Permission fixes + smarter auto-lockSee what's new
Finderlock logoFinderlock

Finderlock

File protection that lives in Finder.

Sign in
All posts
securityprivacy

How to Password Protect a Zip File on Mac (and Make the Password Mean Something)

This guide shows how to encrypt a zip file on Mac with different methods, what each one protects, and which to use for sending versus storing files.

6 min read

Finder can’t password protect a zip file on a Mac. Its Compress command makes a zip with no password option. To compress with a password on Mac, you have three realistic choices: Terminal’s zip -e (quick, but weak), a free archiver such as Keka that makes AES-256 7z archives (strong), or an encrypted disk image from Disk Utility (strong, Mac-to-Mac).

The difference between them is the part most guides skip. A password on a zip file is only as good as the encryption behind it. This guide shows how to encrypt a zip file on Mac with each method, what each one protects, and which to use for sending versus storing files.

Quick comparison

Method Encryption File names hidden? Opens on Effort
Finder Compress None; no password option No Anywhere Lowest
Terminal zip -e Standard PKZIP encryption, which the Info-ZIP manual calls weak No Most systems Low
Keka, 7z format AES-256 Yes, on by default Keka, 7-Zip and similar apps Low
Keka, Zip format Zip 2.0 encryption by default No Most systems Low
Disk Utility encrypted image 128-bit or 256-bit AES Contents only visible when mounted Mac Medium

Method 1: Terminal (fast, but weak)

This works with nothing installed.

  1. Open Terminal.
  2. Run zip -e -r archive.zip FolderName, replacing FolderName with your folder. (-r includes everything inside it.)
  3. Type a password when prompted, then type it again to confirm. The -e option prompts you for the password without showing it, which is the safest way to enter it. Info-ZIP’s own manual warns that passwords typed directly on a command line can be seen by other processes and in shell history, so avoid putting the password in the command itself.

The bigger problem is the encryption. The zip manual says -e uses standard PKZIP encryption, which it describes as weak. That’s fine to keep a file from casual eyes. It isn’t something to rely on for tax records, contracts or anything an attacker would want. File names inside the archive also stay visible.

Method 2: Keka (strong, and still free to try)

Keka is a Mac archiver that can create encrypted archives. The key detail is the format you pick:

  • 7z format is encrypted with AES-256. Keka also has an Encrypt filenames option, on by default, so people can’t see what’s inside without the password.
  • Zip format uses Zip 2.0 encryption by default, per Keka’s documentation. It also can’t hide file names, because zip encryption is applied per file. Keka’s documentation says AES-256 zips are possible with a command but less portable. To make a strong archive:
  1. Open Keka and choose the 7z format.
  2. Enter your password in the Password and Repeat fields. The padlock closes.
  3. Make sure Encrypt filenames is ticked.
  4. Drag your files or folder onto the Keka window. The encrypted .7z appears next to the original. There’s a trade-off. Your recipient needs Keka, 7-Zip or a similar app to open it. Keka’s developer has said macOS’s built-in Archive Utility doesn’t support AES-256 archives, so a double-click may not work. A university IT guide recommends AES-256 over ZipCrypto for confidential data, while noting recipients may need to install a tool.

Method 3: An encrypted disk image

If you’re sending files to another Mac user, or storing them yourself, Disk Utility can create an encrypted disk image. You choose an encryption option (128-bit or 256-bit AES), set a password, copy files in and eject. Apple’s own steps are in Create a disk image using Disk Utility.

The cost is effort: you create, mount and eject the image each time, and Apple warns that if you forget the password, you can’t open the image. A mounted image is also open to anyone using your Mac.

Method 4: For files you keep, not send

Everything above is about packaging files to share. If you’re protecting files that stay on your own Mac and that you open often, an archive is clumsy: you unpack it, use the files, and repack it.

Finderlock is built for that case. It locks files and folders from a right-click, using macOS’s own AES-256 encrypted disk images, with Touch ID on paid plans and auto-lock. It isn’t a way to send a protected file to someone else. For that, use a 7z archive or a disk image. How it works is on our security page, and our guide to password protecting a folder on Mac compares the manual options.

Mistakes that undo the protection

  • Sending the password with the file. Use a different channel, such as a text message or a call. A university IT guide gives the same advice.
  • Leaving the original unprotected. Once the archive exists, the original folder is still sitting on your Mac. Delete it if you no longer need it.
  • Choosing a weak password. Encryption can’t save a short or guessable password.
  • Trusting visible file names. With ordinary zip encryption, anyone can see the names of the files inside. Use 7z with Encrypt filenames if the names are sensitive.

Which should you use?

  • Sending to anyone, quickly, with low risk: Terminal zip -e is enough, as long as you accept it’s weak.
  • Sending something sensitive: a Keka 7z archive with Encrypt filenames on, and a password shared separately.
  • Sending to another Mac user, or storing an archive yourself: an encrypted disk image.
  • Protecting files you open regularly on your own Mac: a tool built for it, such as Finderlock, alongside FileVault.

Quick answers

Can I password protect a zip file on a Mac without extra software? Yes, with Terminal’s zip -e, but its encryption is weak. Finder’s Compress command has no password option.

Is a password-protected zip secure? It depends on the encryption. Standard zip encryption is described as weak in the Info-ZIP manual. AES-256 in a 7z archive is much stronger.

Will my recipient be able to open it? A standard zip opens almost anywhere. A 7z with AES-256 needs Keka, 7-Zip or a similar app.

Do I still need FileVault? Yes. FileVault protects your disk if your Mac is lost or stolen. An encrypted archive protects a specific file you share or store.

Next step

If you’re about to send something sensitive, make a 7z archive in Keka and test opening it before you send it. If you have files to protect on your own Mac, try Finderlock’s free plan with its 3 protected items, and set a master password and backup before you lock anything important.

Sources we checked