PrivacyHidden, restricted, encrypted: three different protections隐藏、权限、加密：三种不同的保护
Understand what Windows hiding, permissions and encryption actually protect.了解 Windows 隐藏、权限与加密分别能保护什么。
A hidden file is still a file隐藏文件仍是普通文件
The Hidden attribute changes normal folder display. Someone who enables hidden items, searches through another tool or opens the known path can still find it. Renaming a document or giving its folder an inconspicuous name does not transform its contents. Treat hiding as organization, never as a way to protect readable material when a drive is lost.隐藏属性只改变文件夹的常规显示。开启显示隐藏项目、使用其他工具或知道完整路径的人，仍可能找到文件。改扩展名或给文件夹取不起眼的名称，也不会改变内容。隐藏可用于整理，不能当作丢盘后的内容保护。
Permissions control access in an operating system权限在操作系统中控制访问
NTFS permissions can limit which Windows identities may open or change a folder while Windows enforces those permissions. That is useful for separating local users and applications. It is not a password around the encrypted data and is not equivalent to protection against an administrator, a compromised operating system or someone accessing storage outside the original Windows installation. An app's isolation and an encrypted vault solve related but different problems.NTFS 权限在 Windows 执行这些规则时，限制哪些身份可以读取或修改文件夹，适合分隔本机用户和程序。它不是给数据加密，也不等同于抵御管理员、被控制的系统或脱离原 Windows 读取存储设备的情况。软件隔离与加密保险库解决的是相关但不同的问题。
Encryption protects stored content加密保护保存状态的内容
A locked encrypted vault stores ciphertext rather than an ordinary readable copy. Access still depends on the password or recovery material and intact encrypted objects. After unlocking, the app necessarily works with readable content in memory, and supported previews may use content caches on the bound USB. Encryption does not make an unlocked screen private, remove an outside original, or protect an already compromised computer.锁定的加密库保存的是密文，而不是可直接阅读的普通副本。访问仍依赖密码或恢复材料以及完整的加密对象。解锁后，程序必须在内存处理可读内容，部分预览也会使用绑定外接盘上的内容缓存。加密不会遮住已解锁的屏幕、删除库外原件，也不能保护已被控制的电脑。
Use the protections together组合使用，分别确认边界
Run the app on the computer's internal drive, select supported directly attached NTFS USB storage and import an encrypted copy. Confirm that the copy opens before deciding independently what to do with the original. Lock normally when finished and keep an independent encrypted backup. Do not test deletion, formatting or recovery on your only copy. The vault is not a password-required delete guard around its outer folder.主程序在电脑内部盘运行，选择支持的直连 NTFS 外接存储，导入加密副本。确认副本能打开后，再自行决定如何处理原件。完成操作后正常锁定，另保留独立加密备份。不要拿唯一副本试验删除、格式化或恢复。保险库并不提供外层文件夹删除时强制输入密码的系统防删功能。