Windows 10 and Windows 11 can create a normal ZIP file from File Explorer, but they cannot create a password-protected ZIP file on their own. The built-in Compress to ZIP file and Send to > Compressed (zipped) folder options do not include encryption.
To protect a ZIP with a password, install an archive utility such as 7-Zip. It can create either an encrypted .zip file for compatibility or an encrypted .7z file that can also hide filenames.
As an Amazon Associate I earn from qualifying purchases.
First, what Windows can and cannot do
To create an ordinary ZIP file in Windows:
- Select the files or folder in File Explorer.
- Right-click the selection.
- Choose Send to, then Compressed (zipped) folder.
- Rename the new ZIP file if necessary.
On some Windows 11 installations, the equivalent option is Compress to ZIP file in the modern context menu. If it is not visible, select Show more options to open the older menu.
Recommended Free Tools
Neither option creates encryption. There is also no password field in the ZIP file’s Properties window. Windows 11 24H2 added support for working with more archive formats, including RAR, 7z and TAR, but that update did not add support for creating or modifying encrypted archives.
#1 Best Overall
- What You Get - 2 pack 64GB genuine USB 2.0 flash drives, 12-month warranty and lifetime friendly customer service
- Great for All Ages and Purposes – the thumb drives are suitable for storing digital data for school, business or daily usage. Apply to data storage of music, photos, movies and other files
- Easy to Use - Plug and play USB memory stick, no need to install any software. Support Windows 7 / 8 / 10 / Vista / XP / Unix / 2000 / ME / NT Linux and Mac OS, compatible with USB 2.0 and 1.1 ports
- Convenient Design - 360°metal swivel cap with matt surface and ring designed zip drive can protect USB connector, avoid to leave your fingerprint and easily attach to your key chain to avoid from losing and for easy carrying
- Brand Yourself - Brand the flash drive with your company's name and provide company's overview, policies, etc. to the newly joined employees or your customers
How to create a password-protected ZIP with 7-Zip
7-Zip is a free archive utility available from the official 7-Zip website. Download the installer that matches your PC, usually Windows x64. Install it, then use these steps:
- Open File Explorer and select the files or folder you want to protect.
- Right-click the selection and choose 7-Zip.
- Select Add to archive….
- In Archive format, choose zip.
- Under Encryption, type a password into Enter password.
- Type the same password again in Reenter password.
- Set Encryption method to AES-256.
- Click OK.
7-Zip creates the encrypted ZIP in the location shown in the Archive field. You can change the filename and destination before clicking OK; for example, change it to C:UsersYourNameDesktopreports.zip.
Why AES-256 is the right choice
7-Zip may offer both AES-256 and ZipCrypto for ZIP archives. Choose AES-256 for new archives. ZipCrypto is an old, cryptographically weak method and should be used only when you must support very old ZIP software.
The trade-off is compatibility. Windows File Explorer may not open or extract an AES-256-encrypted ZIP. Tell the recipient to use 7-Zip, WinZip or another archive application that supports AES-encrypted ZIP files.
Create an encrypted ZIP from PowerShell
After installing 7-Zip, its command-line executable is normally located at:
Rank #2
- High-speed USB 3.0 performance of up to 150MB/s(1) [(1) Write to drive up to 15x faster than standard USB 2.0 drives (4MB/s); varies by drive capacity. Up to 150MB/s read speed. USB 3.0 port required. Based on internal testing; performance may be lower depending on host device, usage conditions, and other factors; 1MB=1,000,000 bytes]
- Transfer a full-length movie in less than 30 seconds(2) [(2) Based on 1.2GB MPEG-4 video transfer with USB 3.0 host device. Results may vary based on host device, file attributes and other factors]
- Transfer to drive up to 15 times faster than standard USB 2.0 drives(1)
- Sleek, durable metal casing
- Easy-to-use password protection for your private files(3) [(3)Password protection uses 128-bit AES encryption and is supported by Windows 7, Windows 8, Windows 10, and Mac OS X v10.9+; Software download required for Mac, visit the SanDisk SecureAccess support page]
C:Program Files7-Zip7z.exeOpen PowerShell and run this command:
& "C:Program Files7-Zip7z.exe" a -tzip -mem=AES256 -p "C:Pathoutput.zip" "C:PathFolder*"For example:
& "C:Program Files7-Zip7z.exe" a -tzip -mem=AES256 -p "C:UsersAliceDesktopsecure.zip" "C:UsersAliceDocumentsReports*"7-Zip prompts you to enter and confirm the password. The switches mean:
| Switch | Purpose |
|---|---|
a |
Add files to an archive. |
-tzip |
Create a ZIP archive rather than a 7z archive. |
-mem=AES256 |
Use AES-256 encryption. |
-p |
Enable password protection and, without a password immediately after it, show a password prompt. |
A command such as -pMyPassword also works, but it is a poor choice for sensitive files. The password may remain in PowerShell history, scripts, logs or process-monitoring tools. Use the prompt form instead.
Use an encrypted 7z file when filenames must be hidden
An AES-256-encrypted ZIP protects the contents of the files, but the archive’s directory information remains visible. Someone who has the ZIP may still be able to see filenames and other metadata without knowing the password.
If the filenames themselves are sensitive, create a 7z archive:
- Select the files, right-click, choose 7-Zip, then Add to archive….
- Set Archive format to 7z.
- Enter and confirm the password.
- Leave the encryption method set to AES-256.
- Enable Encrypt file names.
- Click OK.
Encrypted 7z archives provide stronger privacy for archive metadata, but the recipient must use software that supports the 7z format. Use ZIP when a website, business system or recipient specifically requires a .zip file.
Rank #3
- Lightweight and convenient: Lexar JumpDrive A30E (USB Type-A) boasts a slim, portable design for easy device compatibility; lightweight at 7.41 g
- Transfer speeds up to 100 MB/s: 10x faster than standard USB 2.0 drives; Based on internal testing, performance may vary depending upon the host device, interface, and usage conditions
- Wide compatibility: Compatible with tablets, laptops, Macs, and traditional Type-A devices, no software installation required; Reliably stores photos, videos & files
- Compact: Features a push-button retractor and a lanyard loop for on-the-go use
- Enhanced security: Lexar DataShield protects files, easily creates a password-protected safe with auto-encryption; Files deleted from the safe are securely erased and can't be recovered
Why PowerShell and tar do not solve this
PowerShell’s built-in Compress-Archive cmdlet creates an ordinary ZIP but has no password or encryption parameter:
Free tools Windows power users keep installed
One-click scans. No signup required.
Compress-Archive -Path "C:PathFolder*" -DestinationPath "C:Patharchive.zip"It also has a documented 2-GB maximum file-size limitation and ignores hidden files and folders when creating or updating an archive.
Windows also includes tar, which can create an ordinary ZIP based on the filename:
tar -caf archive.zip .my-folderThere is no password option in Microsoft’s documented Windows tar ZIP command. Use 7-Zip or another encryption-capable archiver when password protection is required.
Common problems
There is no password option in the right-click menu
That is expected. File Explorer’s ZIP feature does not support encrypted archive creation. Install 7-Zip and use 7-Zip > Add to archive….
Do these 3 things before closing this tab:
1Fix the driver behind crashes, sound loss and screen glitches2Repair Windows errors before they cause bigger problems3Scan for outdated or missing drivers - takes under a minuteRank #4
- The durable, light-weight design of the Turbo Attaché 3 USB 3.0 Flash Drive is the essential mobile storage solution
- Perfect for transferring large files such as movies, videos, photos, music & documents
- Transfer speeds up to 10 times faster than standard USB 2.0 flash drives
- Convenient sliding collar, and cap-less design protects your content when not in use
- Compatible with most PC and Mac laptop and desktop computers with USB 3.0 ports
Windows cannot extract the ZIP
The archive may use AES encryption that File Explorer does not support. It could also have an incorrect password, a damaged archive or an encryption method unsupported by the application being used. Open it with 7-Zip or another utility that supports AES-256 ZIP files.
The archive opens, but the files will not extract
Some programs can read the unencrypted ZIP directory and display its filenames without being able to decrypt the file data. This does not mean the password failed. Use an application that supports the encryption method used to create the archive.
Hidden files are missing from a PowerShell ZIP
Compress-Archive ignores hidden files and folders. Use 7-Zip when those files must be included.
Compression fails for a deeply nested folder
Long paths and unusual locations can cause Windows’ Compress to ZIP file command to fail. Try moving the source to a shorter location such as C:TempFiles, shortening filenames, or creating the archive with 7-Zip.
Share the password separately
Do not send the ZIP and its password in the same message if the archive is intended to protect confidential information. Send the ZIP through one channel and communicate the password through another, such as a phone call or a separate messaging service. Use a long, unique passphrase and keep an unencrypted copy only where it is securely stored.
Best Value
- Transfer speeds up to 10x faster than standard USB 2.0 drives (4MB/s); up to 130MB/s read speed; USB 3.0 port required. Based on internal testing; performance may be lower depending upon host device. 1MB=1,000,000 bytes
- Backward compatible with USB 2.0
- Secure file encryption and password protection(2)
FAQ
Can Windows 11 create a password-protected ZIP without extra software?
No. File Explorer can create ordinary ZIP files, but it does not provide a password or encryption option. Use 7-Zip, WinZip or another archive utility.
Will a password-protected ZIP hide the filenames?
Usually not. ZIP encryption protects file contents while the ZIP directory and filenames can remain visible. Use an encrypted 7z archive with encrypted file names when the filenames must be concealed.
Can I open an AES-256 ZIP in File Explorer?
Windows File Explorer may not be able to extract AES-256-encrypted ZIP files. Use 7-Zip, WinZip or another compatible archive application.
The Tool Desk
Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Is ZipCrypto safe?
No. ZipCrypto is a legacy encryption method with known weaknesses. Choose AES-256 unless compatibility with old software is more important than security.
Can Compress-Archive add a password?
No. PowerShell’s Compress-Archive cmdlet creates ordinary ZIP files and has no password or encryption parameter.
The Bottom Line
Windows can make a standard ZIP, but not an encrypted one. For a password-protected ZIP, install 7-Zip, choose 7-Zip > Add to archive…, select zip, enter a password and set encryption to AES-256. If the filenames also need protection, use an encrypted 7z archive with Encrypt file names enabled.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
