Synchronized files use Windows 10 encryption locally but not on the OneDrive for work or school site

Synchronized files use Windows 10 encryption locally but not on the OneDrive for work or school site

This article contains information about how to use the OneDrive sync app (onedrive.exe).

Note: To determine which OneDrive sync client you're using, see Which OneDrive app?

Problem

Consider the following scenario:

You use the following method in Windows 10 to encrypt the contents of a file or a folder:

  1. Right-click the folder or file that you want to encrypt, and then select Properties.

  2. Select the General tab, and then select Advanced.

  3. Select the Encrypt contents to secure data check box, click OK, and then click OK again.

You use the sync app to synchronize the encrypted file or folder:

In this scenario, when you view the synchronized file or folder on your OneDrive for work or school site, Windows 10 encryption is not applied to the file or folder. However, the Windows 10 encryption is applied to the same file or folder on the local hard disk.

Solution

This is expected behavior. Windows 10 encryption occurs only on the local disk on which the file or folder was encrypted. When a file is moved from the local disk to the OneDrive for work or school site, the Windows 10 encryption from the client computer is no longer applied.

More information

The following additional information applies to files that are encrypted in Windows 10 and are uploaded to OneDrive for work or school or SharePoint in Microsoft 365: 

  • Files and folders that are uploaded to the SharePoint in Microsoft 365 Document library are available to users through the usual SharePoint in Microsoft 365 permissions.

  • A Windows 10 client won't encrypt the files or folders within the OneDrive for work or school library on the site.

  • On the OneDrive for work or school site, when you create a file or a folder that's configured to synchronize by using the sync app (onedrive.exe), the item will synchronize to the local computer as a file or folder without encryption. For encryption to occur, you must move the file or folder from the encrypted synchronized folder (such as OneDrive – Contoso) to the desktop or another folder, and then move it back to the encrypted folder in Windows 10.

Note: This article doesn't describe data encryption in SharePoint in Microsoft 365 and OneDrive for work or school.

Need more help?

Online

Get online help
See more support pages for OneDrive and OneDrive for work or school.
For the OneDrive mobile app, see Troubleshoot OneDrive mobile app problems.

OneDrive Admins can also view the OneDrive Tech Community, Help for OneDrive for Admins.

Microsoft virtual support agent icon

Contact Support
If you still need help, contact support through your browser or shake your mobile device while you're in the OneDrive app.

OneDrive Admins can contact Microsoft 365 for business support.

Office 365 community forums

Got feedback?
OneDrive UserVoice is your place to suggest the features you’d like to see us add to OneDrive. While we can’t guarantee any specific features or timelines, we will respond to every suggestion that gets at least 500 votes.

Go to the OneDrive UserVoice.

Need more help?

Expand your Office skills
Explore training
Get new features first
Join Office Insiders

Was this information helpful?

Thank you for your feedback!

Thank you for your feedback! It sounds like it might be helpful to connect you to one of our Office support agents.

×