If both of these methods cannot be done, CopyFile and CopyFileEx fail with an ERROR_ENCRYPTION_FAILED error. If this cannot be done, both functions attempt to encrypt the destination file with default keys. Alternatively, call the GetFileAttributes function and examine the FILE_ATTRIBUTE_ENCRYPTED flag in the return value.ĬopyFile and CopyFileEx attempt to encrypt the destination file with the keys used in the encryption of the source file. To retrieve the encryption status of a file, use the FileEncryptionStatus function. It does not affect the encryption of subdirectories below the indicated directory. The EncryptionDisable function disables or enables the encryption of the indicated directory and the files in it. If the file is not encrypted, DecryptFile does nothing but returns a nonzero value indicating success. To decrypt an encrypted file, use the DecryptFile function. If the file is compressed, EncryptFile decompresses the file before encrypting it.

If the file is already encrypted, EncryptFile does nothing but returns a nonzero value, which indicates success. All data streams in the file are encrypted. To encrypt an existing file, use the EncryptFile function. To encrypt a new file, use the CreateFile function with the FILE_ATTRIBUTE_ENCRYPTED flag. The encryption functions cannot be used with the Backup API. To make a directory inaccessible to other users, use the standard methods of access control. A user must specifically change the status of a new file to decrypted if the user does not want the file to be encrypted. Rather, by default, in an 'encrypted' directory all new files in the directory are encrypted at creation. If at a later date the file is marked as not encrypted, it is decrypted and left in a plain text (unsecured) state.ĭirectories are not themselves encrypted. A file marked encrypted is encrypted by the NTFS file system by using the current encryption driver.

A programmer or user may mark a directory or file as encrypted.

Encrypted folder