+1 coinfor reading to the end
+1
Home / Glossary / EFS
Glossary · Security

EFS

Encrypted File System

In plain language

A Windows feature that locks individual files so only the person who encrypted them can open them.

The metaphor

Like a personal locker inside a shared office, with a key that belongs to one employee.

Going deeper

How it works

  • It is turned on per file or folder in Windows Pro and higher.
  • The lock is tied to the user's Windows account.
  • If the account or key is lost, the files stay locked.
  • Many businesses use whole-disk encryption instead, which is simpler to manage.

What can go wrong (example scenario)

A staff member encrypted a client folder with this feature and then left. Their account was deleted, and the folder could not be opened by anyone.

In practice
  • An employee locks a folder of payroll files on a shared PC.
  • An audit asks whether laptops are encrypted, and the answer lists which method is used.
  • An IT provider checks for locked files before retiring a user account.

A question owners ask

Should I use this on my own files?

Only if recovery keys are stored somewhere safe. Whole-disk encryption with a saved recovery key is easier to live with.

Related terms
AAAAuthentication, Authorization, and AccountingAccount takeoverACLAccess Control ListAdmin accountAESAdvanced Encryption StandardAES-256Advanced Encryption Standards 256-bitAISAutomated Indicator SharingAPTAdvanced Persistent Threat

Something here sounds like your problem?

Every WILDCARD card exists to solve one named problem. Find yours.

Pick your problem →