Password-Protect ZIP
About the Password-Protected ZIP Tool
Create a ZIP file encrypted with AES-256 — the strong WinZip AES standard — from any files or folders. Only someone with the password can read the contents. Privacy note: files never leave your device. Encryption happens entirely in your browser, so neither your files nor your password are ever sent anywhere.
This tool works in your browser: the files and text you use are processed on your device and are not uploaded.
How to use it
- Add files or folders by dropping them on the page or using the buttons.
- Type a password (at least 8 characters) and confirm it.
- Choose a compression level and a name for the ZIP.
- Press “Create encrypted ZIP” and download the result.
- Share the password separately from the file — never in the same email or message.
Frequently asked questions
How secure is the encryption?
Each file is encrypted with AES-256 using the WinZip AE-2 format, with a key derived from your password (PBKDF2). The security depends on your password — use a long, unique passphrase.
Are file names hidden too?
No — this is a limitation of the ZIP format itself. File contents are encrypted, but file and folder names stay visible to anyone who opens the archive. If the names are sensitive, put the files in a ZIP first and then encrypt that ZIP, or use neutral names.
What can open an AES-256 ZIP?
7-Zip, WinRAR, WinZip, PeaZip, Keka, The Unarchiver and this site’s Unzip tool. The built-in Windows File Explorer and macOS Archive Utility can’t open AES-encrypted ZIPs.
I forgot the password — can you recover it?
No. The password never leaves your device and there is no back door, so a lost password cannot be recovered by anyone.
Is my password or file sent to a server?
No. Both stay on your device; the encryption runs locally in your browser.