# Windows encryted files sent to IOS device **URL:** \ **Category:** Factual Questions\ **Created:** [November 17, 2024, 6:33pm UTC](https://boards.straightdope.com/t/windows-encryted-files-sent-to-ios-device/1010367 "2024-11-17T18:33:35Z")\ **Posts on this page:** 16\ **Page:** 1
**Author:** ![Llama\_Llogophile](https://avatars.discourse-cdn.com/v4/letter/l/49beb7/32.png) [@Llama\_Llogophile](https://boards.straightdope.com/u/Llama_Llogophile)\ **Post date:** [November 17, 2024, 6:33pm UTC](https://boards.straightdope.com/t/windows-encryted-files-sent-to-ios-device/1010367/1 "2024-11-17T18:33:35Z")
I used the built-in encryption capability on my Windows 10 laptop to lock down some folders and individual files. Today I emailed myself one of those files and found I was able to view it on my phone. No encryption, didn’t need to enter the code. So far, I’m unable to find an answer to this. Me doing something wrong is probably a good guess. Or does that sort of encryption not work between different platforms? ---
**Author:** ![DPRK](https://avatars.discourse-cdn.com/v4/letter/d/4491bb/32.png) [@DPRK](https://boards.straightdope.com/u/DPRK)\ **Post date:** [November 17, 2024, 7:11pm UTC](https://boards.straightdope.com/t/windows-encryted-files-sent-to-ios-device/1010367/2 "2024-11-17T19:11:26Z")
Encryption does work between different platforms. Perhaps you accidentally emailed the plaintext? ---
**Author:** ![FinsToTheLeft](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/finstotheleft/32/2930_2.png) [@FinsToTheLeft](https://boards.straightdope.com/u/FinsToTheLeft)\ **Post date:** [November 17, 2024, 7:13pm UTC](https://boards.straightdope.com/t/windows-encryted-files-sent-to-ios-device/1010367/3 "2024-11-17T19:13:06Z")
You likely used the at-rest disk encryption. The file is decrypted automatically on access. ---
**Author:** ![DPRK](https://avatars.discourse-cdn.com/v4/letter/d/4491bb/32.png) [@DPRK](https://boards.straightdope.com/u/DPRK)\ **Post date:** [November 17, 2024, 7:14pm UTC](https://boards.straightdope.com/t/windows-encryted-files-sent-to-ios-device/1010367/4 "2024-11-17T19:14:46Z")
To email an encrypted file, use something like GPG, by itself or as a plugin. The message should look like a bunch of random characters, and the recipient will not be able to read it without the right key or without entering a password, whatever you used. ---
**Author:** ![LSLGuy](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/lslguy/32/5813_2.png) [@LSLGuy](https://boards.straightdope.com/u/LSLGuy)\ **Post date:** [November 17, 2024, 7:15pm UTC](https://boards.straightdope.com/t/windows-encryted-files-sent-to-ios-device/1010367/5 "2024-11-17T19:15:08Z")
ETA: Mostly ninja-ed while I was stuck on the phone. … The answer depends on exactly how you did the file- or folder-level encryption. Windows 10 Home does not have built-in file- or folder-level encryption. The higher SKUs of Win10 do. If you ever have to enter a code to read a file you are not using Win10 built-in encryption. So the first question we need answered to get your FQ resolved is what encryption tool you actually used. The Win10 higher SKU encryptions _never_ need you to enter a code. Those file- and folder-scoped encryptions only apply to the copy on your disk. As soon as the file is transferred into another app, such as an email client, word processor etc, the file is silently transparently decrypted along the way. The use case for this type of encryption is to make your stolen laptop or hard drive unusable unless they can log on as you. Here’s more layman-level coverage of Win10 built-in encryption and other options that are probably closer to what the OP intended to do > **[How to Encrypt Files, Folders and Drives on Windows](https://www.techspot.com/guides/2069-how-to-encrypt-windows/)** > > One of the best ways to protect your privacy is to encrypt important information on your computer. Whether you need to send personal information to someone, or... ---
**Author:** ![Stranger\_On\_A\_Train](https://avatars.discourse-cdn.com/v4/letter/s/13edae/32.png) [@Stranger\_On\_A\_Train](https://boards.straightdope.com/u/Stranger_On_A_Train)\ **Post date:** [November 17, 2024, 7:16pm UTC](https://boards.straightdope.com/t/windows-encryted-files-sent-to-ios-device/1010367/6 "2024-11-17T19:16:44Z")
> [@FinsToTheLeft](#): > > You likely used the at-rest disk encryption. The file is decrypted automatically on access. This is from the Arch Linux Wiki but the discussion is generic: [Data-at-rest encryption](https://wiki.archlinux.org/title/Data-at-rest_encryption) Stranger ---
**Author:** ![Llama\_Llogophile](https://avatars.discourse-cdn.com/v4/letter/l/49beb7/32.png) [@Llama\_Llogophile](https://boards.straightdope.com/u/Llama_Llogophile)\ **Post date:** [November 17, 2024, 7:20pm UTC](https://boards.straightdope.com/t/windows-encryted-files-sent-to-ios-device/1010367/7 "2024-11-17T19:20:59Z")
I think I’m following this so far. Does the same hold if I were to copy my “encrypted” files onto an external hard drive? Last week I moved one and it showed the gold lock symbol - but what happens if that file is viewed on a different computer? I’m guessing nothing. Which raises, the question, what the hell good is this? ---
**Author:** ![DPRK](https://avatars.discourse-cdn.com/v4/letter/d/4491bb/32.png) [@DPRK](https://boards.straightdope.com/u/DPRK)\ **Post date:** [November 17, 2024, 7:21pm UTC](https://boards.straightdope.com/t/windows-encryted-files-sent-to-ios-device/1010367/8 "2024-11-17T19:21:00Z")
There are also many ways to _transfer_ files from one device to another over an insecure network, if that is what you need. Magic Wormhole, for instance. ---
**Author:** ![DPRK](https://avatars.discourse-cdn.com/v4/letter/d/4491bb/32.png) [@DPRK](https://boards.straightdope.com/u/DPRK)\ **Post date:** [November 17, 2024, 7:22pm UTC](https://boards.straightdope.com/t/windows-encryted-files-sent-to-ios-device/1010367/9 "2024-11-17T19:22:14Z")
Do you ever have to type in a password or insert a key dongle/file to unlock any data? Like before or during boot, or login? If not, then it’s no good. If the external drive is encrypted, it should ask you for a password or key when you insert it (especially on a different computer!!!). @Stranger_On_A_Train 's link is very informative. ---
**Author:** ![Llama\_Llogophile](https://avatars.discourse-cdn.com/v4/letter/l/49beb7/32.png) [@Llama\_Llogophile](https://boards.straightdope.com/u/Llama_Llogophile)\ **Post date:** [November 17, 2024, 7:42pm UTC](https://boards.straightdope.com/t/windows-encryted-files-sent-to-ios-device/1010367/10 "2024-11-17T19:42:46Z")
> [@DPRK](#): > > Do you ever have to type in a password or insert a key dongle/file to unlock any data? No. So, what exactly have I accomplished? The files / folders are encrypted on my laptop only? What is the point of calling this encryption if it doesn’t actually encrypt anything in a useful manner? I’ll read the provided links (thank you!) and figure out what I really need, but this sort of thing annoys me. Reminds me of that Simpsons episode where Lisa tries to ride the bus. She gets on the number 22, only to find herself stranded - turns out on Tuesdays and Thursdays it’s the 22-A bus with a completely different route. ---
**Author:** ![LSLGuy](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/lslguy/32/5813_2.png) [@LSLGuy](https://boards.straightdope.com/u/LSLGuy)\ **Post date:** [November 17, 2024, 7:47pm UTC](https://boards.straightdope.com/t/windows-encryted-files-sent-to-ios-device/1010367/11 "2024-11-17T19:47:55Z")
> [@Llama\_Llogophile](#): > > What is the point of calling this encryption if it doesn’t actually encrypt anything in a useful manner? Data at rest encryption is intended solely to protect against the scenario of somebody reading or stealing your hard drive. What _they_ get off it that way is gibberish. What _you_ and all _your_ apps get is the plain text. Effortlessly. That’s in fact a real valuable security feature. For what it’s for. If you thought it did something else, well oops. ---
**Author:** ![Stranger\_On\_A\_Train](https://avatars.discourse-cdn.com/v4/letter/s/13edae/32.png) [@Stranger\_On\_A\_Train](https://boards.straightdope.com/u/Stranger_On_A_Train)\ **Post date:** [November 17, 2024, 8:05pm UTC](https://boards.straightdope.com/t/windows-encryted-files-sent-to-ios-device/1010367/12 "2024-11-17T20:05:08Z")
> [@Llama\_Llogophile](#): > > So, what exactly have I accomplished? The files / folders are encrypted on my laptop only? What is the point of calling this encryption if it doesn’t actually encrypt anything in a useful manner? Someone can’t pull the hard drive out of your machine (or mirror it) and access the data without logging in as you or entering your password for authentication. But if someone can access your laptop and log in under your account (or whatever accounts are authorized) then they have full access to the files. Any individual files or folders you send from your laptop that are not themselves independently encrypted are completely accessible to anyone who can access them. Stranger ---
**Author:** ![Chronos](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/chronos/32/134_2.png) [@Chronos](https://boards.straightdope.com/u/Chronos)\ **Post date:** [November 17, 2024, 8:06pm UTC](https://boards.straightdope.com/t/windows-encryted-files-sent-to-ios-device/1010367/13 "2024-11-17T20:06:31Z")
Security is always a difficult balancing act. Security, at its essence, means making it harder to access things. But if you make it too hard, then people will choose not to use it, and it becomes completely worthless. The result is that the only security that’s universally available (like, pre-installed and enabled by default on Windows PCs) is security that’s almost completely transparent to the user, and which therefore probably isn’t very secure. ---
**Author:** ![DPRK](https://avatars.discourse-cdn.com/v4/letter/d/4491bb/32.png) [@DPRK](https://boards.straightdope.com/u/DPRK)\ **Post date:** [November 17, 2024, 8:23pm UTC](https://boards.straightdope.com/t/windows-encryted-files-sent-to-ios-device/1010367/14 "2024-11-17T20:23:18Z")
It is definitely possible to set up a Windows (and not only Windows) machine so that when you turn it on, it boots and auto-logs in as a user, all without entering any password. ---
**Author:** ![Stranger\_On\_A\_Train](https://avatars.discourse-cdn.com/v4/letter/s/13edae/32.png) [@Stranger\_On\_A\_Train](https://boards.straightdope.com/u/Stranger_On_A_Train)\ **Post date:** [November 17, 2024, 8:24pm UTC](https://boards.straightdope.com/t/windows-encryted-files-sent-to-ios-device/1010367/15 "2024-11-17T20:24:59Z")
> [@Chronos](#): > > The result is that the only security that’s universally available (like, pre-installed and enabled by default on Windows PCs) is security that’s almost completely transparent to the user, and which therefore probably isn’t very secure. That really isn’t the way to look at it. Security isn’t a single encryption software, or a complex password, or physically locking down the machine; it is all of those things in layers and including the user understanding that they shouldn’t do things like open unknown email attachments, click on links from strange IT-ish messages, or install unvalidated software, and certainly not share passwords or keep them on a spreadsheet in their “Public” folder using only the built-in “Protect Sheet” function in Excel that a talented eight-year-old could break in thirty seconds flat. In this case, the files on the hard drive _are_ secure from non-authorized users (at least, ones that can’t break the encryption) but are accessible once the o.p. logs in, with the default assumption that this is a single-user laptop that doesn’t connect to a LAN or share those files with a server somewhere. So, the security stops with the authorized user and their awareness of what networks or systems they might attach to. If the user wants to send those files via email or some other plaintext system then they either need to install a peer-to-peer encryption on the email client (both sides) and have a shared key or symmetric-key system like the GPG system—a ‘freeware’ version of the commerical Pretty Good Privacy (PGP) public key system—to transmit in the clear while maintaining security of the message. If you wanted to directly transmit files to another secure system, you could use _ssh_ (Secure SHell) using a similar encryption protocol. The default security on _Windows_ is generally pretty out of date in terms of algorithms and implementations although I have to admit a lack of familiarity because I don’t configure Windows systems, but security on MacOS, Linux, and \*BSD systems is generally as up-to-date with current encryption standards as possible. But again, encryption is just one piece of security, and frankly not the one that is generally attacked by ‘hackers’ because it is usually easier to just call up a user, pretend to be “tech support”, and get them to tell you their password, which despite decades of warnings users do all the time anyway. > [@DPRK](#): > > It is definitely possible to set up a Windows (and not only Windows) machine so that when you turn it on, it boots and auto-logs in as a user, all without entering any password. Nobody should ever do this, ever, on a personal or occupational machine that has any kind of important or proprietary data for reasons that I would think should be obvious. Stranger ---
**Author:** ![FinsToTheLeft](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/finstotheleft/32/2930_2.png) [@FinsToTheLeft](https://boards.straightdope.com/u/FinsToTheLeft)\ **Post date:** [November 17, 2024, 9:26pm UTC](https://boards.straightdope.com/t/windows-encryted-files-sent-to-ios-device/1010367/16 "2024-11-17T21:26:24Z")
> [@Stranger\_On\_A\_Train](#): > > The default security on _Windows_ is generally pretty out of date in terms of algorithms and implementations although I have to admit a lack of familiarity because I don’t configure Windows systems, but security on MacOS, Linux, and \*BSD systems is generally as up-to-date with current encryption standards as possible. This is no longer the case for either stand alone or domain joined Windows computers anymore. TLS 1.2 or higher, SMB 3.0, and NTLM is deprecated and replaced by Kerberos. Bitlocker full disk encryption with keys in TPM 2 is as secure as it gets.