How to Disable or Enable Virtual Memory Paging File Encryption

Encrypting the pagefile is a good way to prevent users from reading data paged to disk. But this increases file system operations, which increases the load on system resources.

That is why, depending on what you need, you can decide whether to activate or deactivate this function. Likewise, below we leave you a guide that will help you in depth:

How to Disable or Enable Virtual Memory Paging File Encryption

Understanding the Paging File:

The paging file acts as an extension of your physical RAM. When RAM reaches capacity, the system utilizes the paging file to store less frequently accessed data. This frees up RAM for essential applications, ensuring smooth system performance.

Encryption and Security Benefits:

Enabling encryption for the paging file enhances data security by scrambling the information stored within it. This becomes especially important when handling sensitive data. It's important to note that encryption might introduce a slight performance impact.

Enabling/Disabling Encryption: Available Methods

There are three primary methods to manage paging file encryption in Windows:

1. Command Prompt:

Launch with Administrator Privileges: Utilize the search function in the Start menu and type "cmd." Right-click on "Command Prompt" and select "Run as administrator." Confirm the User Account Control (UAC) prompt if it appears.

Verify Encryption Status: To determine the current encryption state, enter the following command and press Enter: fsutil behavior query encryptPagingFile  The output will indicate whether encryption is enabled or disabled.

Enable Encryption: Execute the command fsutil behavior set encryptPagingFile 1 and press Enter to activate encryption.

Disable Encryption: Run the command fsutil behavior set encryptPagingFile 0 and press Enter to deactivate encryption.

Mandatory Restart: A system restart is necessary for any encryption changes to take effect.

Re-verification: After rebooting, re-run the initial command to confirm successful application of the new encryption status.

2. Group Policy Editor (For Pro, Enterprise, and Education Editions):

Open the Editor: Utilize the search function within the Start menu and type "gpedit.msc." Press Enter to launch the Group Policy Editor (not available in Home editions).

Navigate to Policy Location:  Traverse the following path within the Group Policy Editor:  User Configuration > Administrative Templates > System > Filesystem > NTFS.

Modify Encryption Policy: Double-click on the policy named "Enable NTFS pagefile encryption."

Disable Encryption: Select either "Not Configured" or "Disabled" and click "Apply" followed by "OK" to implement the changes.

Enable Encryption: Choose "Enabled" and click "Apply" followed by "OK" to activate encryption.

Reboot Required:  A system restart is mandatory for the changes to take effect.

3. Registry Editor (Use with Caution):

Important Notice: Modifying the registry can lead to system instability if not done correctly. It is recommended to proceed with caution and create a system restore point before making any modifications.

Launch Registry Editor: Press the Windows key, type "regedit," and press Enter. Confirm the UAC prompt if it appears.

Create Registry Backups (Recommended):  It is highly advisable to create a backup of your registry before proceeding. Consult online resources for detailed instructions on creating a system restore point.

Enable/Disable Using Registry Scripts:

Create two separate text files (e.g., EnablePagingFileEncryption.reg, DisablePagingFileEncryption.reg).

Copy the respective code snippets (provided below) into each file.

Enable Paging File Encryption

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\FileSystem]

"NtfsEncryptPagingFile"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Policies]

"NtfsEncryptPagingFile"=dword:00000001

Disable Paging File Encryption

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\FileSystem]

"NtfsEncryptPagingFile"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Policies]

"NtfsEncryptPagingFile"=-

Save each file with a .reg extension.

Run the Script: Double-click the appropriate script (Enable or Disable) based on your preference. Confirm the UAC prompt. The script will make the necessary registry changes.

Reboot Required: Restart your system for the changes to take effect.

We hope that with this guide you will be able to manage paging file encryption. Remember that this is a critical component used by Windows for memory management.