How to encrypt files on Windows 11 Home (no BitLocker needed)
You right-click a folder, open Properties → Advanced, and “Encrypt contents to secure data” is greyed out. You search for BitLocker and it isn't there. That's not a bug: Microsoft keeps BitLocker and EFS for Windows 11 Pro, Enterprise and Education. Most laptops ship with Windows 11 Home, so most people can't use either.
You can still protect your files. Here are the four real options on Windows 11 Home, what each one actually protects, and how to choose.
Option 1: Device encryption (check this first)
Many newer PCs running Windows 11 Home have Device encryption, a simpler version built on the same technology as BitLocker. Open Settings → Privacy & security → Device encryption. If you see the page, you can turn it on. If you don't, your PC's hardware doesn't support it.
- Good: free, built in, encrypts the whole drive. If the laptop is stolen while it's off, the thief can't read the disk in another machine.
- Catch: it isn't available on every PC, and it protects the drive, not your files. Once you're signed in, every file is open to anyone using the PC, and a copy you put on a USB stick or in the cloud isn't encrypted. Your recovery key is stored in your Microsoft account.
Option 2: a password-protected 7-Zip archive
Install the free 7-Zip, right-click the files → 7-Zip → Add to archive, choose the 7z format, set a password and tick Encrypt file names. It uses AES-256.
- Good: free and works on every edition of Windows.
- Catch: you extract the archive every time you want to use a file, and decrypted copies are easy to leave behind. If you forget the password, there's no way back in.
Option 3: VeraCrypt
VeraCrypt creates an encrypted container that you mount like a drive. It's free, open source and very strong.
- Good: excellent security and works on Windows 11 Home.
- Catch: it needs administrator rights to install, you decide the container's size in advance, and you mount and unmount it each time. It's built for experts, and a lost password can't be recovered.
Option 4: an app that encrypts files directly
A file-encryption app like Clavis locks individual files where they are. There's nothing to mount and no archive to extract, and it works the same on Home and Pro. Clavis installs without administrator rights and gives you a recovery key in case you forget your password.
To encrypt a file with Clavis on Windows 11 Home:
- Download Clavis and run the installer. No administrator prompt appears.
- Create your vault with a strong password, then write down or print the recovery key it shows you.
- In File Explorer, right-click a file → Show more options → Clavis → Encrypt. Or drag it onto the Clavis window and press Execute.
The file becomes a .enc file with a random name, sealed with AES-256-GCM. Double-click it, or choose Decrypt, to open it again. Clavis Free encrypts files one at a time; Clavis Pro also locks whole folders at once and can watch a folder such as Downloads to encrypt new files automatically.
Which should you use?
| Option | On every Home PC | Protects files after you sign in | If you forget the password |
|---|---|---|---|
| Device encryption | Only on supported hardware | No — protects the drive | Recovery key in your Microsoft account |
| 7-Zip archive | Yes | Yes, inside the archive | No way back in |
| VeraCrypt | Yes (admin rights to install) | Yes, while the container is closed | No way back in |
| Clavis | Yes, no admin rights | Yes, each file | One-time recovery key |
The best setup uses two layers. Turn on Device encryption if your PC has it, so a stolen laptop is useless. Then encrypt your most private files with an app like Clavis, so they stay locked while you're signed in, on a USB stick and in OneDrive.
Not sure what Device encryption covers? Read BitLocker vs Device encryption on Windows 11 Home.
Carrying files on a USB stick? See how to encrypt a USB drive on Windows 11 Home.
Questions
Does Windows 11 Home have BitLocker?
No. The BitLocker tool and EFS (“Encrypt contents to secure data”) are only in Windows 11 Pro, Enterprise and Education. Many Home PCs have Device encryption instead, which encrypts the whole drive with fewer settings.
Is Device encryption the same as BitLocker?
It's built on the same technology, but you can't choose what it encrypts or manage it like BitLocker. It covers the whole system drive, only on supported hardware, and saves the recovery key to your Microsoft account.
Can I password-protect a folder on Windows 11 Home?
Not with a built-in tool. You can put the folder in a password-protected 7-Zip archive, keep it in a VeraCrypt container, or encrypt its files with an app like Clavis. Clavis Pro encrypts a whole folder in one step.
Is Clavis free on Windows 11 Home?
Yes. Clavis Free encrypts and decrypts individual files with the same AES-256-GCM and Argon2id as the paid plans, and includes the recovery key. Pro and Premium add folders, watch folders, cloud folders and sharing.