How to Password Protect a Folder: Windows, Mac & Online (2026)

Windows does not have a built-in right-click option to put a password on a folder. Neither does macOS. But with the right free tools, you can create an encrypted, password-protected archive from any folder in under two minutes — and share it online without exposing the contents to any server.

Password Protect a Folder on Windows with 7-Zip (Free)

7-Zip is the best free solution for folder encryption on Windows. It's open-source, trusted, and produces ZIP or 7z archives with AES-256 encryption. Every major security professional recommends it for this use case.

Step 1: Download and install 7-Zip

Go to 7-zip.org, download the appropriate installer (64-bit for most modern PCs), and install it. It's free and open-source.

Step 2: Right-click the folder

In Windows Explorer, right-click the folder you want to protect. In Windows 11, you may need to click Show more options first to see the classic context menu. Then hover over 7-Zip and click Add to archive…

Step 3: Set the archive format

In the Add to Archive dialog:

• Set Archive format to ZIP (broad compatibility — works on any OS without 7-Zip) or 7z (better compression; the recipient needs 7-Zip or compatible software to extract).
• Set Compression level to Normal or Fast — doesn't affect security.

Step 4: Set the password and encryption

• Scroll to the Encryption section at the bottom of the dialog.
• Enter your password in the Enter password and Reenter password fields.
• Set the Encryption method to AES-256 (not ZipCrypto — ZipCrypto is legacy and weak).
• If using 7z format, check Encrypt file names. Without this, anyone can see the file names inside the archive even without the password.

Step 5: Click OK

7-Zip creates the encrypted archive. You can verify by double-clicking it — you'll be prompted for a password before anything is visible. Delete the original unencrypted folder if needed. The archive is the protected version.

BitLocker: Encrypt an Entire Drive or Volume (Windows Pro)

BitLocker is Windows 10/11 Pro's built-in full-disk encryption. It's the right tool if you want to protect an entire folder hierarchy on a USB drive or a secondary drive — not for sharing individual folders with others.

How to enable BitLocker on a USB drive:

1. Insert the USB drive. Right-click it in File Explorer and select Turn on BitLocker.
2. Choose Use a password to unlock the drive. Enter and confirm the password.
3. Save the recovery key (to a file, print, or your Microsoft account).
4. Choose Encrypt used disk space only (faster for new drives) or Encrypt entire drive.
5. Click Start encrypting. Takes a few minutes depending on drive size.

Once encrypted, inserting the drive on any Windows PC will prompt for the BitLocker password. On macOS, you'd need BitLocker-reading software (e.g., BitLocker Anywhere) to access the drive.

Limitation: BitLocker protects drives, not individual folders. Use 7-Zip for folder-level password protection.

Note: BitLocker is only available on Windows 10/11 Pro, Enterprise, and Education. It is not available on Windows Home.

How to Password Protect a ZIP File (Detailed)

A ZIP file with AES-256 encryption is the most widely compatible format for a password-protected archive. Anyone on Windows, Mac, or Linux can open a ZIP file with standard tools — but a password-protected ZIP requires a compatible extraction tool (7-Zip on Windows, The Unarchiver or Keka on Mac, built-in Archive Manager on Linux).

Using 7-Zip (Windows — recommended):

1. Select all files/folders you want to protect (Ctrl+A for all, or hold Ctrl to select multiple).
2. Right-click → 7-Zip → Add to archive…
3. Archive format: ZIP
4. Encryption method: AES-256 (not ZipCrypto)
5. Enter and confirm password.
6. Click OK.

Using the macOS built-in ZIP (no encryption — not recommended):

Right-clicking a folder and choosing "Compress" on macOS creates a ZIP file with no password. macOS's built-in ZIP does not support encryption. Use Keka (free app at keka.io) or 7-Zip for Mac instead.

Using WinRAR (Windows, paid but free trial):

Right-click → Add to archive → Set a name → Under Advanced, click Set password → Enter password, check Encrypt file names → OK.

How to Password Protect a Folder on Mac

macOS has no right-click option to add a password to a folder directly. There are two main approaches:

Option 1: Disk Utility — Create an Encrypted Disk Image

Disk Utility creates a .dmg encrypted container from a folder. This works like a virtual encrypted vault on your Mac.

1. Open Disk Utility (Applications → Utilities → Disk Utility, or Spotlight: Disk Utility).
2. Go to File → New Image → Image from Folder…
3. Select the folder you want to protect. Click Choose.
4. Name the image file and choose where to save it.
5. Set Encryption to 256-bit AES encryption (recommended) or 128-bit.
6. Set Image Format to read/write (if you want to add files later) or compressed (read-only but smaller).
7. Enter and confirm a password. Important: uncheck "Remember password in my keychain" unless you want macOS to auto-unlock it.
8. Click Save. The .dmg file is created.

To open the protected folder, double-click the .dmg file and enter the password. It mounts as a virtual drive on your desktop. When you eject it (right-click → Eject), it's locked again.

Option 2: 7-Zip for Mac or Keka — Create a Password-Protected Archive

If you want to produce a .zip or .7z archive (cross-platform compatible), install Keka (free at keka.io) or p7zip via Homebrew.

With Keka:

1. Open Keka. Select the output format (ZIP or 7-Zip). Enter a password in the password field.
2. Drag the folder from Finder into the Keka window. Keka creates the encrypted archive automatically.

Via Terminal with p7zip:

7z a -tzip -p -mem=AES256 protected.zip /path/to/folder

Replace /path/to/folder with your folder path. The command will prompt for a password.

Sharing a Password-Protected Folder Online

Once you have an encrypted archive, you might need to share it with someone. Most cloud services — Google Drive, Dropbox, WeTransfer — store the file on their servers where staff can access it under a legal request or breach. Sending a password-protected ZIP through those services is better than no encryption, but the envelope itself is still in someone else's hands.

FileShot adds a second layer: it encrypts the archive again using zero-knowledge AES-256-GCM in your browser before the file ever reaches FileShot's servers. The server receives only encrypted ciphertext and has no knowledge of the archive's contents — or even that it's a ZIP file.

Two-layer sharing workflow:

1. Compress the folder into a password-protected 7z or ZIP archive (using steps above).
2. Upload the encrypted archive to FileShot.io. Free tier: files up to 10 GB.
3. FileShot encrypts the file in your browser with a key that goes into the URL fragment — not the server.
4. Share the FileShot link with the recipient.
5. Send the archive password through a separate channel (SMS, Signal, in person). Never in the same email as the link.

The recipient can access the file via the FileShot link (layer 1 decryption), then needs the archive password to extract it (layer 2 decryption). Two breaches would need to occur simultaneously to expose the actual content.

Method Comparison: Which Should You Use?

Always use AES-256 encryption. Avoid ZipCrypto — it's cryptographically broken and trivially cracked with known-plaintext attacks.

Why "Password Protecting" Without Encryption Is Not Secure

Some tools — including older versions of Word, Excel, and certain PDF tools — offer "password protection" that doesn't actually encrypt the file. They may lock the interface or set a document-open password, but the underlying file bytes are readable by anyone with a hex editor or a dedicated cracking tool.

True protection requires that the file contents be mathematically transformed with AES-128 or AES-256 encryption — not just locked behind an interface gate. When evaluating any "password protection" solution, confirm it uses AES-128 or AES-256.

Additionally, a strong password is required. A password-protected ZIP with the password "hello" can be cracked with a dictionary attack in seconds. Use a passphrase of at least 16 characters, mixing letters, numbers, and symbols — or use a password generated by a password manager.

Frequently Asked Questions

Can you password protect a folder in Windows without third-party software?

Windows does not have a built-in right-click option to add a password to a folder. The Properties → Security tab controls which Windows user accounts can access the folder — not password-based access for external sharing. To add a password, use 7-Zip (free), BitLocker (Windows 10/11 Pro, whole drive), or Windows EFS (Pro). For most users, 7-Zip is the fastest free solution.

How do I password protect a ZIP file?

Install 7-Zip (free at 7-zip.org). Right-click the folder or files → 7-Zip → Add to archive. Set Archive format to ZIP. Set Encryption method to AES-256. Enter a password in both fields and click OK. The resulting ZIP file requires the password to extract — and cannot be opened without it even if the file is intercepted in transfer. Note: ZIP format shows file names without the password; use 7z with "Encrypt file names" to hide the file list entirely.

How do I password protect a folder on a Mac?

On macOS, use Disk Utility to create an encrypted disk image (File → New Image → Image from Folder → choose AES-256). This creates a .dmg file that requires a password to mount. Alternatively, install Keka (free at keka.io) and drag the folder into Keka with a password set to produce a password-protected ZIP or 7z archive.

Is password protecting a folder the same as encrypting it?

Not always. Password protection can mean an interface lock with no actual data transformation — the file bytes remain readable without the password being used for decryption. True folder encryption means AES-128 or AES-256 mathematically scrambles every byte of the content. 7-Zip, BitLocker, VeraCrypt, and macOS Disk Utility all use real encryption. Always confirm the tool uses AES-128 or AES-256, not just a password lock.

How do I share an encrypted folder securely online?

Compress the folder into a 7z or ZIP archive with AES-256 encryption and a strong password. Upload the archive to FileShot.io, which encrypts the archive again with zero-knowledge AES-256-GCM in your browser — FileShot's server never sees the archive contents. Share the FileShot link with the recipient and the archive password through a separate channel.