Files show as encrypted or won't open with a lock icon

Symptoms

• Files show a small lock icon in the file browser
• Files refuse to open and show an access denied message
• Only certain folders or file types are affected
• No ransom note or unusual file extension changes present

Likely causes

• CommonBuilt-in folder or file encryption feature turned onOperating systems have optional encryption features (like EFS on Windows) that can be enabled accidentally or by an IT policy.
• CommonFile permissions changedA permissions change, often from moving files between user accounts, can make files inaccessible without being truly encrypted.
• PossibleCloud sync conflict placeholder filesCloud storage services sometimes show placeholder or locked icons for files not fully downloaded.
• Less commonRansomwareIf file extensions changed and a ransom note appears, this points to ransomware rather than a settings issue.

What to do

1. Check whether the affected files have unusual new extensions or a ransom note nearby, which would point to ransomware instead.
2. Right-click an affected file, check its properties, and look for an 'encrypted' or 'advanced attributes' checkbox that may have been turned on accidentally.
3. Check file and folder permissions to confirm your user account has access rights.
4. If using cloud storage, check whether the file needs to finish downloading or syncing.
5. Try opening the file from a different user account with admin rights to test whether it's a permissions issue.
6. Restore from a recent backup if the files remain inaccessible and no ransomware indicators are present.
7. If ransomware indicators are present, disconnect from the network and follow ransomware response steps instead.

When to call a pro

If ransomware is confirmed or the cause can't be determined, a data recovery or cybersecurity professional should assess the system before you try further fixes.

Safety