Skip to content


Now that Seald-CLI is installed and the account created, we can configure Seald-CLI as a Windows Service, in order to automatically encrypt all files placed inside a certain folder, and to be launched automatically upon startup.

  • Install NSSM : choco install nssm. Alternatively, you can download NSSM version 2.24-101 at the address
  • nssm install seald-auto-start then edit the configuration shown as follows:
    • Application:
      • path: C:\Users\YOUR_USER\AppData\Roaming\npm\seald.cmd
      • startup-directory: C:\Users\YOUR_USER\Documents
      • arguments: watch-encrypt --verbose --input CLEARTEXT_DIRECTORY --output ENCRYPTED_DIRECTORY --existing --remove --retries 10 --recipients-emails
    • Details:
      • description: Seald auto-encryption service
    • Log on:
      • This Account: your Windows username and password
    • I/O:
      • stdout: C:\Users\YOUR_USER\Documents\seald-auto-encrypt.log
      • stderr: C:\Users\YOUR_USER\Documents\seald-auto-encrypt.log
    • File rotation:
      • Rotate files: true
      • file older than : 86400 seconds
      • file bigger than: 10000000 bytes
  • nssm start seald-auto-start

Be careful to replace CLEARTEXT_DIRECTORY and ENCRYPTED_DIRECTORY by the chosen folders, --recipients-emails by the email addresses of the chosen recipients, and C:\Users\YOUR_USER\ by your user folder.

All usable parameters are specified in the CLI reference for advanced use.

You can also replace the filepath in stdout and stderr if you want to save the log-files elsewhere.