How to password protect any file or folder
- Drop files onto the drop zone above, or click to choose them. Any file type works. To include a whole folder, use Add a folder or drag the folder onto the drop zone; its structure is kept.
- Type a Password.
- Choose the Encryption:
- AES-256 (strong, needs 7-Zip, WinRAR or Keka) – the default and the right choice in almost every case.
- ZipCrypto (weak, opens in Windows Explorer) – only when the recipient must open the archive with Windows' built-in tools.
- Optionally change the Archive name (the default is
protected). - Click Encrypt files and download the encrypted ZIP.
The archive is built and encrypted by zip.js in your browser. Your files and password are never uploaded. Because everything is held in memory, very large selections (several hundred megabytes) are slow, and inputs over 2 GB are refused.
AES-256 or ZipCrypto?
ZIP files support two kinds of password protection, and they are very different in strength:
| AES-256 | ZipCrypto | |
|---|---|---|
| Security | Strong modern encryption | Weak legacy scheme with known attacks |
| Opens in | 7-Zip, WinRAR, Keka and The Unarchiver on macOS, many Linux file managers | Also Windows File Explorer |
| Windows File Explorer | Cannot open it | Can open it |
| Use it for | Anything confidential | Low-risk files for recipients who cannot install software |
If a recipient on Windows reports that Explorer shows an error, the archive is most likely AES-encrypted. Installing the free 7-Zip is usually a better answer than falling back to ZipCrypto.
File names stay visible
ZIP encryption protects the contents of each file, but not the archive's directory. Anyone who receives the ZIP can list the file and folder names and their sizes without the password. A name such as Termination - J. Smith.docx already says a lot.
To hide the names too, pack the files into an ordinary ZIP first with Create ZIP and give it a neutral name. Then encrypt that single ZIP here. The outer archive only reveals the name of the inner one.
Tips
- The encryption is only as strong as the password. Use a long random one from the password generator, and send it by a different channel than the archive.
- To check what someone will see without the password, open the result in the ZIP Viewer: names are listed and encrypted entries show a lock.
- The recipient can extract the files with Unzip Files by entering the password, or remove it permanently with Remove ZIP Password.
- Already have a ZIP? Password Protect ZIP re-packs it with a password instead of nesting it.
Frequently asked questions
Can a forgotten ZIP password be recovered?
Not with this site. Our tools never crack or guess passwords. With AES-256 and a strong password, the files cannot be extracted without it, so keep the originals until the password is safely stored.
Can I protect a single PDF or Word file this way?
Yes, any file can go into the encrypted ZIP. For a file the recipient should open directly in its own app, Protect PDF or Protect Word encrypts the document itself.
What happens with files that have the same name?
If two files end up at the same path, the second is renamed with " (2)" added, the third with " (3)", so nothing is overwritten.
Why can't Windows open the archive?
Windows File Explorer cannot open AES-256 ZIP files. Open it with 7-Zip or WinRAR, or create the archive again with ZipCrypto if strong security is not required.