The best encryption software depends on what you're protecting: full disk encryption suits laptops that leave the office, file and container tools suit sensitive documents you send or store, and cloud encryption suits files kept in Dropbox or OneDrive. Eleven options follow in no particular order.
A lost laptop is an inconvenience when its drive is encrypted and a reportable breach when it isn't. The same goes for the spreadsheet of customer details sitting in a shared cloud folder, or the USB stick that went home in someone's coat pocket.
The eleven tools below are listed alphabetically and in no particular order, from features built into Windows and macOS to small open-source projects and business cloud platforms. Every description comes from the vendor's own site, read this week. Passwords are the other half of the story, so see my roundup of open-source password managers too.
Encryption tools compared
In the free plan column, Yes means the tool's own site names a free plan, a free version, a free edition or open-source code. Trial only means a time-limited trial. Not stated means the pages I read named neither, even where there's a button inviting you to try it.
| Tool | Type | Good for | Free plan |
|---|---|---|---|
| AxCrypt | File encryption software | Encrypting individual files and shared folders | Trial only |
| BitLocker | Full disk encryption for Windows | Work laptops that leave the office | Not stated |
| Cryptomator | Cloud storage encryption | Encrypting files before they reach the cloud | Yes |
| FileVault | Full disk encryption for Mac | Protecting the whole startup disk | Not stated |
| Folder Lock | File lock and encryption | Locking private folders on one PC | Yes |
| GnuPG | OpenPGP encryption | Encrypting email and signing files | Yes |
| Kruptos 2 | File encryption for Windows, Mac and Android | Encrypting files, folders and USB drives | Trial only |
| NordLocker | Encrypted file vault and cloud | A private vault with cloud sync | Yes |
| Picocrypt | Lightweight open-source encryption tool | Quick, simple encryption of single files | Yes |
| Tresorit | End-to-end encrypted cloud storage | Sharing sensitive files with clients | Trial only |
| VeraCrypt | Open-source disk and container encryption | Encrypted containers and whole drives | Yes |
Eleven encryption tools to consider
AxCrypt
Best for: Small teams that want to encrypt individual files, including ones synced to cloud folders, without learning anything technical.
BitLocker
Best for: Windows businesses that want every laptop's whole drive encrypted using a feature Microsoft builds into the operating system.
Cryptomator
Best for: People who keep work files in Dropbox, Google Drive or OneDrive and want them encrypted before they ever leave the device.
FileVault
Best for: Mac-based teams that want the whole startup disk encrypted with the protection Apple provides on every Mac.
Folder Lock
Best for: Individuals and small offices that want to lock and encrypt private folders on a Windows PC, with a free edition and a Pro edition.
GnuPG
Best for: Technical users who want to encrypt and sign data and messages with a long-standing free implementation of the OpenPGP standard.
Kruptos 2
Best for: Small businesses that want to encrypt files, folders, cloud drives and USB sticks across Windows, Mac and Android devices.
NordLocker
Best for: Users who want a private encrypted vault for sensitive files that also syncs and backs up through the vendor's cloud.
Picocrypt
Best for: Anyone who wants a very small, very simple tool for encrypting a file before sending or storing it, with the code open on GitHub.
Tresorit
Best for: Businesses in regulated fields that need to store and share files with clients through end-to-end encrypted cloud storage.
VeraCrypt
Best for: Teams that want encrypted containers or encrypted drives on Windows, Mac and Linux using free open-source software.
Want AI doing the heavy lifting in your marketing?
I build the systems that handle the boring 80 percent, so you get your week back. Done properly, with the human kept in.
Disk, file or cloud encryption?
Full disk encryption protects everything on a device when it's switched off or locked, which is why it's the baseline for every work laptop. File and container encryption protects individual documents wherever they travel, including email attachments and USB sticks.
Cloud encryption tools sit in between, encrypting files on your device before they sync to a cloud drive, so the provider only ever stores scrambled data. Most businesses need the first plus one of the other two.
A password isn't always encryption
The ICO's guidance on encryption and data storage says dedicated software for encrypting files is available, including free options such as VeraCrypt. It also warns that some applications let you add a password without encrypting the underlying data, and that you shouldn't store the password or key in the same place as the encrypted file.
So check what each tool really does, and decide where keys and recovery codes will live before you roll anything out. Losing the key to an encrypted drive is just as final as losing the drive.
Questions to ask before you encrypt
- Which devices and files hold personal or confidential data?
- Where will recovery keys be stored, and who can reach them?
- Can staff encrypt files without needing IT every time?
- Will encrypted files still open on every device we use?
- How will we share encrypted files with clients safely?
- What happens to a leaver's encrypted data?
Signs your data isn't protected enough
- Laptops aren't encrypted. A stolen bag becomes a data breach.
- Keys live next to the files. The lock and the key share a drawer.
- Sensitive files travel by plain email. Attachments go out unprotected.
- USB sticks carry client data. Small, easy to lose and rarely encrypted.
Do you make encryption software? Tool makers can ask to be considered for a featured place on this list.
My plain advice on choosing encryption software
Turn on full disk encryption for every work laptop first, using what's already built into the operating system. It takes little effort once it's set up and it covers the most common disaster, a lost or stolen device.
Then pick one tool for sensitive files and teach the whole team to use it the same way, with keys kept somewhere separate and safe. Mixed habits are where encryption fails. If people still email password-protected documents, my guide to password protecting a Word document shows the basics.
Frequently asked questions
What is encryption software?
It's software that scrambles data so only someone with the right key or password can read it, protecting files, drives and messages if they're lost or intercepted.
Is built-in device encryption good enough?
For whole-drive protection on laptops it's usually a strong baseline. You may still want a separate tool for files you send to other people.
Is free encryption software safe to use?
Some well-known free and open-source tools are widely trusted. The bigger risk is usually how keys and passwords are managed, not whether the tool is free.
Does encrypting data remove my data protection duties?
No. Encryption is one security measure. You still need to look after keys, control access and follow the rest of data protection law.
Can I encrypt files in Dropbox or Google Drive?
Yes. Cloud encryption tools encrypt files on your device before they sync, so the cloud provider only stores encrypted copies.
What happens if I lose the key?
Usually the data is gone for good. That's why recovery keys need a safe, separate home before you start.
