How To Put A Password On A Folder In Windows | Lock It Down

7-Zip can protect a Windows folder with a separate password and AES-256 encryption; Windows EFS protects by account instead.

A folder can look private in File Explorer and still open instantly for anyone already signed in to your Windows account. For anyone figuring out how to put a password on a folder in Windows, a 7-Zip encrypted archive gives you the separate password prompt that File Explorer does not.

The practical setup is to place the folder inside an encrypted 7z archive, turn on file-name encryption, test the password, and only then remove the unencrypted original if you no longer need it. Windows also has built-in encryption, but that protects files through your Windows credentials rather than asking for a new password each time.

Put A Password On A Windows Folder With 7-Zip

7-Zip creates an encrypted copy of the folder inside a password-protected archive. The original folder stays unchanged, so the password only protects the new archive until you remove the unencrypted copy.

This works especially well for tax records, scanned IDs, project files, or other material you open only when needed. A 7z archive is not a live folder lock: if you extract a file, edit it outside the archive, and leave that copy on the PC, the extracted copy is no longer protected by the archive password.

For a folder that changes every day, account-based Windows encryption or full-drive encryption may be less cumbersome. For a folder that needs its own password, the encrypted archive is the more direct fit because the password travels with the archive instead of depending on one Windows sign-in.

Two settings deserve extra attention: AES-256 and Encrypt file names. File-name encryption keeps the archive from listing its stored names before the password is supplied. Choose a password you do not reuse for Windows sign-in or email, record it somewhere separate, and leave the compression settings alone unless archive size matters to you.

Use the 7z archive format for this setup rather than ZIP. 7-Zip can encrypt ZIP contents with AES-256 too, but the 7z setup gives you the file-name encryption option used here, which keeps the stored names out of view until the password is entered.

If 7-Zip is not already installed, use the official 7-Zip download page for the current Windows installer.

  1. Install 7-Zip if needed, then reopen File Explorer.
  2. In File Explorer, right-click the folder you want to protect. On Windows 11, select Show more options if the 7-Zip entry is not visible.
  3. Select 7-Zip > Add to archive….
  4. Set Archive format to 7z.
  5. Under Encryption, type your password in Enter password, then type it again in Reenter password.
  6. Set Encryption method to AES-256 and check Encrypt file names.
  7. Select OK. 7-Zip creates a new archive beside the original folder unless you changed the archive location.

Open the new 7z archive before deleting anything. With file-name encryption enabled, 7-Zip should ask for the password before it shows the files inside. Enter the password and extract one small file to confirm that the archive works.

7-Zip Setting What To Choose What It Changes
Archive format 7z Uses the 7z container and supports AES-256 encryption.
Enter password Your chosen password Creates the credential needed to open the protected archive.
Reenter password Type the same password again Catches a typing mistake before the archive is created.
Encryption method AES-256 Encrypts the archive contents with the method supported by 7-Zip.
Encrypt file names Checked Prevents file and folder names from being listed before the password is entered.
Archive name A recognizable name ending in .7z Creates one encrypted archive that contains the folder and its subfolders.
Original folder Keep it until testing is finished Avoids losing the only readable copy if the password was mistyped or forgotten.

How Does 7-Zip Protect The Folder?

7-Zip protects the archived copy rather than changing the Windows folder itself. The 7z format supports AES-256 encryption, and enabling Encrypt file names also hides the names stored in the archive until the password is supplied.

That distinction matters when you finish the setup. If the unencrypted folder remains beside the archive, anyone with access to that Windows account can still open the original. After you have tested the encrypted archive, move or delete the unencrypted copy according to how you manage your backups.

A password manager is a sensible place to store a long, unique archive password. 7-Zip does not provide an account-based password reset for an archive you created locally, so losing the password can mean losing access to the files.

Use Windows Encryption Without A Separate Folder Password

Windows Encrypting File System can encrypt a folder without installing another app, but it does not add a new password box to that folder. Windows decrypts the files for the authorized signed-in account, and Microsoft states that file encryption is not available in Windows Home.

On an edition that supports file encryption, Microsoft documents this sequence:

  1. Right-click the folder and select Properties.
  2. Select Advanced….
  3. Check Encrypt contents to secure data.
  4. Select OK, then Apply, then OK.

The folder remains easy to open while you are signed in with the account that encrypted it. BitLocker is another built-in option for drive-level protection, but Microsoft limits manual BitLocker Drive Encryption to Windows Pro, Enterprise, and Education.

What You Need Use What To Expect
A separate password for one folder 7-Zip encrypted archive A password prompt protects the archived copy; the plain original remains separate.
Encryption tied to your Windows account Encrypting File System No extra folder password prompt; unavailable in Windows Home.
Protection for a full internal or external drive BitLocker Drive Encryption Drive-level encryption with manual management on Pro, Enterprise, and Education.
Protection from another local user account Windows account permissions plus encryption Useful for account separation, but not a separate password on the folder itself.

What Happens If You Forget The Password?

A forgotten 7-Zip archive password cannot be replaced through Windows because Windows does not manage that password. Keep an unencrypted backup until you have tested the archive, and store the password somewhere separate from the protected files.

  • Test the archive before removing the source folder.
  • Do not reuse the same password you use to sign in to Windows.
  • Keep at least one backup of files you cannot replace.
  • If the folder changes often, create a fresh encrypted archive after meaningful updates rather than assuming the old archive contains the newest files.

Make The Protected Copy The One You Actually Keep

The protected 7z archive is ready to replace the plain folder only after you have reopened it and verified the password. Removing an unprotected duplicate after that test prevents the encrypted archive from giving a false sense of protection.

  1. Close the archive and open it again from File Explorer.
  2. Confirm that 7-Zip asks for the password before showing file names.
  3. Enter the password and extract one file to verify that the contents are readable.
  4. Confirm that your backup plan includes either the encrypted archive or another protected copy.
  5. Remove the unencrypted working folder if you no longer need it, then keep the archive password somewhere separate.

For a true folder-specific password on Windows, the 7-Zip archive method matches the request most closely. EFS is useful when account-based encryption is enough, while BitLocker belongs at the drive level rather than on a single folder.

References & Sources

Please use a real email you check. If it's fake or mistyped, your message won't reach us and we can't reply — wrong addresses are rejected automatically.