Disclosed is a method for encrypting a digital file, comprising the following steps: generating, when a user requests to download a specified digital file, a key, according to inherent information of the user, inherent information of a client terminal used by the user, and inherent information of the specified digital file; encrypting the specified digital file according to the key that has been generated; and performing decryption according to the key and a corresponding decryption procedure, after an encrypted digital file is downloaded at the client terminal used by the user. The technical solution allows dynamic generation of one key each time the digital file is downloaded, thereby truly realizing “one user, one machine, and one copy of the digital file.”