How to Password Protect a ZIP File — Windows, Mac, 7-Zip, Online

Windows can create ZIP files natively, but it cannot add meaningful password protection to them. This is one of the most misunderstood facts in everyday file security. This guide covers what actually works, on which platforms, and how to do it correctly — plus a stronger alternative that doesn't require the recipient to have 7-Zip installed.

Method 1 — FileShot File Encrypt (Browser-Based, No Install)

If your goal is sending files securely, you don't need a password-protected ZIP at all — FileShot's encryption is stronger, simpler, and doesn't require the recipient to enter a password (the key is in the link):

1. Go to fileshot.io/tools/encrypt
2. Upload your file or ZIP archive
3. A unique AES-256-GCM encrypted version is created in your browser
4. Share the encrypted download link — the decryption key is embedded in the URL fragment
5. The recipient opens the link and the file is decrypted in their browser

No password to communicate separately. No worry about weak passwords. No 7-Zip required by the recipient.

Method 2 — 7-Zip on Windows (Free, Strong Encryption)

7-Zip is the industry standard for free ZIP encryption on Windows. It creates ZIP archives with AES-256 encryption — the same algorithm used by banks and governments.

Step 1: Install 7-Zip

Download the installer from 7-zip.org (it's free and open source). Run the installer — default settings are fine.

Step 2: Create an encrypted archive

1. Select the files or folders you want to archive
2. Right-click and choose 7-Zip > Add to archive
3. In the Archive format dropdown, select zip
4. In the Encryption section, click in the Enter Password field and type your password
5. In the Encryption method dropdown, select AES-256 (not ZipCrypto)
6. Check Encrypt file names to hide the filenames inside the archive (recommended)
7. Click OK

Method 3 — Mac Terminal (Built-In, No Install)

macOS doesn't offer GUI-based ZIP password protection, but it's built into the Terminal:

1. Open Terminal (Applications > Utilities > Terminal)
2. Run the following command:

zip -er protected.zip /path/to/your/folder

• -e enables encryption
• -r recurses subdirectories (include all files in the folder)
• You'll be prompted to enter and verify a password

For a single file instead of a folder:

zip -e protected.zip /path/to/file.pdf

Note: macOS's built-in zip command uses AES-256 encryption. The archive is compatible with 7-Zip on Windows for decryption.

Method 4 — 7-Zip on Mac (via Homebrew)

If you prefer a consistent tool across platforms:

brew install p7zip
7z a -tzip -p -mhe protected.zip /path/to/folder

Flags: -tzip sets format to ZIP, -p prompts for password, -mhe encrypts headers (filenames).

Sharing a Password-Protected ZIP Securely

Password-protected ZIPs are only as secure as how you communicate the password. Common mistakes:

• Do not send the password in the same email as the ZIP — if someone intercepts the email, they have both
• Do not use weak passwords — ZIP encryption is offline-crackable, so a password like "abc123" or "Summer2024" is breakable in seconds with a dictionary attack
• Do send the ZIP via email and the password via a separate channel (text message, Signal, phone call)
• Password requirements for offline-cracking resistance: minimum 20 characters, random, or use a passphrase of 5+ random words

Alternative: 7z Format (Stronger Than ZIP)

If the recipient has 7-Zip installed, use the 7z format instead of ZIP — it offers better compression and stronger AES-256 encryption with PBKDF2 key derivation, which is significantly more resistant to brute-force attacks than ZIP's simpler key derivation:

7z a -t7z -p -mhe protected.7z /path/to/folder

Or in the 7-Zip GUI: change Archive format to 7z instead of zip.

Which Method Should You Use?

• Sharing over the internet, recipient uses any device: FileShot encrypted link — no app, no password to communicate separately
• Recipient has 7-Zip and you want offline archive: 7-Zip with AES-256 and a strong random password
• Mac user, no extra software: Terminal zip -er command
• Both parties on same platform, need large archive: 7z format with 7-Zip
• Never use: Windows File Explorer "Send to Compressed folder" for anything that needs a password

← Back to Blog