What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
Windows can create a normal ZIP file from File Explorer, but it cannot add a password or encryption to that ZIP. To protect the contents, use an archive utility such as 7-Zip or WinRAR.
For most people, 7-Zip is the best choice: it is free, supports AES-256 encryption, and works from both a graphical interface and the command line. The important trade-off is compatibility—AES-encrypted ZIP files may not open with Windows’ built-in extractor.
Which method should you use?
| Method | Best for | Format | Encryption | Can hide filenames? |
|---|---|---|---|---|
| 7-Zip graphical interface | Most users | ZIP or 7z | ZipCrypto or AES-256 | Only with 7z |
| 7-Zip command line | Scripts and repeatable jobs | ZIP or 7z | AES-256 or other supported methods | Only with 7z and -mhe=on |
| WinRAR graphical interface | Users who already have WinRAR | ZIP or RAR | AES-256 or legacy ZIP 2.0 for ZIP | Only with RAR |
All three methods can create a password-protected ZIP. If you also need to hide filenames, use a password-protected 7z or RAR archive instead. ZIP encryption generally leaves the archive’s filenames, sizes, and directory information visible.
Do these 3 things before closing this tab:
1Clear out junk files and repair common Windows errors2Scan for outdated or missing drivers - takes under a minute3Repair Windows errors before they cause bigger problemsBefore you start: Windows cannot password-protect ZIP files
In Windows 10 and Windows 11, you can create an ordinary ZIP by selecting files in File Explorer, right-clicking them, and choosing Compress to ZIP file. On older Windows builds, the equivalent command is Send to → Compressed (zipped) folder.
#1 Best Overall
- Easily store and access 2TB to content on the go with the Seagate Portable Drive, a USB external hard drive
- Designed to work with Windows or Mac computers, this external hard drive makes backup a snap just drag and drop
- To get set up, connect the portable hard drive to a computer for automatic recognition no software required
- This USB drive provides plug and play simplicity with the included 18 inch USB 3.0 cable
- The available storage capacity may vary.
Neither option includes a password or encryption setting. Windows 11 version 24H2 can browse and extract additional archive formats, but Microsoft states that encrypted archive operations are unsupported. For encrypted archives, Microsoft recommends a third-party utility such as 7-Zip or WinRAR.
Microsoft’s ZIP support documentation provides the relevant Windows limitations.
Method 1: Password-protect a ZIP with 7-Zip’s graphical interface
7-Zip is the easiest free option. Download it from the official 7-Zip website and install the version that matches your PC. The x64 installer is suitable for most modern Windows computers; x86 and ARM64 installers are also available.
- Open File Explorer and select the files or folder to protect.
- Right-click the selection. On Windows 11, choose Show more options if the classic context menu is not visible.
- Choose 7-Zip → Add to archive….
- In Archive format, select zip.
- Under Encryption, enter the password in Enter password, then enter it again in Reenter password.
- Set Encryption method to AES-256.
- Click OK.
7-Zip saves the protected archive in the current folder unless you change the archive name or destination in the dialog.
AES-256 versus ZipCrypto
7-Zip offers two encryption methods for ZIP files:
- AES-256: the stronger choice for sensitive files. It requires an archive program that supports WinZip AES encryption.
- ZipCrypto: an older, substantially weaker method with broader compatibility.
Use ZipCrypto only when the recipient must open the archive with older software and the information does not require strong protection. For confidential documents, use AES-256 and tell the recipient to install 7-Zip, WinRAR, or another utility that supports AES-encrypted ZIP files.
Rank #2
- Easily store and access 5TB of content on the go with the Seagate portable drive, a USB external hard Drive
- Designed to work with Windows or Mac computers, this external hard drive makes backup a snap just drag and drop
- To get set up, connect the portable hard drive to a computer for automatic recognition software required
- This USB drive provides plug and play simplicity with the included 18 inch USB 3.0 cable
- The available storage capacity may vary.
What AES-encrypted ZIP files do not hide
Choosing ZIP in 7-Zip does not encrypt the archive’s filenames. Someone who can access the ZIP may still see its file list, filenames, sizes, and other directory information, even though they cannot open the protected contents.
If the names themselves are confidential:
- Choose 7z instead of zip in the Archive format box.
- Enable Encrypt file names.
- Enter and confirm the password.
- Click OK.
This creates a 7z archive, not a ZIP file, but it provides metadata protection that ZIP does not normally provide.
How to open the protected ZIP
Right-click the archive and choose Show more options → 7-Zip → Extract files…. Enter the password when prompted. Windows may display the archive but is not a dependable extractor for AES-encrypted ZIP contents.
Method 2: Password-protect a ZIP from Command Prompt or PowerShell
The command-line method is useful when you need to repeat the same operation, process multiple folders, or include archive creation in a script.
After installing 7-Zip, the executable is typically here on a 64-bit Windows installation:
Rank #3
- Easily store and access 1TB to content on the go with the Seagate Portable Drive, a USB external hard drive.Specific uses: Personal
- Designed to work with Windows or Mac computers, this external hard drive makes backup a snap just drag and drop. Reformatting may be required for Mac
- To get set up, connect the portable hard drive to a computer for automatic recognition no software required
- This USB drive provides plug and play simplicity with the included 18 inch USB 3.0 cable
- The available storage capacity may vary.
C:Program Files7-Zip7z.exeTo create an AES-256-encrypted ZIP, use:
"C:Program Files7-Zip7z.exe" a -tzip -mem=AES256 -p"YourPassword" "protected.zip" "Folder*"For example:
"C:Program Files7-Zip7z.exe" a -tzip -mem=AES256 -p"River!Glass!28" "protected.zip" "C:UsersAlexDocumentsReports*"The switches mean:
| Part | Purpose |
|---|---|
a |
Add files to an archive. |
-tzip |
Create a ZIP archive. |
-mem=AES256 |
Use AES-256 encryption for the ZIP. |
-p"YourPassword" |
Supply the archive password. |
protected.zip |
Name of the output archive. |
Folder* |
Files to add. |
7-Zip uses the general form 7z <command> [<switches>...] <base_archive_name> [<arguments>...]. The password switch is -p{password}, and the ZIP encryption-method switch is -mem=AES256.
Quick wins for a faster PC:
Repair Windows errors before they cause bigger problemsFix Now →Scan for outdated or missing drivers - takes under a minuteDriver Scan →Do not put real passwords in scripts
The password is visible in the command when supplied with -p. Anyone who can read the batch file, script, command history, or process details may be able to obtain it. Do not paste a real password into shared documentation or a script stored in an ordinary folder.
For automated work, call 7-Zip from a secured application or use a suitable secret-management system. A password embedded in a batch file is not meaningfully secret.
Use *, not *.*, when you mean every file
7-Zip does not interpret *.* exactly like Windows Explorer. It can omit files that have no filename extension. Use * or specify the directory instead:
"C:Program Files7-Zip7z.exe" a -tzip -mem=AES256 -p"YourPassword" "protected.zip" "C:WorkFiles*"See the 7-Zip FAQ for its wildcard behavior.
Creating an encrypted 7z archive from the command line
If hiding filenames is more important than producing a ZIP, use the 7z format and enable header encryption:
Recommended Free Tools
Rank #4
- Easily store and access 4TB of content on the go with the Seagate Portable Drive, a USB external hard drive.Specific uses: Personal
- Designed to work with Windows or Mac computers, this external hard drive makes backup a snap just drag and drop
- To get set up, connect the portable hard drive to a computer for automatic recognition no software required
- This USB drive provides plug and play simplicity with the included 18 inch USB 3.0 cable
- The available storage capacity may vary.
"C:Program Files7-Zip7z.exe" a -t7z -mhe=on -p"YourPassword" "protected.7z" "C:WorkFiles*"The -mhe=on switch encrypts the archive headers, which include the file names. The recipient will need an archive utility that supports 7z files.
Method 3: Password-protect a ZIP with WinRAR
WinRAR can create password-protected ZIP files, although it is trialware/commercial software. Download it from the official WinRAR website.
- Select the files or folder in File Explorer.
- Right-click the selection. Choose Show more options if needed.
- Select WinRAR → Add to archive….
- Under Archive format, select ZIP.
- Click Set password….
- Enter the password twice.
- If the dialog shows ZIP 2.0 legacy encryption, leave it disabled to use AES-256.
- Click OK in the password dialog, then click OK again in the archive dialog.
WinRAR’s AES-256 ZIP archives may not open with old unzip programs or Windows’ built-in extractor. The legacy ZIP 2.0 setting is more widely supported but much weaker. Use it only when compatibility is more important than protection strength.
WinRAR does not support Encrypt file names for ZIP files. That option applies to RAR archives. If filenames and other archive metadata must be hidden, create a RAR archive instead. WinRAR’s documentation recommends RAR rather than ZIP for stronger archive encryption and metadata protection.
Important password and compatibility limitations
- A forgotten password may be unrecoverable. There is no guaranteed recovery mechanism for an encrypted ZIP. Keep the password in a reputable password manager or another secure location.
- Do not send the password with the archive. Send it through a separate channel, such as a phone call or a different messaging service.
- Test the archive before deleting the originals. Extract it with the same type of software the recipient will use and verify that the files open correctly.
- Expect filename exposure with ZIP. Password protection does not automatically hide the archive’s directory information.
- Use AES-256 for sensitive material. Use ZipCrypto or ZIP 2.0 only for legacy compatibility and low-risk files.
- Compression is not a backup. Keep another copy of important files in a secure backup location.
Common claims that are wrong or outdated
| Claim | What is actually true |
|---|---|
| “File Explorer can password-protect a ZIP.” | File Explorer creates ordinary ZIP files but has no password-encryption control. |
| “A password-protected ZIP hides filenames.” | ZIP encryption normally protects contents while leaving filenames and directory metadata visible. |
| “ZipCrypto and AES-256 are equivalent.” | ZipCrypto is the older and weaker encryption method. AES-256 provides substantially stronger protection. |
| “Any ZIP program can open an AES-256 ZIP.” | The extractor must support the relevant WinZip AES format. Windows’ built-in extractor is not a reliable choice. |
| “A forgotten ZIP password can always be recovered.” | There is no guaranteed recovery method. Losing the password can make the contents inaccessible. |
FAQ
Can I password-protect a ZIP without installing software?
No. Windows 10 and Windows 11 can create ordinary ZIP files in File Explorer, but Windows does not provide a password or encryption option. Install 7-Zip or WinRAR to create an encrypted archive.
Best Value
- [Upgraded Version] - This external hard drive features a mirrored logo stripe combined with a striped anti-slip design, and the rounded corners of the casing make it easier to grip. The stripes also have a heat dissipation function, ensuring stable and fast data transfer.
- 【Ultra-thin and quiet】 - The motherboard adopts JMicron 578 noise-free solution, giving you a quiet working environment. Lightweight and portable size designed to fit in your pocket for easy portability.
- 【Ultra-Fast Data Transfers】 - Pairing this external hard drive with JMicron 578 solution USB 3.0 and USB 2.0 interfaces enables blazing-fast data transfer. It boasts theoretical read speeds of up to 125MB/s and write speeds of up to 103MB/s.
- 【Plug and Play】 - With no software to install, just plug it in and the drive is ready to use.The hard disk chip is wrapped with an aluminum anti-interference layer to increase heat dissipation and protect data.
- 【What You Get】 - 1 x Portable Hard Drive, 1 x USB 3.0 Cable, 1 x User Manual, Gift-type shell packaging ,Three-year manufacturer's warranty and free technical support services.
What is the best free way to protect a ZIP file?
Use 7-Zip, choose zip as the archive format, and set Encryption method to AES-256. It is free and provides stronger protection than ZipCrypto.
Will a password-protected ZIP open in Windows?
Do not rely on the built-in Windows extractor, especially for AES-encrypted ZIP files. The recipient should use 7-Zip, WinRAR, or another utility that supports WinZip AES encryption.
Can a ZIP password hide the filenames?
Normally, no. ZIP archives can expose filenames, sizes, and directory information. To hide filenames with 7-Zip, create a 7z archive and enable Encrypt file names. WinRAR can encrypt filenames in RAR archives, not ZIP files.
The Tool Desk
Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Should I use AES-256 or ZipCrypto?
Choose AES-256 for confidential files. Choose ZipCrypto only when you need compatibility with older archive software and the files do not require strong protection.
What should I do if I forget the ZIP password?
There is no guaranteed recovery mechanism. Store the password in a reputable password manager and keep a secure copy before distributing the archive.
The Bottom Line
For a normal Windows PC, install 7-Zip, select the files in File Explorer, choose 7-Zip → Add to archive…, select zip, and set AES-256 encryption. Tell the recipient to use 7-Zip or another AES-compatible extractor.
If the filenames must also be confidential, do not use ZIP: create a 7z archive with Encrypt file names enabled. If you need a repeatable process, use 7-Zip’s command line, but avoid embedding the password in scripts or command history.
Free tools Windows power users keep installed
One-click scans. No signup required.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
