open Disk Utility from Applications > Utilities. Go to File > New Image > Image from Folder. Select the folder, set a strong password, and choose AES-128 or AES-256 encryption. Save the .dmg. Each time you double-click the image, macOS will ask for the password before mounting it. This method works on all versions of macOS and is especially useful for sending a secure folder by email or keeping sensitive work on a USB drive. Once you unmount the image, the folder is unreadable without the password.

If you forget the password, the data inside the encrypted disk image is unrecoverable. macOS does not provide a password reset option for Disk Utility images—save the password in a trusted password manager.

What is the Difference Between Folder and Full-Disk Encryption?

Folder encryption protects only what you put inside the encrypted container or tag for encryption. Full-disk encryption (BitLocker on Windows, FileVault on macOS, LUKS on Linux) protects everything on the drive—the operating system, applications, and every file. The table below shows how the native approaches compare.

If your goal is to protect a single project folder rather than your whole computer, stick with the folder-level methods listed in this guide. They keep the rest of your system running at full speed while wrapping the sensitive data in strong encryption.

Encrypting a Folder for Cross-Platform Use

When an encrypted folder needs to travel between Windows, macOS, and Linux, built-in tools sometimes lock you into one ecosystem. VeraCrypt fills that gap. It creates a single encrypted container file that mounts as a new drive letter or mount point on any operating system. You set the size, the encryption algorithm (AES-256 by default), and the password. Once mounted, you drag files into the container, unmount it, and the whole folder is sealed. VeraCrypt also offers a hidden volume feature—plausible deniability if someone forces you to give up the outer password. For a simpler workflow, Apple’s official guide on Mac encryption shows the same .dmg approach works with Disk Utility, which can be opened on a Mac without installing third-party software.

VeraCrypt containers are operating system-agnostic, but the software must be installed on every machine that needs to open the folder. If you cannot install software on a target machine, a password-protected ZIP file (using AES-256) is the universally accessible alternative.

Encrypting a Folder on Linux

Linux users can choose from several tools depending on the threat model. Gocryptfs is a popular per-directory solution that stores encrypted files on disk and mounts a decrypted view in the file system. Install gocryptfs through your package manager. Create two directories—one for the encrypted data and one as the mount point. Run gocryptfs -init ~/Encrypted to set a master password, then mount with gocryptfs ~/Encrypted ~/Decrypted. Any file placed in the Decrypted directory is written to disk as encrypted data in the Encrypted directory. Unmount with fusermount -u ~/Decrypted. The setup takes seconds and integrates cleanly with scripts and automation.

Making Your Choice: The Right Method for Your Files

The best folder encryption method comes down to your operating system and workflow. Windows Pro users can turn on EFS in under a minute for a transparent, always-on solution. macOS users get reliable cross-platform portability with encrypted disk images from Disk Utility. Linux users can pick gocryptfs for speed or LUKS for full-disk protection. When portability across every operating system matters, VeraCrypt remains the industry standard—and it’s free. Pick the method that matches exactly where your data lives and what kind of access you need, then make the encryption step a habit rather than an afterthought. Stronger encryption won’t matter if it’s so inconvenient that you stop using it.