How to Password-Protect a Zip File on Windows

You want to send a zip file that only the right person can open. Here’s the catch most guides bury: Windows 11 cannot password-protect a zip file on its own. Its built-in compression makes plain, unencrypted zips. To lock one properly you need a free tool and the right settings — and to avoid a weak setting that gives false security. Here’s how to do it correctly.

Last checked: September 2026.

Why Windows alone can’t do it

Windows has never included native zip encryption. The old Windows XP “encrypt contents” option is long gone, and the Windows 11 right-click Compress to ZIP only makes ordinary archives with no password field. Microsoft’s own guidance points you to a third-party tool for encrypted archives. So don’t waste time hunting for a hidden setting — there isn’t one. What you can do is use a free, trusted tool to create a properly encrypted archive in a couple of clicks.

Use 7-Zip (free) to encrypt an archive

Install 7-Zip from 7-zip.org only — it’s free, open source, and the standard tool for this. Then:

1. Select the files or folder you want to protect, right-click → 7-Zip → Add to archive…
2. Set Archive format to zip (opens anywhere) or 7z (stronger, and it can hide the file names).
3. In the Encryption box on the right, type a strong password twice.
4. Set Encryption method to AES-256 — never the default ZipCrypto, which is decades old and easily broken.
5. For the 7z format, also tick Encrypt file names so nobody can even see what’s inside without the password.
6. Click OK. To open it, the recipient double-clicks and enters the password.

ZipCrypto vs AES-256 — why it matters

This is the setting that decides whether your “password-protected” zip is actually secure. ZipCrypto is the legacy zip cipher; it’s compatible with everything but has well-known weaknesses and can be cracked quickly, especially if an attacker has any unencrypted copy of one of the files. AES-256 is modern, strong encryption. Always choose AES-256 for anything sensitive; only fall back to ZipCrypto if a recipient is stuck on very old software that can’t open AES zips — and then don’t treat it as real protection.

Choosing zip vs 7z

• zip + AES-256: opens on any computer with 7-Zip, WinRAR, or most modern archivers. Best when you’re unsure what the recipient has.
• 7z + AES-256 + encrypted names: the strongest option, and it hides the file list too — but the recipient needs 7-Zip or a compatible tool. See our comparison of 7-Zip vs WinRAR.

Getting the password right

Encryption is only as strong as the password. Use a long passphrase — several words are better than a short, complex string. And crucially, send the password through a different channel than the file: email the archive, but send the password by text or a call. Emailing both together defeats the entire purpose. Finally, remember there is no legitimate recovery for a forgotten archive password — if you lose it, the contents are gone.

Troubleshooting

1. Recipient can’t open it. Windows’ built-in unzip can’t reliably open encrypted zips. Tell them to install 7-Zip (it also opens RAR).
2. “Wrong password” but you’re sure it’s right. Check Caps Lock and keyboard layout — passwords are case-sensitive, and a different layout can swap symbols.
3. Only ZipCrypto was available. Make sure you selected the zip or 7z format first; the AES-256 option appears once a valid format is chosen.
4. The archive isn’t smaller. Already-compressed files (JPEGs, MP4s, PDFs) barely shrink — that’s normal. Encryption still applies regardless of size.

FAQ

Can Windows 11 password-protect a zip without extra software? No. You need a tool like 7-Zip or WinRAR.

Is 7-Zip’s encryption actually strong? Yes — AES-256 is the same class of encryption used to protect sensitive data everywhere. The password is the weak link, not the cipher.

Can I password-protect a folder instead of a zip? Windows has no simple built-in folder password; encrypting the folder into an AES-256 archive is the practical, free way.

Does WinRAR do the same thing? Yes, for .rar files — see our WinRAR guide. For a free, one-tool answer, 7-Zip with AES-256 is all you need.

Featured image: Photo: Lee Haywood / Wikimedia Commons, CC BY-SA 2.0