How to Password Protect a USB Flash Drive on Windows and Mac
A USB password method must match the computers that will open the protected files. GiliSoft USB Encryption creates a private and public area for Windows use; macOS Disk Utility can encrypt a Mac-only drive. Neither approach automatically makes the same protected area readable on both systems.
Quick answer
Windows: back up the drive, create a private area with GiliSoft USB Encryption, then test opening and closing its virtual drive. Mac: back up the drive and use Disk Utility to erase it as APFS (Encrypted) when it will be used on Macs. Both: put selected files in an encrypted archive supported by tools on each computer, then test both readers before travel or sharing.
Choose the Right USB Protection Model
| Need | Method | Compatibility to test |
|---|---|---|
| Private and public space on a Windows USB drive | GiliSoft USB Encryption secure area | Protected area opens with the Windows virtual-drive opener; public files remain unencrypted. |
| Encrypt a drive used only with Macs | Disk Utility: APFS (Encrypted) | Windows does not natively open an APFS encrypted volume. |
| Open selected protected files on both Windows and Mac | Cross-platform encrypted archive stored on the USB drive | Install a compatible archive reader on both systems and test the password and file contents. |
| Control which USB devices may connect to a Windows PC | USB device-control policy | Device access rules do not encrypt files on the drive. |
Prepare the USB Drive Safely
- Identify the correct device.
Confirm the model, capacity, drive letter, and contents so another removable disk is not changed by mistake.
- Make a separate backup.
Copy all important files to protected storage and open representative files from that backup.
- Remove unnecessary data.
Do not carry old exports, temporary copies, passwords, or unrelated personal and work files.
- Plan public and private capacity.
Estimate future growth instead of allocating only enough encrypted space for today.
- Choose a recoverable password process.
Use a unique passphrase and store the recovery record somewhere separate from the USB drive.
Create a Private USB Area on Windows
GiliSoft USB Encryption creates the secure area on a removable drive. Back up the drive first because changing its layout can affect existing files.
- Select the correct USB drive.
Connect it, check its capacity and drive letter in the list, and use Refresh if it is not shown.
- Allocate private and public space.
Set the secure-area size for confidential files; the remaining capacity stays public and does not require the private-area password.
- Create and open the secure area.
Click Install, follow the product prompts, then use the USB opener to enter the password and choose an available virtual drive letter.
- Move and verify private files.
Copy a few test files into the mounted private area, open them, close their applications, then close the secure area.
- Reconnect before relying on it.
Safely eject the USB drive and reconnect it on another supported Windows PC. Confirm that private files require the password and public files remain visible.
For every control in the interface, see the illustrated USB Encryption user guide.
Password Protect a USB Drive Used Only on Mac
For a Mac-only drive, use the encryption built into macOS Disk Utility. This is a separate method, not the GiliSoft Windows private-area opener.
- Back up the entire USB drive.
Disk Utility erases the selected device when you choose a new encrypted format. Verify the backup before continuing.
- Open Disk Utility and select the USB device.
Use View > Show All Devices if needed, then confirm the external drive name and capacity.
- Erase with APFS (Encrypted).
Choose an encrypted APFS format, enter a strong password and hint, then finish the erase and copy files back.
- Eject and reconnect to test.
Check that macOS asks for the password and that representative files open after unlocking.
Apple documents the Disk Utility encryption steps. APFS (Encrypted) is for Mac access; it is not a native Windows-readable format.
When the Same USB Drive Must Work on Windows and Mac
Keep the drive format and the file-protection format separate. A public exFAT volume is commonly used for sharing files between Windows and Mac, but public files on it are not encrypted. Put selected private files in an encrypted archive that your chosen software can open on both systems.
Create a small test archive, move it to the USB drive, open it on both computers, and confirm the recipient can enter the password and extract the intended files. Do not promise that GiliSoft USB Encryption’s Windows private area or macOS APFS (Encrypted) will open natively on the other platform.
Verify Before You Rely on the Drive
- Close the private area.
Close open files and applications, then close the mounted encrypted drive.
- Safely remove and reconnect.
Use Windows safe removal, reconnect the device, and confirm only intended public files are visible.
- Open the private area again.
Enter the password and mount it to an available virtual drive letter.
- Check representative files.
Open files from the beginning, middle, and end of the protected set and confirm recent changes were saved.
- Test another supported PC.
Verify the opener and access workflow on a second Windows computer before travel or delivery.
Understand Encryption, Recovery, and Device Risk
Removable-drive encryption protects data at rest, but it does not prevent physical loss, media failure, malicious USB firmware, malware on a host computer, or copying after the encrypted area is opened. Keep Windows and security software current, avoid unknown computers, and scan transferred files according to your organization’s policy.
Microsoft describes BitLocker To Go as whole-drive encryption for removable data drives. GiliSoft USB Encryption instead emphasizes a password-protected private area alongside public storage. Choose between them according to whether public files must remain accessible and how recovery will be managed.
How to Password Protect a USB Flash Drive on Windows and Mac FAQ
Can one USB drive contain both public and private files?
Yes. GiliSoft USB Encryption creates a password-protected private area while the remaining public area can hold ordinary files. Plan the capacity before creating the secure area.
Will a GiliSoft USB Encryption private area open on a Mac?
The USB Encryption private-area opener is for Windows. For a Mac-only drive, use Disk Utility with APFS (Encrypted). For files needed on both systems, choose a cross-platform encrypted file format and test the reader on each computer.
Does encryption protect files after the private area is opened?
Encryption protects data at rest. After the password is entered and the area is mounted, files can be read by the current computer and may be exposed to malware, monitoring, copying, or accidental changes.
What happens if the USB drive is lost?
Files in the closed encrypted area should remain unavailable without the password, while anything left in public storage remains readable. Physical loss can still destroy access to your only copy, so maintain a separate backup.
Is USB Encryption the same as USB Lock?
No. USB Encryption protects a private storage area on a removable drive. USB Lock controls whether selected USB devices or USB network adapters may be used on a Windows PC.
Can I unplug the drive while the private area is open?
Close documents, close the mounted secure area, and use Windows safe removal first. Disconnecting during writes can corrupt files or the storage device.
Where should I keep the password or recovery information?
Keep it in a separate trusted password or recovery system, never as a plaintext note on the same USB drive.