Sending a file by email or file transfer? Adding a password to a ZIP archive gives the recipient a simple, cross-platform way to receive encrypted files. The recipient can open the ZIP on Windows, macOS, or Linux — they just need the password you share separately.
This guide covers how to create a password-protected ZIP on Mac using both a GUI app and the built-in Terminal command.
Method 1: ArchiveZero (GUI — No Terminal Required)
ArchiveZero makes creating a password-protected ZIP straightforward without typing any commands:
- Open ArchiveZero.
- Click Create Archive or drag files and folders into the Create view.
- Add the files or folders you want to include.
- Enable the Password Protection toggle.
- Enter your password. ArchiveZero shows a strength indicator so you can choose a secure password.
- Choose your compression level (Fastest, Balanced, or Maximum).
- Click Create ZIP.
ArchiveZero saves the ZIP to the same folder as your source files by default, or lets you choose a destination. Your password is never stored or logged — it is used only during archive creation and then discarded.
Note: Password-protected ZIP creation requires a Pro license. The free tier supports creating unencrypted ZIP archives.
Method 2: Terminal (Built In, Free)
macOS's built-in zip command supports password-protected archives via the -e flag (for "encrypt"):
zip -e archive.zip file1.pdf file2.pdf
Terminal will prompt you to enter and verify the password. The resulting archive.zip requires the password to open.
To include a folder and its contents:
zip -er archive.zip /path/to/folder/
The -r flag means "recursive" — it includes everything inside the folder.
Limitation: macOS's zip command uses AES-256 for encryption, but it uses ZipCrypto by default on older macOS versions. Most modern versions use AES-256, which is considered strong. Check your macOS version if security is critical.
Method 3: Disk Utility (Encrypts a Disk Image, Not a ZIP)
macOS Disk Utility can create encrypted .dmg files, which is a different format from ZIP. .dmg files are not cross-platform and require macOS to open. Avoid this method if the recipient is on Windows or Linux.
Encryption Strength: What to Know
Not all "password-protected" ZIPs are equally secure. The older ZipCrypto method (used by some versions of macOS's Terminal zip) is considered weak and can be broken with modern tools. AES-256 encryption, used by ArchiveZero and supported by modern versions of the macOS zip command, is strong and widely trusted.
ArchiveZero always uses AES-256 encryption for password-protected archives.
How to Open a Password-Protected ZIP on Mac
The recipient can open a password-protected ZIP by:
- Double-clicking the
.zipfile in Finder. - macOS will prompt for the password.
- Enter the password and click OK.
If macOS's built-in Archive Utility cannot open the file, the recipient can use ArchiveZero or The Unarchiver.
Sharing the Password Securely
Never send the password in the same email or message as the file. Share the password through a different channel — a phone call, a separate text message, or a password manager's secure sharing feature.
FAQ
Can I add a password to an existing ZIP file? You cannot add a password to an existing ZIP without recreating it. Open the ZIP, extract its contents, and create a new password-protected archive.
What happens if I forget the password? AES-256 encrypted ZIP files cannot be recovered without the password. Store your password securely before sharing.
Can Windows users open my password-protected ZIP? Yes. Windows 11 and most modern Windows apps (including 7-Zip and WinRAR) can open AES-256 encrypted ZIPs. Windows 10 may not open AES-256 encrypted ZIPs natively — recommend 7-Zip to Windows 10 recipients.
Is a password-protected ZIP the same as end-to-end encryption? No. A ZIP password encrypts the file contents, but the filenames inside the archive are visible without the password in some formats. For fully private file transfer, consider a proper end-to-end encrypted file transfer service instead.
Does ArchiveZero store my password? No. The password is used only during archive creation and is never stored or logged.
Summary
Creating a password-protected ZIP on Mac is easy: use ArchiveZero for a simple GUI experience with AES-256 encryption and no Terminal required, or use the zip -e command if you prefer working in Terminal. Either way, share the password through a separate channel from the file itself.
Also see: How to extract RAR files on Mac and how to compress a folder to send by email.