How to Password Protect a OneDrive Folder (Personal Vault + 3 Ways) 2026

Last updated: September 2026

Quick answer: You cannot password protect a OneDrive folder directly; no OneDrive plan has a per-folder password. The four real options are: (1) move the files into Personal Vault on a personal account, which locks behind identity verification and auto-locks after 20 minutes; (2) share the folder with an Anyone link and tick Set password and Set expiration date, which needs a Microsoft 365 subscription and, on work accounts, admin permission; (3) encrypt the folder with 7-Zip or BitLocker before you upload it; (4) share it through a password-protected data room link with view-only access and revocation.

I'm Deqian Jia, co-founder of Peony, a data room company used by 6,800+ customers. People ask me this after right-clicking the folder looking for a "Set password" option and finding nothing. OneDrive protects folders with account sign-in, not folder passwords, so the protection has to come from one of the four layers below. Every Microsoft label and limit in this guide is quoted from Microsoft's own support pages as of September 2026. If you are on Google Drive instead, see how to password protect a Google Drive folder.

Can you password protect a OneDrive folder?

No. OneDrive has no setting that puts a password on a folder, on the free tier, on Microsoft 365 Personal or Family, or on OneDrive for work or school. Access to your own folders is controlled by your Microsoft account sign-in, and access for other people is controlled by sharing links and permissions. That leaves four ways to get the effect people actually want:

Pick by what you are defending against. If the worry is your own laptop or account, use Personal Vault. If the worry is a link travelling too far, use a link password or a data room. If the worry is the file itself being read by anyone at all, encrypt it.

How do you lock a OneDrive folder with Personal Vault?

Personal Vault is the closest thing OneDrive has to a locked folder. Microsoft describes it as "a protected area in OneDrive where you can store your most important or sensitive files and photos," opened with a second step of identity verification such as "your fingerprint, face, PIN, or a code sent to you via email or SMS," or the Microsoft Authenticator app. It is not a password on an existing folder; it is a special folder you move files into.

1. Sign in at onedrive.com with your personal Microsoft account (Personal Vault is not available on work or school accounts).
2. Select the Personal Vault folder in your file list. On first use, select Get started and follow the prompts to confirm your identity.
3. Verify your identity with the method you chose (code by text or email, Authenticator, or Windows Hello on a PC).
4. Drag the files or folders you want to protect into Personal Vault, or select existing OneDrive files and move them in.
5. When you are done, select the Personal Vault folder and select Lock. On the web it also locks itself "after 20 minutes of inactivity"; on mobile "after 3 minutes of inactivity" (adjustable under Me > Settings > Personal Vault); on a Windows PC you set the lock wait time under the Account tab in OneDrive settings.

Three limits matter:

• File count. Microsoft's page says: "If you don't have a Microsoft 365 Family or Personal subscription, you can only add up to three files in your Personal Vault." Subscribers "can add as many files as you want (up to your storage limit)." A free account will hit the three-file cap immediately with a folder of any size.
• Platform. Personal Vault "is only available from the web, the mobile app, or from a windows PC." There is no Personal Vault in the Mac desktop app.
• No sharing. "Sharing of files in Personal Vault is blocked." To share a file you have to move it out first, which means Personal Vault protects storage, not distribution.

Microsoft adds that on a Windows 10 PC, Personal Vault files "are encrypted using BitLocker when in use locally." For tax returns, passport scans, and password backups on a personal account, this is the right tool.

How do you put a password on a OneDrive shared link?

If the goal is to send a folder to someone and stop the link from being useful if it is forwarded, OneDrive can put a password and an expiry on the link. Microsoft's own conditions: Set password and Set expiration date are "Only available to Microsoft 365 subscribers," and "You can set password for OneDrive folders only to Anyone sharing." The password applies to the link, not the folder, so anyone who already has permission to the folder is unaffected.

1. Sign in at onedrive.com, then select the folder by clicking its circle icon.
2. Select Share at the top of the page.
3. Select the settings gear icon and choose Anyone. (Choosing Specific people or People in your organization removes the password and expiry options for folders.)
4. Under Other settings, untick Allow editing unless the recipient needs to change files.
5. Tick Block download if they should view only.
6. Tick Set expiration date and pick a date. After that date "the link won't work anymore."
7. Tick Set password and enter one. Microsoft notes: "You'll need to provide this password separately to anyone you want to share the file with." Send it through a different channel than the link.
8. Select Copy link or add names and select Send.

To change or remove the password later, select the folder, select the Information icon to open the Details pane, select Manage access, then open the link's dropdown to reach the Edit link page, where you can change the password, clear Set password, update or clear the expiration, or select Remove link to kill it.

On OneDrive for work or school, everything above depends on your tenant. Microsoft's page states it plainly: "If a sharing option has been greyed out, your organization's admins may have restricted them. For example, they may choose to disable the Anyone option to prevent usable links being forwarded to others outside your organization." If Anyone is missing, folder passwords are not available to you and you will need one of the next two methods.

A link password does not stop a recipient who knows it from downloading and forwarding the files (unless you also block download), and it does not tell you who opened the folder or which files they looked at.

How do you encrypt a folder before uploading it to OneDrive?

If the folder must be unreadable to anyone without the password, including Microsoft and anyone who gets into your account, encrypt it on your computer first. OneDrive then stores an opaque file and syncs it like any other.

1. 7-Zip (Windows, free). Right-click the folder, choose 7-Zip > Add to archive, set Archive format to 7z, enter a password, set Encryption method to AES-256, and tick Encrypt file names. Upload the resulting .7z file. Full walkthrough in how to password protect a folder and how to password protect a zip file.
2. BitLocker on a VHD. Create a small virtual hard disk, turn on BitLocker on it, and keep the folder inside. Dismount the VHD when you are done, since OneDrive cannot sync the file while it is mounted; once dismounted, the VHDX syncs as one encrypted blob.

The trade-offs: the recipient needs the same tool and the password delivered separately, nothing previews in the browser, and one shared password for a whole folder is the opposite of per-person access. Excellent for personal archives, clumsy for sending files to other people.

How do you share a OneDrive folder through a password-protected data room link?

For folders you send to other people, the fourth option is to move the sharing layer out of OneDrive. Upload the folder to a data room, share one link, and keep the controls with you. I run Peony and 6,800+ customers use it for exactly this, so here is the honest split of what each tier gives you:

• Free ($0): password-protected links, link expiration, email capture, and page-by-page analytics with viewer identity. That already covers what OneDrive gates behind a Microsoft 365 subscription and an admin setting, and it tells you who opened which file.
• Business ($30 per admin per month billed annually, $44 monthly): adds view-only sharing with download prevention, email authentication so a forwarded link is useless without the recipient's inbox, screenshot protection, remote access revocation, and a simple NDA acknowledgement.
• Data Room ($52, $75 monthly): adds dynamic watermarking, signed NDAs, a custom domain, and Screenshield against screen recording.

Drag the folder into a Peony data room, select Share, set a password and expiry, choose whether viewers can download, and copy the link. If someone should lose access, revoke it and the link stops working for them without re-issuing links to everyone else.

Where this is not needed: personal files nobody else opens (Personal Vault wins), a one-off folder to a colleague inside your Microsoft 365 tenant (a People in your organization link wins), or files you are happy for the recipient to keep forever (a plain OneDrive link is fine). Where it earns its place is any folder going to an outside party where you want proof of who read what and the option to cut access later: investor materials, client deliverables, sale documents, HR files.

Which method should you use?

None of the four methods changes OneDrive's underlying storage security, which is strong (see is OneDrive secure?). They change who can open the folder and what they can do with it, which is the question people are really asking.

Frequently asked questions

Can you password protect a OneDrive folder?

No. OneDrive has no per-folder password on any plan, personal or work. What you can do is lock files in Personal Vault (personal accounts only, identity verification instead of a password), put a password and expiry on an Anyone sharing link (Microsoft 365 subscribers only), encrypt the files with 7-Zip or BitLocker before uploading, or share the folder through a password-protected data room link.

How do I lock a folder in OneDrive?

On a personal Microsoft account, open OneDrive on the web, select the Personal Vault folder, select Get started, verify your identity, then move the files in. Select Lock to close it at any time; it locks itself after 20 minutes of inactivity on the web and 3 minutes on mobile. On a work or school account there is no Personal Vault, so lock the folder by restricting the sharing link to Specific people or by encrypting the contents before upload.

Does OneDrive Personal Vault work on OneDrive for business?

No. Microsoft's support page says Personal Vault is available for personal users with a OneDrive Basic, Personal, or Family subscription, and only from the web, the mobile app, or a Windows PC. Work or school accounts do not get it. For a business folder, use Specific people links, an admin-permitted password on an Anyone link, sensitivity labels, or a data room link with view-only access and revocation.

Can I put a password on a OneDrive shared link?

Yes, with two conditions. Microsoft's help page says Set password is only available to Microsoft 365 subscribers, and for folders it works only on Anyone sharing links. Select Share, open the settings gear, choose Anyone, then under Other settings tick Set password and Set expiration date. On a work or school account, if the option is greyed out your organization's admins have restricted it.

Is OneDrive Personal Vault free?

Partly. Personal Vault appears on free OneDrive Basic accounts, but Microsoft's support page says that without a Microsoft 365 Personal or Family subscription you can only add up to three files. Microsoft 365 Personal and Family subscribers can add as many files as they want, up to their storage limit.

How do I share a OneDrive folder without letting people download it?

In the Share dialog, open the settings gear, turn off Allow editing, then tick Block download under Other settings. Recipients can view the files in the browser but the download button is removed. Block download does not stop screenshots or copying from the screen. If you need view-only sharing plus a password, email verification, and the ability to revoke access later, Peony gives you password links and expiry on the Free plan and download prevention with revocation on Business at $30 per admin per month.

Why is Set password greyed out in OneDrive?

Three common reasons. On a personal account, Set password and Set expiration date are only available to Microsoft 365 subscribers. On any account, folder passwords only apply to Anyone links, so choosing Specific people or People in your organization removes the option. On a work or school account, Microsoft's page says a greyed-out sharing option means your organization's admins have restricted it, so ask IT.

Does OneDrive Personal Vault work on a Mac?

Not in the Mac desktop app. Microsoft's support page says Personal Vault is only available from the web, the mobile app, or from a Windows PC. Mac users can still open Personal Vault at onedrive.com in a browser or in the iOS or Android app.

Related resources

• Is OneDrive Secure?
• SharePoint vs OneDrive
• Virtual Data Room vs OneDrive
• How to Password Protect a Folder
• How to Password Protect Files on Windows
• How to Password Protect a Google Drive Folder
• Peony security features