Password-protect a ZIP

Encrypt any files into a single AES-256 password-protected .zip — in your browser. Nothing is uploaded.

Add files

Choose the files to put in the encrypted ZIP.

🔒
Click to choose files
or drop files anywhere on the page
Any file type
0 · 0 B

Set a password

⚠ Save this password somewhere safe

The password cannot be recovered. If you lose it, the files are gone — there is no reset. Share it with the recipient through a separate channel, not alongside the ZIP.

AES-encrypted ZIPs need an extractor that supports them (7-Zip, Keka, WinRAR, macOS Archive Utility). Windows Explorer’s built-in unzip cannot open them.

Encrypt files into a password-protected ZIP

This tool packs the files you choose into a single .zip and encrypts it with a password you set. Anyone who opens the archive has to enter that password before they can read the contents.

It uses WinZip AES with a 256-bit key (AES-256), the same encryption scheme that tools like 7-Zip and WinRAR write. The archive is built in your browser with @zip.js/zip.js, so the files and the password are handled on your device — there is no upload and no server to trust.

AES-encrypted ZIPs are not the same as the old ZipCrypto “password” that most tools used to write, which is weak and easily broken. This tool always uses AES, and the strength comes from the password you choose: a short or common password can still be guessed.

Why your files and password stay on your device

Privacy here is structural, not a promise. The encryption runs in your browser, and there is no server to send anything to:

  • The archive is encrypted entirely in your browser; the password is used locally to derive the key.
  • The password is never stored and never leaves the page — it is not saved, logged, or transmitted.
  • The page is served as static files and makes no request carrying your files or password.
  • The source is open and anyone can read it (MIT). It works offline, which is only possible because nothing leaves the device.

If you want to check for yourself, open your browser's Network panel while you encrypt — no request carries your files or your password. Read the source.

How to use it

  1. Add files

    Click to select files, or drop them anywhere on the page. Add as many as you like, including whole folders.

  2. Set a password

    Type a password and confirm it. Choose something long and hard to guess, and save it somewhere safe — it cannot be recovered if you lose it.

  3. Encrypt and download

    Build the archive and download a single AES-256 encrypted .zip. Share the password with the recipient through a separate channel, not alongside the file.

FAQ

Are my files or password uploaded anywhere?

No. The archive is encrypted entirely in your browser, and the password is used locally to derive the encryption key. There is no server component, so your files and password have no path off your device. You can confirm this in your browser's Network panel.

What encryption does it use?

WinZip AES-256 — a 256-bit AES key, the standard strong encryption for ZIP archives. It is written with @zip.js/zip.js and reads back in 7-Zip, Keka, WinRAR, and other tools that support AES ZIPs.

Can Windows open an AES-encrypted ZIP?

Windows Explorer's built-in unzip does not support AES-encrypted ZIPs, so it may prompt for a password and still fail, or refuse to open the archive. Use a tool that supports AES — 7-Zip and WinRAR are common on Windows; macOS Archive Utility and Keka work on Mac. This is a limitation of the built-in extractor, not the archive.

What happens if I forget the password?

The files are unrecoverable. There is no reset and no back door — that is what makes the encryption meaningful. Save the password somewhere safe, such as a password manager, before you send the archive.

Is a password-protected ZIP actually secure?

The AES-256 encryption is strong, but the archive is only as strong as the password. A short or common password can be guessed by brute force, so choose something long and unique. Note also that the filenames inside the archive are not hidden by ZIP encryption — only the file contents are encrypted.

Does it work offline?

Yes. It is a PWA. After the first visit it is cached, so encrypting a ZIP works without a network connection. You can also install it to your home screen.

Is there a file size or count limit?

There is no fixed limit. Because everything runs in your browser, the practical ceiling depends on your device's memory. Very large sets of files may be slower or need more memory.