Skip to content
Supported migration paths

Decrypt files

Before decommissioning SafeGuard Enterprise, batch-decrypt all files you encrypted with the SafeGuard Enterprise File Encryption or Synchronized Encryption modules.

To decrypt files that you discover after decommission, see Access encrypted files after decommission.


You must have the following:

  • SafeGuard Enterprise 8.20 or 8.30.

    If you're using an earlier version, we recommend upgrading to SafeGuard Enterprise 8.30, not 8.20.

  • A managed Windows computer with File Encryption or Synchronized Encryption.

Decrypt files on Windows computers

You can decrypt files with the SGFileEncWizard.exe tool, which is available in your SafeGuard Enterprise client installation. For example, on a 64-bit client, the path is:

C:\Program Files (x86)\Sophos\SafeGuard Enterprise\Client\SGFileEncWizard.exe

For details, see Trigger an automated decryption of files.

Decrypt files in cloud storage

To decrypt files in cloud storage that you encrypted using the SafeGuard Enterprise Cloud Storage module, follow the process described in Trigger an automated decryption of files.

When editing your policies in SafeGuard Management Center, create Exclude rules for all your cloud locations and delete any Encrypt or Ignore rules for these locations.

Decrypt files on removable media

To decrypt files on removable media that you encrypted using the SafeGuard Data Exchange module, do as follows:

  1. In SafeGuard Management Center, create a No encryption policy for removable media.
  2. Apply the policy to all users and computers.
  3. Tell your users to perform the following:

    1. Attach the removable media to their computer.
    2. In Windows Explorer, go to the root folder of the removable media and enter *.* in the file search field.
    3. Select all files in the search results.
    4. Right-click one of the selected files and select the SafeGuard File Encryption > Decrypt selected files context menu entry.


Decryption may take several hours, depending on the number of encrypted files and the transfer rate of the removable media.