GITNUXSOFTWARE ADVICE
Cybersecurity Information SecurityTop 10 Best Desktop Encryption Software of 2026
Ranking roundup of desktop encryption software tools with criteria and tradeoffs for IT teams, including AxCrypt and ESET Endpoint Encryption.
How we ranked these tools
An editor sets the topic, the inclusion criteria, and the evaluation framework before research starts.
AI search agents find sources, extract figures with provenance, and aggregate written reviews. They also transcribe video reviews and podcasts.
Framework: Features 40% · Ease 30% · Value 30%
Gitnux may earn a commission through links on this page — this does not influence rankings. Editorial policy
ESET Endpoint Encryption is the best fit if IT wants centralized, consistent full-disk and file encryption on Windows fleets with predictable recovery handling, whereas AxCrypt works better for teams focused on encrypting and sharing specific documents in Windows file workflows.
Editor’s top 3 picks
Three quick recommendations before you dive into the full comparison below — each one leads on a different dimension.
ESET Endpoint Encryption
Administrative recovery and access workflows are integrated into ESET endpoint governance instead of separate tooling.
Best for: Fits when IT needs centralized encryption enforcement on Windows fleets with consistent recovery handling.
McAfee Complete Data Protection
Editor pickConsole-managed recovery handling tied to encryption policy so administrators can control access without local user action.
Best for: Fits when IT teams need centrally governed disk encryption and repeatable recovery workflows across many PCs.
AxCrypt
Editor pickAxCrypt cloud key recovery ties encrypted file access to account recovery rather than local-only key stores.
Best for: Fits when teams need document-focused encryption and key recovery for Windows file workflows.
Comparison Table
ESET Endpoint Encryption
enterpriseFull-disk and file encryption for business endpoints.
Administrative recovery and access workflows are integrated into ESET endpoint governance instead of separate tooling.
ESET Endpoint Encryption is designed for enterprise endpoint fleets that already run ESET security management, because policy assignment and recovery operations are operated from the same administrative environment. It covers full-disk encryption and removable media encryption as core deployment targets. Pre-boot behavior is part of the experience for managed endpoints, which matters for organizations that need consistent boot-time enforcement across devices.
A practical tradeoff is that the encryption workflow is centered on ESET-managed endpoints rather than on lightweight ad hoc encryption for end users. It fits best when IT needs controlled rollout of encryption states across many Windows devices and needs predictable recovery handling when credentials change.
- +Central policy assignment from the ESET admin console for consistent enforcement
- +Removable media encryption supports portable workflow protection
- +Recovery operations align with managed endpoint administration processes
- +Pre-boot authentication behavior supports boot-time enforcement consistency
- –Container encryption workflows are not the main focus versus disk-wide deployment
- –Operational success depends on IT setting correct recovery and access policies
- –Windows-first integration leaves fewer options for mixed OS environments
- –Troubleshooting encrypted-state issues requires admin console access
IT operations teams
Roll out encryption to managed desktops
Lower variance in enforcement
Security compliance teams
Control removable media data exposure
Reduced off-device leakage risk
Show 1 more scenario
Help desk analysts
Handle user lockouts through recovery
Faster restoration of access
Recovery operations fit the managed endpoint workflow when users cannot complete boot authentication.
Best for: Fits when IT needs centralized encryption enforcement on Windows fleets with consistent recovery handling.
McAfee Complete Data Protection
enterpriseEndpoint encryption for devices and removable media.
Console-managed recovery handling tied to encryption policy so administrators can control access without local user action.
McAfee Complete Data Protection is positioned for enterprise administration, with console-driven rollout, policy configuration, and recovery handling for encrypted volumes. The operational focus is on controlling which endpoints get encryption settings and ensuring recovery paths work without users managing keys. It supports common deployment patterns for managed Windows environments, where AD-integrated enforcement and IT-led remediation are key requirements. Compared with standalone container tools, it aligns to full-disk encryption management rather than ad hoc file protection.
A concrete tradeoff is that organizations still need to invest in planning for policy rollout and recovery procedures, since encryption failures show up as operational tickets if key escrow and recovery agent access are misconfigured. A practical usage situation is a company standardizing encryption posture after a device refresh, then enforcing the same recovery behavior across laptops in different office locations. This approach reduces drift, but it increases dependency on the management setup staying consistent during migrations and OS upgrades.
- +Centralized encryption policy rollout across managed endpoints
- +Recovery workflow integration for encrypted volume access
- +Administrative controls for configuration consistency at scale
- +Audit-oriented operational visibility for encryption events
- –Heavier admin overhead than native BitLocker deployments
- –Key recovery and access paths require careful pre-planning
- –Less suited for personal, self-managed container use cases
- –Migration complexity can increase during OS upgrades and rollbacks
IT security teams
Fleet-wide encryption posture standardization
Reduces configuration drift
Endpoint management teams
Laptop refresh and redeployment
Faster rollout cycles
Show 2 more scenarios
Compliance and audit teams
Encryption operations reporting
Easier audit evidence collection
Provides admin visibility into encryption operations for governance workflows.
Helpdesk and recovery operators
Support tickets for locked drives
Lower mean time to recover
Central recovery processes reduce time spent guiding users through local recovery steps.
Best for: Fits when IT teams need centrally governed disk encryption and repeatable recovery workflows across many PCs.
AxCrypt
SMBFile-level encryption with cloud collaboration features.
AxCrypt cloud key recovery ties encrypted file access to account recovery rather than local-only key stores.
AxCrypt encrypts files rather than volumes, and it integrates into the Windows shell so users can protect or unprotect files from file explorer actions. The app supports key management tied to a user identity and uses the AxCrypt recovery mechanism to restore access without sharing passphrases. Deployment typically relies on endpoint install and user sign-in, which keeps setup closer to standard desktop onboarding than pre-boot enterprise controls. This design makes AxCrypt a practical fit for protecting documents that move across endpoints and email, but it does not cover boot-time protection.
A common tradeoff is that AxCrypt protects files, so a removable drive or inactive workstation still needs separate full-disk controls to prevent data exposure in unencrypted locations. It is a strong option for teams that need document encryption with shared folder workflows and quick access for multiple users. It is less suitable for organizations that require hardware-backed pre-boot authentication and policy enforcement at the volume level.
- +File explorer integration enables right-click encryption for routine documents
- +Account-based key recovery reduces downtime from lost credentials
- +User-level encryption supports predictable access across typical office workflows
- +Clear encrypted file states help prevent accidental sharing
- –No coverage for boot-time encryption of operating system volumes
- –Policy depth is limited versus full enterprise volume encryption management
Legal and compliance teams
Protect sensitive case documents in folders
Fewer access delays after turnover
Sales operations teams
Secure proposal attachments across emails
Reduced exposure from accidental forwarding
Show 2 more scenarios
IT administrators
Standardize desktop file protection onboarding
Lower helpdesk burden
Uses a Windows-first workflow with user accounts and recovery to lower support tickets.
Project teams on shared drives
Control access to project artifacts
Better confidentiality for artifacts
Encrypts project files while users keep a familiar folder-based workflow.
Best for: Fits when teams need document-focused encryption and key recovery for Windows file workflows.
FileVault
enterpriseBuilt-in full-disk encryption for macOS.
Recovery key escrow via managed recovery options integrated with Apple’s enterprise device management workflow.
FileVault is Apple's desktop full-disk encryption for macOS with pre-boot authentication tied to the Mac’s firmware and key lifecycle. Core capabilities include encrypted system and data volumes, recovery via recovery key or institutional recovery mechanisms, and hardware-backed protection through the platform’s secure enclave and TPM-like trust components.
- +Pre-boot unlock flow integrates with Apple firmware trust on Mac hardware
- +Recovery key options support institutional recovery without exposing user keys
- +MDM policy enforcement can require FileVault during device setup
- +Encryption covers system and user data volumes under one user-visible workflow
- –Central key management is not exposed as a standalone admin API
- –Remote recovery and rotation capabilities depend on the device management setup
- –No container mode that supports VeraCrypt-style hidden volumes
- –Cross-platform interoperability is limited to Apple hardware and macOS volumes
Best for: Fits when organizations manage Mac fleets and need MDM-enforced full-disk encryption with recovery controls.
Sophos SafeGuard
enterpriseDevice encryption integrated with Sophos endpoint security.
Centralized encryption enforcement in an AD-connected workflow with recovery coordination for both boot protection and endpoint recovery.
Sophos SafeGuard encrypts Windows endpoints with centralized policy control for full-disk and removable media use cases. It focuses on managed deployment via Active Directory integration and enforced encryption states, including pre-boot authentication tied to corporate recovery processes.
- +Active Directory driven enforcement for encryption and recovery workflows
- +Centralized key and recovery handling supports accountable operations
- +Removable media encryption policy reduces unmanaged data paths
- +Pre-boot authentication integrates with enterprise boot protection
- –Strong governance requirements make initial rollout planning necessary
- –Advanced customization needs policy and deployment expertise
- –Feature coverage varies by endpoint platform and configuration mode
- –Troubleshooting encrypted boot states requires operational familiarity
Best for: Fits when enterprises need directory-based enforcement, audited recovery handling, and encryption policy consistency across many endpoints.
Boxcryptor
SMBEncryption layer for cloud storage providers.
Transparent endpoint file encryption integrated with cloud and sync folder workflows, backed by centralized key management.
Boxcryptor focuses on file-level encryption on Windows, macOS, and select storage targets like cloud-synced folders. It works by encrypting data on endpoints so plaintext stays out of the syncing and collaboration workflow.
- +Encrypts files before they enter sync folders or shared drives
- +Central key management supports controlled access across managed devices
- +Cross-platform client coverage supports mixed endpoint fleets
- +Recovery options help prevent lockouts after key loss
- –Encryption workflow can complicate app compatibility with plaintext files
- –Administration requires careful device enrollment and key provisioning
- –Enterprise governance features depend on proper configuration rollout
- –Performance overhead varies by folder size and sync churn
Best for: Fits when organizations need endpoint file encryption for shared and cloud-synced data.
Cryptomator
SMBOpen-source client-side encryption for cloud files.
Vault mounting presents decrypted content to the operating system while keeping storage encrypted on disk as a vault folder.
Cryptomator delivers file-level encryption through local encrypted vaults that mount as regular folders. Its core workflow centers on per-vault encryption, client-side key handling, and a vault unlock flow driven by a user passphrase.
- +Portable vaults store encrypted files in a normal folder for cloud sync workflows
- +Per-vault unlock workflow keeps encrypted data separate from the rest of the filesystem
- +Cross-platform desktop vault support enables consistent encrypted storage across devices
- +Uses modern authenticated encryption modes via its vault cryptography design
- –Does not provide full-disk or pre-boot protection on the host device
- –Centralized key management and AD-style governance controls are not part of the core product
Best for: Fits when encrypted cloud folders and removable-media file protection matter more than whole-disk lockdown.
GiliSoft File Lock
SMBFile and folder encryption and hiding for Windows.
Per-item file and folder locking workflow that treats protection as a directory and file operation.
GiliSoft File Lock focuses on file-level and folder-level protection on Windows rather than whole-disk encryption. It adds per-item locking, unlock workflows, and an encrypted storage layer for files that must stay protected outside removable drives.
- +Locks specific files and folders instead of requiring full-disk coverage
- +Bulk workflow supports locking multiple items in one operational pass
- +Password-based access supports straightforward end-user unlock actions
- +Recovery mechanisms reduce downtime risk after forgotten credentials
- –Primarily Windows-first workflow limits mixed-platform deployments
- –Centralized enterprise key management and audit trails are limited
- –Policy enforcement lacks native AD GPO style controls for group-wide rollout
- –Does not provide the pre-boot and TPM-first model used by disk encryption
Best for: Fits when teams need file and folder encryption on Windows without deploying full-disk encryption.
DISK Protect
enterpriseFull-disk encryption software for managed endpoints and removable media.
Local policy-driven encryption and recovery workflow built around endpoint-focused administration rather than centralized orchestration.
DISK Protect is a desktop encryption tool focused on controlling how Windows systems store and protect data volumes. It supports full-disk and file-level encryption workflows using local policies for volume protection and on-device unlock.
- +Windows-first encryption workflow for endpoint volumes and protected files
- +Clear separation between volume protection and file-level protection tasks
- +Local pre-boot protection behavior matches common full-disk encryption expectations
- +Recovery handling is operationally straightforward for endpoint administrators
- –Centralized governance depth is weaker than enterprise BitLocker management patterns
- –Policy rollout depends on setup discipline to avoid inconsistent endpoint states
- –Integration surface for external automation and API-driven provisioning is limited
- –Cryptographic and compliance option visibility is narrower than major enterprise suites
Best for: Fits when teams need Windows endpoint encryption with straightforward local control and predictable recovery paths.
Rohos Disk Encryption
SMBWindows software for encrypted virtual disks, USB drives, and removable storage.
Rohos management tooling for deploying encryption tasks across endpoints with built-in recovery options for encrypted volumes.
Rohos Disk Encryption focuses on encrypting Windows drives with a mix of full-disk style workflows and file-level encryption options for removable and internal media. The suite includes centralized management features for rollout and recovery handling in corporate environments.
- +Supports both drive and file-level encryption workflows on Windows systems
- +Offers centralized recovery options for encrypted volumes without relying on users
- +Includes removable media encryption for end users who move data between devices
- +Uses a clear wizard-driven flow for creating and mounting encrypted storage
- –Automation depth for domain-wide enforcement is weaker than BitLocker and similar GPO paths
- –Pre-boot and boot recovery paths feel less standardized than mainstream OS encryption
- –Advanced cryptographic configuration and audit exports are limited for enterprise governance
- –Policy change and key rotation workflows are less mature than dedicated enterprise stacks
Best for: Fits when Windows teams need practical desktop encryption beyond OS volumes with manageable recovery handling.
Conclusion
After evaluating 10 desktop encryption software, ESET Endpoint Encryption stands out as our overall top pick — it scored highest across our combined criteria of features, ease of use, and value, which is why it sits at #1 in the rankings above.
Use the comparison table and detailed reviews above to validate the fit against your own requirements before committing to a tool.
How to Choose the Right Desktop Encryption Software
Desktop encryption software is used to protect data on PCs through full-disk encryption, file encryption, or containerized vaults that rely on recovery workflows administered by IT. This guide compares ESET Endpoint Encryption, McAfee Complete Data Protection, AxCrypt, FileVault, and Sophos SafeGuard for Windows and Mac environments, plus Boxcryptor, Cryptomator, GiliSoft File Lock, DISK Protect, and Rohos Disk Encryption for teams with file-focused or endpoint-volume needs.
The emphasis stays on how policy and recovery are governed in real deployments, not on whether encryption exists in the product. ESET Endpoint Encryption and McAfee Complete Data Protection are highlighted for console-driven recovery and access workflows, while AxCrypt and Boxcryptor center account or cloud workflow key handling.
Desktop Encryption Software for PCs: full-disk, file, and vault controls with governed recovery
Desktop encryption software protects endpoint data by encrypting whole volumes like operating system drives, encrypting files stored on the desktop or inside app directories, or encrypting container vaults that mount decrypted content only after authentication. ESET Endpoint Encryption and McAfee Complete Data Protection are positioned for Windows fleet encryption where centralized policy assignment and recovery handling need to run through the admin console. AxCrypt focuses on document and file encryption with cloud key recovery tied to account recovery workflows, and it does not provide OS boot-time protection.
FileVault targets managed Mac device recovery key escrow via enterprise device management, with the pre-boot unlock flow tied to Apple firmware trust. Boxcryptor and Cryptomator shift the model toward file encryption integrated with sync and folder workflows, using managed keys for access control rather than host pre-boot volume lockdown.
Desktop encryption governance features that decide real-world recovery and rollout
Encryption value shows up in recovery and access workflows that IT can run without local user action. ESET Endpoint Encryption and McAfee Complete Data Protection both emphasize console-managed recovery paths, which reduces the operational gap between encryption policy and unlock requests.
The right desktop encryption software also shapes how administrators roll enforcement across endpoints and how quickly encryption operations converge. AxCrypt and Boxcryptor focus on file workflow access and key recovery tied to accounts or sync, while Sophos SafeGuard and Rohos Disk Encryption center endpoint administration and recovery handling that fits different deployment maturity.
Console-managed recovery access tied to encryption policy
ESET Endpoint Encryption integrates administrative recovery and access workflows into the endpoint governance model, so recovery handling lives with policy enforcement rather than separate tooling. McAfee Complete Data Protection links recovery workflow control to encryption policy so administrators can authorize encrypted volume access without user-driven steps.
Recovery and access model for encrypted file workflows
AxCrypt ties encrypted file access recovery to account recovery rather than local-only key stores, which changes the failure mode when credentials are lost. Boxcryptor encrypts before data enters sync folders or shared drives and uses centralized key management for controlled access across managed devices.
Pre-boot unlock and escrow behavior under enterprise device management
FileVault supports recovery key escrow through managed recovery options within Apple’s enterprise device management workflow, and its pre-boot unlock flow fits Mac firmware trust. Sophos SafeGuard coordinates centralized encryption enforcement for both boot protection and endpoint recovery with an AD-connected workflow.
Vault mounting and encrypted-container workflow for cloud and removable storage use
Cryptomator presents decrypted content through vault mounting while keeping storage encrypted as a vault folder for cloud-sync style workflows. DISK Protect supports endpoint-focused administration with a clear separation between volume protection and file-level protection tasks, which targets Windows desktop protection beyond the OS volume.
Centralized enforcement depth versus local or endpoint-focused control
ESET Endpoint Encryption and McAfee Complete Data Protection prioritize centralized rollout and consistent recovery handling across Windows fleets through their admin consoles. DISK Protect and Rohos Disk Encryption provide more local or endpoint-oriented policy and recovery behavior, which can raise the governance workload during domain-wide standardization.
Windows-first file and folder locking workflows
GiliSoft File Lock delivers per-item file and folder locking as directory and file operations, which fits teams that cannot standardize full-disk encryption on every workflow. Rohos Disk Encryption adds a Windows desktop encryption breadth that includes both drive and file-level workflows with centralized recovery options.
Choose desktop encryption by aligning recovery workflows, enforcement scope, and deployment model
Desktop encryption selection should start from how encrypted data will be accessed during normal operation and during failure. ESET Endpoint Encryption and McAfee Complete Data Protection emphasize centralized console-driven recovery and access workflows, which suits repeatable unlock handling at scale.
If the use case is file-centric instead of OS-volume-centric, the decision shifts toward file workflow encryption and the account or key recovery model. AxCrypt and Boxcryptor fit document and sync folder workflows with account recovery or centralized key management, while Cryptomator shifts to vault mounting with decrypted content presented to the OS only after vault unlock.
Map recovery and access to how administrators will run unlock requests
If administrators need console-controlled recovery and access workflows for encrypted volumes, prioritize ESET Endpoint Encryption or McAfee Complete Data Protection. If recovery must align with account or centralized key access for files in sync and shared drives, prioritize AxCrypt or Boxcryptor.
Match encryption scope to endpoint coverage goals
If the requirement includes OS-volume boot protection and predictable endpoint recovery, FileVault or Sophos SafeGuard aligns with enterprise device management or AD-connected enforcement. If the requirement is beyond OS volumes or includes endpoint file protection workflows, DISK Protect or Rohos Disk Encryption covers endpoint volumes and files with a Windows-first approach.
Pick the workflow model that fits user data movement
If data moves through sync folders and shared drives, Boxcryptor encrypts before content enters those locations, which prevents plaintext from landing in the sync workflow. If encrypted data is stored as cloud folders and must remain in an encrypted vault format, Cryptomator uses per-vault unlock and vault mounting for decrypted presentation.
Decide between directory-level locking and managed encryption enforcement
If the operational requirement is to lock specific files and folders without requiring full-disk rollout discipline, GiliSoft File Lock supports per-item locking for Windows directories. If the operational goal is consistent fleet enforcement and centrally governed recovery handling, prioritize ESET Endpoint Encryption or McAfee Complete Data Protection.
Validate governance depth before committing to rollout automation
If domain-wide enforcement must follow centralized governance patterns, Sophos SafeGuard and the BitLocker-like console paths in ESET Endpoint Encryption and McAfee Complete Data Protection reduce drift between endpoints. If governance depth is secondary to local control and predictable endpoint workflows, DISK Protect and Rohos Disk Encryption can work with tighter rollout process discipline.
Who Desktop Encryption Software selection should fit
Desktop encryption software buying should align to the environment that runs recovery and access tasks day-to-day. Tools with centralized recovery workflows fit centralized IT governance models, while vault and file workflow tools fit document and sync-centered data movement.
Windows endpoint teams enforcing encryption at scale
ESET Endpoint Encryption and McAfee Complete Data Protection fit teams that need centralized encryption policy rollout and governed recovery workflows through a management console on Windows fleets.
Enterprises managing Mac devices with recovery key escrow requirements
FileVault fits organizations that need recovery key escrow integrated into Apple enterprise device management and that require the pre-boot unlock flow tied to Apple firmware trust.
Directory-based enforcement and audited recovery workflows in AD environments
Sophos SafeGuard fits enterprises that want AD-connected encryption enforcement with coordinated recovery for both boot protection and endpoint recovery.
Teams encrypting documents and sync folder content rather than whole OS volumes
AxCrypt and Boxcryptor fit document and sync workflows that depend on account recovery or centralized key management instead of host pre-boot volume lockdown.
Organizations needing encrypted vault mounting for cloud and removable media file protection
Cryptomator fits teams prioritizing vault mounting so decrypted content appears in the OS only after vault unlock while storage stays encrypted as vault folders.
Common desktop encryption pitfalls that break recovery and rollout
Desktop encryption failures usually come from mismatched recovery workflows rather than cryptography capability. The mistake shows up as administrators lacking a centralized path to authorize encrypted access or as end users being blocked from recovery actions without IT involvement.
Choosing file workflow encryption when the requirement includes OS boot recovery and managed unlock
AxCrypt and Boxcryptor can protect files, but they do not provide boot-time encryption coverage for OS volume protection, which makes FileVault or Sophos SafeGuard more aligned when pre-boot unlock and centralized recovery coordination are required.
Underestimating governance setup discipline for centralized policy and recovery handling
McAfee Complete Data Protection and Sophos SafeGuard require careful pre-planning for key recovery and access paths, and weak rollout planning increases the chance of inconsistent endpoint recovery behavior.
Assuming vault-style solutions provide host-level protection
Cryptomator provides vault mounting and encrypted vault storage, but it does not deliver full-disk or pre-boot protection on the host device, so it should not be treated as a replacement for OS-volume encryption.
Overextending local policy tools into domain-wide governance without the required enforcement model
DISK Protect and Rohos Disk Encryption provide endpoint-focused administration and recovery options, but their centralized governance depth is weaker than enterprise BitLocker management patterns, which can increase drift risk across many endpoints.
How We Selected and Ranked These Tools
We evaluated desktop encryption software across features, ease of administration, and value based on how recovery workflows and enforcement behave in practice. Features carried 40% of the scoring weight, ease and value each carried 30%.
ESET Endpoint Encryption separated from the field by integrating administrative recovery and access workflows into the endpoint governance model, which reduces the operational gap between encryption policy assignment and encrypted volume access requests. McAfee Complete Data Protection ranked close due to its console-managed recovery workflow integration tied directly to encryption policy rollout across managed endpoints.
Frequently Asked Questions About Desktop Encryption Software
How does pre-boot authentication work in BitLocker-style encryption on Windows desktops?
Which tools offer centralized recovery workflows for lost credentials instead of local-only key stores?
When full-disk encryption enforcement conflicts with existing endpoint management policies, what breaks in practice?
What tradeoff occurs when choosing file-level encryption over full-disk encryption for removable drives?
How do AD and device management integrations affect encryption rollout and policy enforcement?
Which products support encrypting cloud-synced folders without turning the storage layer into a disk-wide lock?
What admin controls differentiate ESET Endpoint Encryption from DISK Protect for encryption governance?
Which desktop encryption tools are better aligned to document workflows than OS-wide encryption enforcement?
What is the most common encryption recovery failure mode across these tools?
Tools reviewed
Primary sources checked during evaluation.
Referenced in the comparison table and product reviews above.
- Cybersecurity Information SecurityTop 10 Best Software Encryption Software of 2026
- Cybersecurity Information SecurityTop 10 Best Desktop Access Software of 2026
- Cybersecurity Information SecurityTop 10 Best Hard Disk Encryption Software of 2026
- Cybersecurity Information SecurityTop 10 Best Computer Encryption Software of 2026
- Cybersecurity Information SecurityTop 10 Best Password Encryption Software of 2026
Keep exploring
Comparing two specific tools?
Software Alternatives
See head-to-head software comparisons with feature breakdowns, pricing, and our recommendation for each use case.
Explore software alternatives→In this category
Cybersecurity Information Security alternatives
See side-by-side comparisons of cybersecurity information security tools and pick the right one for your stack.
Compare cybersecurity information security tools→