How to Show Hidden Files and Folders in Windows 11

What Windows is hiding from you

Hidden and system are two file attributes, not two folders: any file can carry them, and Explorer suppresses anything marked hidden from normal listings. Microsoft's reasoning is blunt — most of these files exist to make Windows work (configuration, caches, the paging file), and most people who delete them do it by accident. The attribute also has a dark side: malware has used it for decades to make files on infected flash drives disappear.

What you actually see once you flip the switch is far less alarming than it sounds — mostly small config files and folders that apps keep beside your documents. The truly dangerous stuff (kernel files, the boot partition) carries an extra layer of protection and remains hidden anyway.

• desktop.ini — per-folder view and customization settings, present in almost every folder
• AppData — the hidden profile folder C:\Users\<name>\AppData where apps keep settings and caches
• hiberfil.sys and pagefile.sys — hibernation and paging files at the root of C:, often several GB
• System Volume Information — System Restore data stored at the root of every drive
• $Recycle.Bin — the hidden folder where the Recycle Bin keeps deleted files on each drive
• thumbs.db — the thumbnail cache left in picture folders on network and older systems

Turning hidden items on (and off again)

In Windows 11, open any Explorer window and click View in the command bar, then Show → Hidden items — the toggle takes effect immediately across all Explorer windows. While you are in that menu, enable File name extensions too: seeing report.pdf.exe instead of report.pdf is one of the oldest malware tricks, and visible extensions are the countermeasure. In Windows 10 the same switch lives on the View tab of the ribbon, as a Hidden items checkbox.

For the deepest layer, click the three dots (See more) → Options → View tab: the radio button Show hidden files, folders, and drives governs hidden files, and below it the checkbox Hide protected operating system files (Recommended) guards the truly sensitive ones. Windows shows a warning dialog when you uncheck it — that warning is reasonable, so re-check the box when you are done. From the command line, dir /a:h lists hidden files in the current folder, and attrib -h -s file.ext removes the attributes from a specific file.

Hidden files and safety

The rule that keeps you safe: look, but do not delete what you do not recognize. desktop.ini files are cosmetic — delete one and the folder merely loses its customization — but pagefile.sys and hiberfil.sys at the root of C: are managed by Windows itself, and System Volume Information belongs to System Restore; none of them are user junk. If hidden files suddenly appear on your desktop after some cleanup, that is usually an app bug, not an infection.

The classic malicious use of the attribute is the flash drive whose contents appear to have vanished: the files were marked hidden + system and a fake folder or shortcut was planted to lure the click. The fix is one command from an elevated Command Prompt — attrib -h -r -s /s /d E:\*.* (replace E: with the flash drive letter) — followed by a malware scan, because unhiding files does not remove whatever hid them.

Questions and Answers

Read next

All articles · FAQ