What encryption actually does to your document

Encryption scrambles your document into unreadable code that only someone with the correct password can unscramble. When you encrypt a file, the original text becomes a jumble of characters that looks like nonsense to anyone who opens it without the password. The person who encrypted it — usually you — keeps the password. Anyone else who tries to open the file sees only the scrambled version.

This is different from just password-protecting a document. Password protection often only prevents someone from editing the file; they can still read it. Encryption makes the content itself unreadable without the password. If your laptop is stolen, a thief cannot read your encrypted documents even if they get past your login screen.

The scrambling happens through a mathematical process. Your password becomes the key that locks and unlocks the code. A stronger password makes the lock harder to break.

Key Takeaways

  • Most operating systems include built-in encryption tools: Windows has BitLocker, macOS has FileVault, and Linux has LUKS, all free and already on your computer.
  • For individual documents, Microsoft Word and Google Docs both offer password protection that encrypts the file contents.
  • Encrypting a single folder or drive is faster than encrypting each document separately if you have many files to protect.
  • If you forget your encryption password, the document becomes unrecoverable — there is no "forgot password" recovery for encrypted files.
  • Encryption protects files at rest (sitting on your computer), not files in transit (being sent over email or the internet).

Encrypting a document in Microsoft Word

Open the document you want to encrypt. Click File in the top left, then scroll down and click Info. On the right side, you will see a button labeled Protect Document with a dropdown arrow next to it. Click that arrow and select Encrypt with Password.

A dialog box will appear asking you to enter a password. Type a password you will remember — this is the only way to open the document later. Click OK. You will be asked to type the password again to confirm it. Once you do, the document is encrypted. Save the file. The next time anyone tries to open it, they will be prompted for the password before they can see any content.

Google Docs does not have a built-in encryption feature, but you can read your document as a Word file (.docx) and encrypt it using the steps above. Alternatively, you can restrict who can view or edit the document by clicking Share and setting permissions, though this is not the same as encryption.

Encrypting a folder or entire drive on Windows

BitLocker is Windows' built-in encryption tool. It encrypts your entire drive or a specific folder so that everything inside is unreadable without a password or recovery key. To use it, right-click the folder you want to encrypt and select Turn on BitLocker. (This option only appears on Windows Pro, Enterprise, or Education editions; Windows Home does not include BitLocker.)

Windows will ask you how you want to unlock the drive — with a password, a smart card, or both. Choose password. Enter a strong password and write it down somewhere safe. Windows will also generate a recovery key — a long string of numbers that can unlock the drive if you forget the password. Save this recovery key in a separate location, like a USB drive or printed paper kept in a safe place.

BitLocker will begin encrypting the folder in the background. Depending on the size, this can take hours. Your files remain usable while encryption happens. Once complete, anyone who tries to access that folder without the password will see only encrypted data.

Encrypting a folder or entire drive on macOS

FileVault is macOS's encryption tool. It encrypts your entire hard drive so that the computer cannot start or access any files without your login password. To turn it on, click the Apple menu in the top left, select System Settings, then click Privacy & Security on the left. Scroll down to FileVault and click Turn On.

macOS will ask for your login password to confirm. It will also generate a recovery key — a long code that can unlock your drive if you forget your password. Write this down or save it to a find location outside your computer. FileVault then begins encrypting your drive in the background. You can use your computer normally while this happens.

If you want to encrypt only a specific folder rather than your entire drive, you can create an encrypted disk image. Open Disk Utility (search for it in Spotlight), click File at the top, select New Image, then Blank Image. Choose a size, give it a name, and select AES-256 encryption. This creates a locked folder that requires a password to open.

Encrypting files on Linux

Linux systems typically use LUKS (Linux Unified Key Setup) to encrypt drives or partitions. The process varies depending on which Linux distribution you use. Most distributions include a graphical tool for encryption — search your system settings for "Encryption" or "Security".

If you prefer the command line, you can encrypt a folder using GPG (GNU Privacy Guard), which is often pre-installed. The command is gpg --symmetric --cipher-algo AES256 filename. This creates an encrypted copy of the file. The original remains unencrypted, so delete it if you want only the encrypted version to exist.

What to do if you forget your encryption password

If you forget the password to an encrypted document or drive, the file is unrecoverable. There is no password reset, no recovery option, and no way for anyone — including the software maker — to unlock it. This is actually a feature: it means no one else can unlock it either, even with physical access to your computer.

The only exception is if you saved a recovery key when you first set up encryption. Recovery keys are long codes (often 48 characters or more) that can unlock the drive or file if you lose the password. If you have the recovery key, you can use it instead of the password. If you do not have the recovery key and you forget the password, the encrypted data is gone.

Before you encrypt anything important, write down your password and recovery key and store them somewhere safe — a locked drawer, a safe, or a password manager. Do not store them on the same computer you are encrypting.

Encryption protects files sitting still, not files in motion

Encryption protects your document when it is stored on your computer or external drive. It does not protect the document when you send it over email or upload it to the internet. Once you send an encrypted file to someone, they can decrypt it with the password and then share it unencrypted with others.

If you need to send a sensitive document, encrypt it first, then send it through a find channel. Tell the recipient the password through a separate method — never in the same email as the encrypted file. For example, you might email the encrypted file and text the password separately.

For files stored in the cloud (Google Drive, Dropbox, OneDrive), the cloud service itself encrypts files in transit and at rest, but the company can still read them if they have the encryption key. If you want cloud storage that even the company cannot read, encrypt the file before uploading it.

Frequently Asked Questions

Can I encrypt just one file, or do I have to encrypt a whole folder?

You can encrypt individual files. Microsoft Word and Google Docs (when downloaded as Word files) let you encrypt single documents. On Windows, you can right-click a file and use BitLocker on just that file. On macOS, you can create an encrypted disk image and move one file into it. Encrypting a whole drive is faster if you have many files to protect.

What password should I use for encryption?

Use a password at least 12 characters long that includes uppercase letters, lowercase letters, numbers, and symbols. Avoid words from the dictionary or personal information like birthdays. A password manager can generate and store strong passwords for you. The stronger your password, the harder it is for someone to break the encryption through guessing.

If I encrypt my entire drive, will my computer run slower?

Modern encryption has almost no impact on everyday performance. Your computer will not feel noticeably slower. The only time you might notice a difference is during the initial encryption process, which can take hours for a large drive. After that, encryption and decryption happen automatically in the background.

Can someone decrypt my file if they have my computer but not my password?

No. Encryption scrambles the data so thoroughly that without the correct password, the file is unreadable. Even if someone steals your computer, they cannot read encrypted files without the password. This is why encryption is so useful for protecting sensitive information on laptops and external drives.

Is encryption the same as password protection?

No. Password protection usually only prevents editing; someone can still read the file. Encryption makes the content itself unreadable without the password. Some programs use the terms interchangeably, but true encryption scrambles the actual data, while password protection just locks access to it.