RBRunbook
Operating Systems

How to Password-Protect a Folder Without Third-Party Software

Both Windows and macOS have built-in encryption strong enough for personal use — no need for a random "folder locker" app from a search result.

DifficultyBeginner
Time10–15 min
PlatformWindows / macOS
CategoryOperating Systems

Most "how to password protect a folder" results point to third-party apps that just hide the folder from view — not real protection, and a common source of adware. Both Windows and macOS include real encryption tools already; they're just a few extra clicks instead of one.

01Windows: create an encrypted virtual drive with a password

Windows folders don't support per-folder passwords directly, but you can create an encrypted container file that mounts as its own password-protected drive — this is actually a stronger approach than folder-level "locking":

  1. Install VeraCrypt, a free, open-source, actively-audited disk encryption tool.
  2. Create a new volume → File container → choose a size → set a strong password.
  3. Mount it as a drive letter whenever you need access; unmount when done, and the contents are unreadable without the password.

This is the same category of encryption used by BitLocker (Windows Pro/Enterprise), just usable on any edition of Windows.

02Windows Pro/Enterprise alternative: EFS for a specific folder

If you're on Windows Pro or Enterprise, built-in Encrypting File System works per-folder:

  1. Right-click the folder → Properties → Advanced.
  2. Check "Encrypt contents to secure data."

This ties encryption to your Windows user account rather than a separate password — meaning it protects against someone else accessing the files from another account, but not if they're logged into your account already. Back up your encryption certificate (Windows prompts you to) — losing it without a backup can make the files permanently unreadable, including to you.

03macOS: create an encrypted disk image

Disk Utility does natively what VeraCrypt does on Windows:

  1. Open Disk Utility → File → New Image → Image from Folder (select your folder), or Blank Image for an empty encrypted container.
  2. Choose "128-bit AES encryption" or "256-bit AES encryption" (256-bit is slower but stronger, and fine for personal use on modern hardware).
  3. Set a password when prompted — this becomes required every time you mount the resulting .dmg.

04What actually doesn't work

Renaming a folder with a leading dot to hide it, using Windows' "Hidden" attribute, or free "folder lock" apps that just move files to a hidden location are all trivially bypassed by anyone who knows to look, and provide no real protection if someone gets access to the raw drive (for example, if it's stolen). None of these are encryption — they're just obscurity.

The one real risk with all of the above There is no password reset for local encryption like this — that's the entire point of it being real encryption. Store the password in a password manager. If you lose it, the data is genuinely, permanently unrecoverable — there's no "forgot password" link for VeraCrypt or an encrypted disk image.
JM
Written by Jordan Malik Senior Editor, Systems & Networking — guide tested on a live Windows / macOS setup before publishing
Last verified: July 2026