### 使用Python实现文件夹加密或设置访问密码 为了使用Python实现文件夹加密或设置访问密码，可以采用多种方法和技术栈。以下是几种常见的解决方案： #### 方法一：利用第三方库`pyAesCrypt` 此方法适用于整个目录及其子项的整体加密操作。 ```python import pyAesCrypt import os from pathlib import Path bufferSize = 64 * 1024 password = "your_password_here" def encrypt_directory(directory_path, password=password): """遍历并加密指定路径下的所有文件""" for root, dirs, files in os.walk(directory_path): for file_name in files: path_to_file = os.path.join(root, file_name) try: with open(path_to_file, 'rb') as fIn: encrypted_file = str(Path(path_to_file).with_suffix('.aes')) with open(encrypted_file, 'wb') as fOut: pyAesCrypt.encryptStream(fIn, fOut, password, bufferSize) # 删除原始未加密版本 os.remove(path_to_file) except Exception as e: print(e) def decrypt_directory(directory_path, password=password): """解密之前被加密过的.aes结尾的文件""" for root, dirs, files in os.walk(directory_path): for file_name in files: if not file_name.endswith(".aes"): continue decrypted_file = str(Path(file_name).stem) full_encrypted_path = os.path.join(root, file_name) full_decrypted_path = os.path.join(root, decrypted_file) try: with open(full_encrypted_path, 'rb') as fIn: with open(full_decrypted_path, 'wb') as fOut: pyAesCrypt.decryptStream( fIn, fOut, password, bufferSize, len(open(full_encrypted_path,'rb').read()) ) # 移除已经成功解码后的.aes文件 os.remove(full_encrypted_path) except ValueError: print("Decryption failed.") ``` 这种方法通过迭代遍历目标文件夹内的每一个项目来逐个加密/解密它们，并且在完成之后移除了原来的明文副本[^1]。 #### 方法二：基于Windows系统的NTFS权限控制 对于希望限制特定用户组或个人对某些资源拥有读取、写入或其他形式的操作权利的情况来说，在支持NTFS分区格式的操作系统上可以直接修改相应ACL（Access Control List）。然而这不是严格意义上的“加密”，而是改变了谁能够看到以及做什么事情的规定。 ```python import win32security import ntsecuritycon as con def set_permissions(folder_path, user_account="Everyone", permission_type="full_control"): """ 设置给定用户的文件夹权限 :param folder_path: 要更改权限的目标文件夹路径字符串 :param user_account: 接受新权限的对象名称，默认为 Everyone :param permission_type: 权限级别选项之一 ('no_access', 'modify', 'read_only' 或者 'full_control') """ dacl = win32security.ACL() account_sid = win32security.ConvertStringSidToSid(win32security.LookupAccountName(None, user_account)[0]) if permission_type == "no_access": access_mode = con.DENY_ACCESS elif permission_type == "read_only": access_mode = con.GENERIC_READ | con.SYNCHRONIZE elif permission_type == "modify": access_mode = con.FILE_GENERIC_WRITE | con.FILE_GENERIC_READ | con.DELETE | con.SYNCHRONIZE else: # 默认赋予完全控制权 access_mode = con.STANDARD_RIGHTS_REQUIRED | \ con.SPECIFIC_RIGHTS_ALL | \ con.ACCESS_SYSTEM_SECURITY | \ con.WRITE_DAC | \ con.WRITE_OWNER | \ con.READ_CONTROL | \ con.SYNCHRONIZE dacl.AddAccessAllowedAceEx(con.ACL_REVISION_DS, con.OBJECT_INHERIT_ACE|con.CONTAINER_INHERIT_ACE, access_mode, account_sid) security_descriptor = win32security.GetFileSecurity(folder_path, win32security.DACL_SECURITY_INFORMATION) security_descriptor.SetSecurityDescriptorDacl(True, dacl, False) win32security.SetFileSecurity(folder_path, win32security.DACL_SECURITY_INFORMATION, security_descriptor) ``` 这段代码允许开发者定义哪些账户可以在本地计算机上的某个具体位置执行什么类型的活动。需要注意的是它只适用于微软操作系统环境内，并依赖于PyWin32扩展包提供必要的接口函数调用能力[^2]。