# Is there anyway to password encrypt files/folders? **URL:** \ **Category:** Factual Questions\ **Created:** [September 4, 2006, 6:18pm UTC](https://boards.straightdope.com/t/is-there-anyway-to-password-encrypt-files-folders/371421 "2006-09-04T18:18:08Z")\ **Posts on this page:** 6\ **Page:** 2
**Author:** ![gazpacho](https://avatars.discourse-cdn.com/v4/letter/g/6f9a4e/32.png) [@gazpacho](https://boards.straightdope.com/u/gazpacho)\ **Post date:** [September 6, 2006, 5:08am UTC](https://boards.straightdope.com/t/is-there-anyway-to-password-encrypt-files-folders/371421/21 "2006-09-06T05:08:37Z")
Truecrypt allows you to unmount the volumes. I have not messed with the XP encryption much but there was not an obvious way to turn off the encrypted folders. On the other hand my reading of the link I posted seemed to indicate that more than administrator access was needed to get at the files. I just tried TrueCrypt and it looks like it does what the OP wants. But you do have to unmount the volume when you pop out for a cup of joe. The microsoft solution looks like it is setup for a enterprise application where you are trying to keep the data from falling into the wrong hands if the laptop is stolen but also allow access by a chosen set of people without them needing to know all the users passwords. ---
**Author:** ![Joools](https://avatars.discourse-cdn.com/v4/letter/j/6de8d8/32.png) [@Joools](https://boards.straightdope.com/u/Joools)\ **Post date:** [September 6, 2006, 5:18am UTC](https://boards.straightdope.com/t/is-there-anyway-to-password-encrypt-files-folders/371421/22 "2006-09-06T05:18:12Z")
[QUOTE=gazpacho] I just tried TrueCrypt and it looks like it does what the OP wants. But you do have to unmount the volume when you pop out for a cup of joe. [/QUOTE] TrueCrypt has an option to automatically unmount the volume after a set period of inactivity. That said, given the OP’s request, I’d encourage locking the compter (Windows-L). Takes 1/2 a second to do while you’re getting up to leave your desk. ---
**Author:** ![Ms2001](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/ms2001/32/18463_2.png) [@Ms2001](https://boards.straightdope.com/u/Ms2001)\ **Post date:** [September 6, 2006, 5:55am UTC](https://boards.straightdope.com/t/is-there-anyway-to-password-encrypt-files-folders/371421/23 "2006-09-06T05:55:56Z")
[QUOTE=CurtC] But with TrueCrypt, an admin can’t access the encrypted data, unlike with XP Pro’s built-in encryption. [/quote] Cite? My understanding is that even admins can’t access encrypted data on an NTFS volume. The files are encrypted with a key tied to your login password; if an admin changes your password without knowing the original, your encrypted data becomes unreadable. ---
**Author:** ![Hunter\_Hawk](https://avatars.discourse-cdn.com/v4/letter/h/50afbb/32.png) [@Hunter\_Hawk](https://boards.straightdope.com/u/Hunter_Hawk)\ **Post date:** [September 6, 2006, 6:17am UTC](https://boards.straightdope.com/t/is-there-anyway-to-password-encrypt-files-folders/371421/24 "2006-09-06T06:17:01Z")
[QUOTE=Mr2001] Cite? My understanding is that even admins can’t access encrypted data on an NTFS volume. The files are encrypted with a key tied to your login password; if an admin changes your password without knowing the original, your encrypted data becomes unreadable. [/QUOTE] I believe you (“you” being an admin) can create data recovery agents that will be able to access encrypted files if necessary. I think (IIRC) you have to create DRAs ahead of time, though, so it should be one of those things you take care of when you’re first planning and implementing security policies for your domain. ---
**Author:** ![Ms2001](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/ms2001/32/18463_2.png) [@Ms2001](https://boards.straightdope.com/u/Ms2001)\ **Post date:** [September 6, 2006, 6:44am UTC](https://boards.straightdope.com/t/is-there-anyway-to-password-encrypt-files-folders/371421/25 "2006-09-06T06:44:38Z")
[QUOTE=Hunter Hawk] I believe you (“you” being an admin) can create data recovery agents that will be able to access encrypted files if necessary. I think (IIRC) you have to create DRAs ahead of time, though, so it should be one of those things you take care of when you’re first planning and implementing security policies for your domain. [/QUOTE] [This](http://www.windowsecurity.com/articles/Understanding-EFS-Windows-2003.html) describes some differences between the encrypted file system in Windows 2000 and XP. In Win2k, the administrator was a DRA by default, and someone had to be assigned as a DRA in order for encryption to work. In XP, encryption works without a DRA, so your data is safe unless someone set up a DRA without your knowledge before you encrypted it - not really an issue for a PC that you control. ---
**Author:** ![Hunter\_Hawk](https://avatars.discourse-cdn.com/v4/letter/h/50afbb/32.png) [@Hunter\_Hawk](https://boards.straightdope.com/u/Hunter_Hawk)\ **Post date:** [September 6, 2006, 7:34am UTC](https://boards.straightdope.com/t/is-there-anyway-to-password-encrypt-files-folders/371421/26 "2006-09-06T07:34:40Z")
Right. I was really responding to the “your encrypted data becomes unreadable” bit. If you somehow become unable to decrypt the files, the data will be unreadable unless a DRA is set up to access those files. Which is another example of why backups are important. Of course, the real issue that **SweetHomeColorado** raises is still best handled by locking the PC in some way rather than just setting up file encryption. [Previous page](https://boards.straightdope.com/t/is-there-anyway-to-password-encrypt-files-folders/371421.md?page=1)