Cannot open encrypted files in Windows 11

Question

I have important data on a USB-stick that previously was encrypted. However, I have decrypted the files a few years ago. After upgrading to Windows 11, I cannot extract the files anylonger. I get the message that the files are encrypted but this user has not the right to access the files. My employer has no posibility to go back to Windows 10 and recover my previous userid (I have understand that you automatically receive a new user-id while upgrading Windows) and I have no backup. Are my files locked forever or is there anything that can be done?

Answer 1

It sounds like you are facing an issue with accessing files that were previously encrypted and are now showing as encrypted again after upgrading to Windows 11. Here are a few steps you can try to recover access to your files:

1. Check User Permissions: Ensure that you are logged in with the same user account that was used to encrypt the files. If the encryption was done with a different user account, you will not have access to the files.
2. Use Cipher Tool: You can try using the cipher.exe command to decrypt the files. Open Command Prompt as an administrator and use the following command to decrypt all files in the directory:

      cipher.exe /d /s:<path_to_your_directory>
   

   Replace <path_to_your_directory> with the actual path to where your files are located.
3. File Properties: Right-click on the file, select Properties, then go to the General tab and click on Advanced.... Ensure that the option Encrypt contents to secure data is unchecked.
4. Backup Recovery: If you have any backups from before the upgrade, check if those can be restored.

If these steps do not work, and you do not have the original user credentials or a backup, it may be challenging to recover the files. Unfortunately, without the correct user account or recovery methods, the files may remain inaccessible.

---

References:

• Handling Encrypted Files and Directories
• Decrypt encrypted content

Answer 2

Hi, I understand how important those files are and why this situation feels urgent. The issue happens because Windows uses something called Encrypting File System, which ties the encryption keys to your user account. When you upgraded to Windows 11, your account got a new security identifier, so the old key isn’t linked anymore. To fix this, the first thing to check is whether you ever exported your encryption certificate and private key, usually as a .pfx file, because importing that back will restore access. If you didn’t, look in your old user profile folder for any certificate files or backups. If your company had a recovery agent set up, they can also help decrypt the files. Without the original key or a recovery agent, the data can’t be unlocked because EFS uses strong encryption. Do you remember ever saving a certificate backup or having IT set up recovery options? Or do you still have access to your old profile folder on the machine?Regards,
Aron