How to Create a Password-Protected ZIP on a Mac (That Opens on Windows)
Published by @SoNiceInfo at 10/13/2026
Finder can't make a password-protected ZIP. The zip command that ships with macOS can, but non-ASCII file names come out garbled when you send it to someone on Windows. This guide covers two ways to create a password-protected ZIP, how to pick an encryption the recipient can open, and how to share the password. We checked the commands by creating ZIPs on macOS 27.
The methods compared
| Method | Encryption | Non-ASCII file names | .DS_Store | Setup |
|---|---|---|---|---|
| ZipScope (recommended) | ZipCrypto / AES-256, 7z (AES-256) | Intact on Windows | Left out | Install from the App Store (passwords need Pro) |
| zip command | ZipCrypto only | Garbled on Windows | Included (exclude with -x) | None (Terminal) |
| Finder's Compress | Not possible | ─ | ─ | ─ |
ZipCrypto vs AES-256
Password-protected ZIPs use one of two kinds of encryption: the old ZipCrypto or the strong AES-256. Which one to use depends on what the recipient will open it with.
| Format and encryption | Strength | Opens with Windows' built-in tool | Recipient needs |
|---|---|---|---|
| ZIP + ZipCrypto | Weak | Yes | Nothing (File Explorer opens it) |
| ZIP + AES-256 | Strong | No | 7-Zip or similar |
| 7z + AES-256 | Strong | No | 7-Zip or similar |
ZipCrypto is an old scheme with a known weakness: if part of the contents can be guessed, it can be cracked (a known-plaintext attack). Choose AES-256 when the recipient can install software or you need strong protection, and ZipCrypto when they should be able to open it with nothing extra.
RecommendedMethod 1: create it with an app (ZipScope)
ZipScope is a Mac app for unzipping and zipping, made by the author of this guide, that creates password-protected ZIP and 7z archives. When you choose the encryption, it shows whether Windows' built-in tool can open the result, so the recipient isn't left with a file they can't open.
Right-click to compress
Select files or folders in Finder, right-click, and choose Compress with ZipScope. Option-drop them on the menu bar icon to start with AES-256 selected.
Pick encryption and a password
Under Encryption, choose ZipCrypto (most compatible) or AES-256 (recommended) and enter the password twice. You can also generate a random one.
Click Create
The password-protected ZIP is created and shown in Finder.
- Names stay intact on Windows ─ Sets the UTF-8 flag on file names and normalizes them to NFC.
- No .DS_Store ─ Leaves out .DS_Store, __MACOSX, and ._ files by default.
- Warns about non-ASCII passwords ─ Tells you when the password contains full-width characters that some tools may not accept.
Creating password-protected archives is part of Pro (a one-time in-app purchase). Creating ZIPs without a password and extracting or browsing ZIP, 7z, RAR, LZH, and more are free. ZipScope never uses the network, so your files never leave your Mac.
macOS 14+ · Apple Silicon & Intel
No installMethod 2: create it with the zip command
Adding -e to the zip command that ships with macOS creates a password-protected ZIP. In Terminal, go to the folder that contains what you want to compress and run:
cd ~/Desktop
zip -e -r Documents.zip Documents -x "*.DS_Store"It prompts Enter password: and Verify password:; type the same password twice (nothing is shown as you type).-x "*.DS_Store" keeps .DS_Store files out.
It's quick, but keep these in mind:
- ZipCrypto only. AES-256 isn't available.
- Non-ASCII file names get garbled on Windows, because the macOS zip command can't set the UTF-8 flag (see Why ZIPs made on a Mac show garbled file names on Windows). For Windows recipients, rename the files to plain ASCII first.
- You can put the password on the command line with
-P password, but it stays in your shell history, so it's safer not to.
Why Finder and Disk Utility won't do
Finder's Compress has no password option. Disk Utility can create an encrypted disk image (.dmg), but Windows can't open .dmg files with its built-in tools, so it isn't suitable for Windows recipients.
Sharing the password
Emailing a password-protected ZIP and then emailing the password right after it adds little protection: both messages travel the same way, so anyone who can read one can read the other. In Japan, where the practice was common enough to get a name (PPAP), the Cabinet Office and Cabinet Secretariat announced in 2020 that they would stop using it.
- Share the password through a different channel, such as a phone call, chat, or text message.
- With people you exchange files with often, agree on a password in advance.
- Make it long enough to resist guessing. ZipScope's password generator creates random passwords of 8 to 32 characters (16 by default).
Which method is right for you
- You send password-protected ZIPs to clients on Windows ─ ZipScope. Pick an encryption you know they can open, with file names intact.
- The recipient uses a Mac and your file names are ASCII ─ the zip command is enough.
- You need strong encryption and the recipient can use 7-Zip or similar ─ Create an AES-256 ZIP or a 7z with ZipScope.
FAQ
Q. Can Finder create a password-protected ZIP?
No. Finder's Compress has no password option. Use the zip command in Terminal or an app that supports password-protected archives.
Q. I sent a password-protected ZIP and the recipient can't open it on Windows.
ZIPs encrypted with AES-256 don't open with Windows' built-in tool (File Explorer). Ask the recipient to use 7-Zip or similar, or create the ZIP again with ZipCrypto. ZipCrypto opens with the built-in tool, but its encryption is weak.
Q. Can people see the file names inside a password-protected ZIP?
Yes. ZIP encryption covers the file contents; the list of file names can be read without the password (in our test, the list of a password-protected ZIP showed up without entering it). If the names themselves are sensitive, rename the files before compressing.
Q. Can I use non-ASCII characters in the password?
It's better not to. If the tool that creates the ZIP and the tool that opens it handle those characters differently (for example UTF-8 versus a legacy code page), the correct password may still fail. Stick to ASCII letters, digits, and symbols. When opening ZIPs with a Japanese password, ZipScope tries both UTF-8 and Shift_JIS (CP932).
Q. How should I send the password?
Through a different channel from the ZIP: a phone call, chat, or text message. Sending the password in a second email right after the ZIP doesn't add much, since both travel the same way. See sharing the password.
Summary
To password-protect a ZIP on a Mac, use the zip command or an app. The zip command needs no install, but it only offers ZipCrypto and garbles non-ASCII names on Windows. For Windows recipients, ZipScope is the easy option: it shows which encryption Windows can open and keeps file names intact.Whatever you use, send the password separately.