Guides / Encrypt a file without BitLocker
Guide / Security

How to encrypt files on Windows 11 without BitLocker

By Param Nimbark. Last updated 2026-10-12.

You have one file that must not be readable, your PC runs Windows 11 Home, and BitLocker is not there. The Properties dialog has an Encrypt option that is greyed out on Home, and even on Pro it never asks for a password. This guide covers what Windows itself can do for a single file, where each option stops short, and then the Seqtrix way: an AES-256-GCM lock on exactly that file, with a password you choose, that you can also fire from a hotkey or a schedule.

Get it from Microsoft Store

Installs from the Microsoft Store, no SmartScreen prompt. Free Starter plan, no account.

Download the installer (211 MB)

Direct installer for Windows 10 and 11, 64-bit, v0.16.0.

See the security toolkit

The manual way: what Windows can do without BitLocker

Try these first if you only need to keep a file away from another account on the same PC. Each one is real, each one is free, and each one has a gap that sends people looking for something else.

Properties > Advanced > Encrypt contents to secure data (EFS)

Right-click the file, open Properties, press Advanced, tick Encrypt contents to secure data, then OK and Apply. This is the Encrypting File System. Microsoft documents that it is not available in the Home edition, and on Pro it ties the file to your Windows account rather than to a password: no prompt ever appears, and losing the account certificate means losing the file.

cipher /e in a terminal

Open Terminal in the folder and run cipher /e "report.xlsx". It is the same EFS encryption from the command line, with the same limits: Home edition reports that the request is not supported, and the protection is bound to your login, not to a password you can hand to someone else.

Settings > Privacy & security > Device encryption

Windows 11 Home does offer device encryption on hardware that qualifies. It encrypts the whole system drive against theft of the machine, and it unlocks the moment you sign in, so it does nothing for one file on a PC that is already running. BitLocker Drive Encryption, the version you can manage per drive, is only on Pro, Enterprise and Education.

A password on a zip

The built-in Compress to ZIP has no password option. Third-party archivers add one, but you have to extract the file every time you need it, and the extracted copy sits readable until you remember to delete it.

The pattern is the same across all four: Windows protects the drive or the account, never a single file with its own password. If the threat is a person at your unlocked desk, a family member on a shared PC, or a sync client that copies whatever it finds, none of them helps.

The Seqtrix way: an AES-256-GCM lock on one file

Seqtrix is a Windows automation app with a Security Lock step built in. Encrypt is one of its five actions, and it works on every edition of Windows 10 and 11, Home included. The step takes a file or a folder and a password, and the whole thing is three clicks once the app is installed.

  1. 1
    Add a Security Lock step

    Open the editor, add a Security Lock step and choose Encrypt under Choose Security Action.

  2. 2
    Pick the file and set a password

    Under Select Target, point the step at the file. Type an encryption password that you will remember.

  3. 3
    Run it

    Run the sequence. The file becomes an encrypted file that Explorer cannot open. Unlock it from the Security Dashboard with the same password.

From template: Encrypt it before the cloud sees it

In Seqtrix open Templates, search for Encrypt it before the cloud sees it and press Try this template. It creates a dated staging folder, opens it so you can drop files in, records a manifest with SHA-256 hashes, compresses the lot, encrypts the bundle with the Security Lock step, and clears the staging folder so only the encrypted bundle is left for your sync client. Replace the zip with your single file if you prefer, or keep the bundle habit. The template is on the Pro plan; the Encrypt step itself is available on every plan, so the three steps above work on the free tier and during the 15-day Advanced trial.

What the lock does to the bytes: AES-256-GCM with a per-file salt, which is the authenticated mode of the same cipher family BitLocker uses. The encrypted file lands in the same folder as the original and shows up in the Files view inside Seqtrix, so you never have to remember where you left it. Explorer sees an opaque file it cannot open. The password lives on this PC only; cloud sync of your sequences never carries it.

Make it automatic (the part a standalone encryption tool cannot do)

The Encrypt step is a step, so anything that can start a sequence can start the lock:

  • • Hotkey. Bind Ctrl+Shift+F9 to encrypt the file and lock the screen when someone walks over. Hotkey triggers are on every plan.
  • • Schedule. Encrypt the working file every evening at 6pm, so it never spends a night readable. See the schedule and trigger types.
  • • File Watch. Encrypt anything that lands in a folder before your backup or sync client picks it up. File Watch is an Advanced and Pro trigger, included in the trial.

Tools like AutoHotkey can press keys for you but have no encryption step of their own; the Seqtrix vs AutoHotkey page goes through that difference honestly.

FAQ

Can I encrypt a file on Windows 11 Home without BitLocker?

Not with the tools Windows Home ships. The Encrypt contents option in file Properties is EFS, and Microsoft states that file encryption is not available in the Home edition. Device encryption covers the whole system drive, not one file. A third-party tool is the only per-file answer on Home, and Seqtrix is one that also automates the lock.

Is EFS good enough if I have Windows Pro?

For protection against a different Windows account on the same PC, yes. EFS never asks you for a password, so anyone using your signed-in session opens the file normally, and if your Windows account or its certificate is lost the file is gone. A password-locked file protects you in the case EFS does not: someone at your unlocked desk.

What cipher does Seqtrix use to encrypt a file?

AES-256-GCM with a per-file salt. The password you type on the step is the only thing that unlocks it. There is no master key, no recovery service and no back door, so keep the password in a password manager.

What happens to the original file after Seqtrix encrypts it?

The readable file is replaced by the encrypted file in the same folder, so nothing is left behind in plain text. Unlock it from the Security Dashboard, or run an unlock sequence with the same password, and the original comes back exactly as it was.

Can the encryption run on its own?

Yes. Because the lock is a step in a sequence, you can start it from a global hotkey, on a schedule, when an app closes, or when a file appears in a watched folder. The guide on encrypting files automatically before backup walks through the File Watch version.

Keep going

Encrypt your first file in a minute

Every install includes a 15-day Advanced trial, no credit card. Paid passes are one-time, with no auto-renewal.

Get it from Microsoft Store

Installs from the Microsoft Store, no SmartScreen prompt. Free Starter plan, no account.

Download the installer (211 MB)

Direct installer for Windows 10 and 11, 64-bit, v0.16.0.