HomeWinBuzzer TipsHow to Enable or Disable File Encryption in Windows 10 (NTFS EFS)

How to Enable or Disable File Encryption in Windows 10 (NTFS EFS)

We show you how to enable or disable Windows 10 File Encryption via NTFS EFS (Encrypting File System) on the filesystem-level for all users.


Though Windows has strong in-built security, it's very difficult to protect a computer from a physical, in-person attack. One solution, however, is file encryption, also known as the encrypting file system (EFS).

Windows 10 EFS allows for easy encryption and decryption of files on your account's NTSF drives using tried and tested algorithms. Jargon aside, this means that anybody who tries to access your files and doesn't have the encryption key (password) only sees strings of letters and numbers. 

Unfortunately, some people find that the encrypt contents to secure data option is grayed out. In this tutorial, we'll show you how to enable EFS on your PC to remedy this, as well as how to remove the EFS encryption option if you need to. We'll show you two methods to enable or disable EFS NTSF – the group policy editor and a registry file. Let's get started:

How to Enable or Remove EFS NTFS File Encryption in the Windows 10 Local Group Policy Editor

If you have Windows 10 Pro, Enterprise, or Education, the easiest way to enable EFS is through the local group policy editor. This way, you get a nice, understandable UI and full transparency about the changes you're making. If you have Windows 10 Home, check the registry section below. Otherwise, follow along here:

  1. Open the Local Group Policy editor

    Press Start and type “Edit group policy”. Click the top result.

    Windows 10 - Open Group Policy Editor Gpedit

  2. Navigate to the EFS NTFS section and open the Windows 10 encryption policy 

    In the sidebar of the Local Group Policy Editor, find the “Filesystem” folder and click “NTFS”. In your main pane, you should see a setting called “Do not allow encryption on all NTFS volumes”. Double-click it.

    Windows 10 - Group Policy Editor Gpedit- Filesystem NTFS - Do Not Allow Encryption on All NTFS Volumes

  3. Enable or remove EFS NTSF encryption

    In the policy, choose “Not Configured”, “Enabled”, to “Disabled”. Here's what each option does:

    Option Function
    Enabled Remove EFS encryption as an option on all NTFS drives
    Disabled Enable EFS NTFS encryption as an option on all drives
    Not Configured Follow the system default settings

    Press OK once you've made your selection and Restart your PC to apply the changes. 

    Windows 10 - Group Policy Editor Gpedit- Filesystem NTFS - Do Not Allow Encryption on All NTFS Volumes - Disabled

How to Enable or Disable NTFS File Encryption using a REG file

If you don't have Windows 10 Pro, don't worry – you can still enable the EFS service. However, it will require you to make some changes to your registry. Make sure you back up your registry before continuing just to be safe.

We'll walk you through the process manually for full transparency, but you can also check the section below for a .REG file if you're in a hurry. Let's get started:

  1. Open Regedit

    Press “Windows + R” to open the Run dialog and type “regedit”. Click the “OK” button to open the Registry Editor.

    Windows 10 - Open Registry Editor Regedit

  2. Navigate to the Policies key and create a new DWORD

    In your Registry Editor search bar, paste the following:


    In the main pane, right-click any empty space and choose “New > DWORD (32-bit) Value”. Name the DWORD NtfsDisableEncryption, taking care to copy the capitalization exactly.

    Windows 10 - Registry Editor Regedit - Computer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Policies
  3. Change the value data to enable or disable Windows file encryption

    Modify the value data to turn NTFS EFS encryption on or off, setting it one 1 to remove the EFS option and 0 to enable it. Press “OK” when you're done.

    Windows 10 - Registry Editor Regedit - Computer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Policies - NtfsDisableEncryption

How to Enable or Disable Windows File Encryption via .REG Download

To make the registry editing process simpler and safer, we have created a .REG file. You can simply double-click this to disable or enable EFS for your system. You can download the .zip file here.

After the download has finished, perform the following steps:

  1. Unzip the file

    Right-click the .zip file and select “Extract All…” from the fly-out menu.

  2. Browse to the extraction location and click “Extract”

  3. Double-click the disable or enable NTFS registry key

  4. Press “Yes” to the warning dialog

  5. Click “OK” and restart your PC

    lf you'd like to switch back to your original setting at any point simply double-click the other registry key and repeat the process. We recommend you keep both .reg files in a safe location incase you ever want to change the setting again.

That wraps up this Windows 10 file encryption tutorial. You can follow our guide to using NTFS encryption to check if “encrypt contents to secure data” is grayed out still and learn more. You may also want to check our BitLocker encryption guide and decide which method is best for you.

Last Updated on February 14, 2022 7:44 pm CET

Ryan Maskell
Ryan Maskellhttps://ryanmaskell.co.uk
Ryan has had a passion for gaming and technology since early childhood. Fusing the skills from his Creative Writing and Publishing degree with profound technical knowledge, he enjoys covering news about Microsoft. As an avid writer, he is also working on his debut novel.
Table of Contents: