How to Open an EFS-Encrypted Word File on Another Computer
Question details
The user needs to open an EFS-encrypted Word document on a new Windows 11 laptop but is receiving an insufficient permissions error requesting a certificate.
- Product
- Microsoft Word
- Device & OS
- Windows 10, Windows 11
- Scenario
- Transferring an encrypted Word document between two different Windows computers using a USB drive.
- Observed behavior
- The destination laptop denies access to the Word file, stating insufficient permissions and prompting for an encryption certificate, despite the USB drive being unlocked via BitLocker.
Ensure you have access to the original Windows 10 computer where the document was initially encrypted, as you must export the original user certificate from it.
Export and Import the EFS Certificate and Private Key
Transfer the EFS certificate to the new laptop to authenticate your user profile and unlock the document.
EFS encryption is tied to the user profile of the original computer. Because EFS is completely separate from BitLocker drive encryption, unlocking the USB drive does not bypass file-level encryption. You need to export a PFX certificate file from the old PC and install it on the new one.
On the original Windows 10 computer, press the Windows key + R, type 'certmgr.msc', and press Enter to open the Certificate Manager.
Expand 'Personal' and click on 'Certificates' in the left pane. Find the certificate that lists 'Encrypting File System' under the Intended Purposes column.
Right-click the certificate, select 'All Tasks', and then 'Export'. When prompted by the Certificate Export Wizard, choose 'Yes, export the private key' and select the Personal Information Exchange (.pfx) format.
Set a secure password for the .pfx file. Save it to your USB drive alongside the encrypted Word document.
Plug the USB drive into the Windows 11 laptop. Double-click the .pfx file to open the Certificate Import Wizard, enter your password, and finish the import into the Personal certificate store to grant access to the file.
Remove EFS Encryption on the Original Computer
If you do not need the file to remain encrypted on the new computer, disabling the EFS encryption before transferring is the easiest workaround.
Use WPS Office for Hassle-Free Document Protection
Windows EFS ties your documents to a single PC, making file sharing across devices a hassle. Try WPS Office as a lightweight, highly compatible alternative. WPS Office lets you password-protect Word documents directly within the file, allowing secure access on any Windows, Mac, or mobile device without complex OS certificates.
- 1. Download and Install: Download WPS Office from the official website and install it on your computer.
- 2. Open Your Document: Launch WPS Writer and open the Word document you want to protect.
- 3. Encrypt the File: Go to Menu > Document Encryption > Encryption, set a secure password, and save. The file can now be safely transferred and opened on any device using this password.
Frequently Asked Questions
Why didn't my BitLocker password unlock the EFS encrypted file?
BitLocker and EFS are two distinct encryption technologies. BitLocker encrypts the entire physical drive to prevent offline tampering, while EFS encrypts individual files tied to your specific Windows user profile. Unlocking BitLocker does not grant EFS file permissions.
Can I recover an EFS encrypted file without the original computer?
No. If you no longer have access to the original computer where the file was encrypted and you did not previously back up the EFS certificate (.pfx file), the file is permanently locked and cannot be recovered.
How do I know if my Word document is EFS encrypted?
In Windows File Explorer, EFS-encrypted files typically display a small padlock icon over the file thumbnail, or the file name will appear in green text, depending on your Windows folder settings.
Can I open an EFS encrypted file on a Mac?
No, EFS is a proprietary Windows feature. You must decrypt the file on a Windows PC first before it can be opened on a Mac or Linux device.
