How do I encrypt specific files without moving them?

Question

I share a Windows Vista computer with one other user. We're both administrators. I'd like to encrypt the files that are on my side so that if the other user changes my password they won't be able to access my files.

I'd also like to preserve the files as much as possible. For example, I don't want to move them to an encrypted volume and delete the originals or anything. I just want to encrypt the original files and leave them there.

What would be the best option for this? Thanks.

Answer 1

Good your have Windows Vista Ultimate which supports EFS. Only Windows Vista Business, Enterprise and Ultimate editions support EFS which is built-in and quick to use.

Encrypting File System (EFS) is a feature of Windows that you can use to store information on your hard disk in an encrypted format.

Some key features of EFS:

• Encrypting is simple; just select a check box in the file or folder's properties to turn it on.
• You have control over who can read the files.
• Files are encrypted when you close them, but are automatically ready to use when you open them.
• If you change your mind about encrypting a file, clear the check box in the file's properties.

You could also use Veracrypt but it requires making an encrypted volume file which you said you wanted to avoid. Microsoft Windows EFS is simplier. Remember to backup your EFS Certificate or if you have problems you might loose all your encrypted files.

Update: Yes resetting your password will not allow anyone to decrypt the files. Here is a link with more info (a little complex with DRA and recovery keys) https://social.technet.microsoft.com/Forums/windows/en-US/bcabc27b-d993-415a-9ca2-bd07b8a20737/does-changing-users-password-affect-efs-encrypted-files?forum=w7itprosecurity

EDIT in response to comments: Not my first choice, but perhaps just WinZip or 7Zip compressing the directory with AES encryption then deleting it each time you log off. GPG4Win for windows, might let you highlight all of your files and right-click encrypt. This would be manual decrypt then encrypt when you are done.

BleachBit is a great program for wipping free space and cleaning webbrowser data. This is recommended since you may expose un-encrypted files with the methods above.

VeraCrypt and the encrypted volume file makes this much easier. Why don't you want an encrypted volume (just a file say 500mb) that stores your important documents. You decrypt it all at once and then close it to re-encrypt.