Disable Indexing of Encrypted Files via Registry

This guide explains how to disable Windows Search from indexing Encrypted File System (EFS) files and volumes using the Windows Registry Editor (Regedit). By modifying a specific registry policy, you can prevent sensitive encrypted data from being indexed and cached in plain text within the search database, thereby enhancing the overall data security of your system.

Steps to Disable Indexing of Encrypted Files

  1. Open the Registry Editor
    • Press Windows Key + R to open the Run dialog box.
    • Type regedit and press Enter (or click OK).
    • Click Yes if prompted by User Account Control (UAC).
  2. Navigate to the Windows Search Key

    • Paste the following path into the address bar at the top of the Registry Editor window and press Enter:

      HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Search

    • If the Windows Search key does not exist under Windows:

      • Right-click on the Windows folder (key).
      • Select New > Key.
      • Name the new key Windows Search.
  3. Create or Modify the DWORD Value
    • Select the Windows Search key in the left pane.
    • Right-click in the empty space of the right pane and select New > DWORD (32-bit) Value.
    • Name the new value AllowIndexingEncryptedStoresOrItems.
    • Double-click the newly created AllowIndexingEncryptedStoresOrItems value.
    • In the Value data field, enter 0 (ensure the Base is set to Hexadecimal).
    • Click OK to save the changes.
  4. Apply the Changes
    • To apply the changes immediately, restart the Windows Search service:
      • Press Windows Key + R, type services.msc, and press Enter.
      • Locate Windows Search in the list.
      • Right-click it and select Restart.
    • Alternatively, restart your computer.

Once completed, Windows will permanently skip encrypted files and folders during its automated indexing routines.