How to create password-protected ZIP files on Windows 11
Quick answer. Windows 11 can create ordinary ZIP files, but it does not create encrypted archives in File Explorer. For password protection, use Karuzip and pick ZIP or 7z based on compatibility and confidentiality needs.
Updated October 4, 2026 · Written by the Karuzip development team · 5-minute guide · Creator workflow · Test dates and screenshot versions are stated separately.
This page is about archive creation, not password recovery. Decide the format first, create the archive once, then open that same archive again to confirm the recipient workflow before you send it.
Check compatibility before sending the archive
Since version 2.2.7, Karuzip creates password-protected ZIP with AES-256 (2.2.6 and earlier used ZipCrypto). ZIP still leaves filenames visible, and the built-in Windows extractor may not open an AES-256 ZIP. Choose 7z for AES-256 with header encryption, and confirm that the recipient has an app that supports the format you send. File-system encryption in folder Properties is a different feature; it does not set a portable ZIP password.
After creation, keep the source files and test extraction into an empty folder using the password. Send the password through a separate trusted channel. For company data, use the sharing method approved by your organization. If you received an archive instead of creating one, use the password-protected ZIP opening guide.
Use a four-step creation flow
- Choose the files and start compression.
Use the main app or File Explorer integration to open Compression settings. - Pick ZIP or 7z before you enter the password.
Karuzip supports password protection only for ZIP and 7z. Other archive formats do not support password protection in Karuzip. - Turn on password protection and confirm the password.
Enter the password twice and verify it before you continue. Karuzip uses a dedicated password flow rather than silently leaving the archive unprotected. - Open the new archive once before you share it.
Confirm the archive prompts as expected and that the intended files can be extracted with the password.
ZIP and 7z are not the same choice
| Need | Protected ZIP | Protected 7z |
|---|---|---|
| Encryption | AES-256 (from 2.2.7) | AES-256 |
| Compatibility | Requires a tool that supports AES-encrypted ZIP, such as 7-Zip; the built-in Windows extractor may not open it | Requires a recipient tool that supports 7z |
| Password support in Karuzip | Supported | Supported |
| Filename confidentiality | File names stay visible, even with AES-256 | 7z encrypts file names too |
| Forgotten password recovery | Not possible in Karuzip | Not possible in Karuzip |
When the recipient cannot open the archive
- Confirm whether you sent a ZIP or a 7z archive.
- Confirm the exact copied password, including spaces and capitalization.
- Open the archive on your own PC again to compare the prompt and outcome.
- If the recipient environment is limited, recreate the archive as ZIP and test again.
Karuzip does not recover, crack, guess, or remove archive passwords. If the password itself is lost, create a new archive from the original files instead of trying to repair the protected one.
Frequently asked questions
Can I create a password-protected ZIP in Windows Explorer?
No. Windows Explorer can create ZIP files, but Microsoft states that encrypted archive operations are not supported in Windows 11 version 24H2. Use a compatible archive tool when you need password protection.
Should I use ZIP or 7z if I want password protection?
Both use AES-256 in Karuzip 2.2.7 and later. Use ZIP when visible file names are acceptable and the recipient has an app such as 7-Zip. Use 7z when file names must be encrypted too. Karuzip supports password protection only for ZIP and 7z.
What should I do if a colleague cannot open the archive?
Confirm the password was copied completely, verify whether the recipient opened the same archive format, and test the archive on a second app or PC before you resend it.
Can I recover a forgotten archive password?
No. Karuzip does not recover, crack, guess, or remove archive passwords. Keep a secure backup of the password at the time of creation.
Should I share password-protected ZIPs by email?
Prefer separate channels for the archive and the password, and verify the extracted result yourself before you send the archive to someone else.
Official references
- Microsoft Support: Zip and unzip files — current Windows 11 archive support and encrypted-archive limitation (accessed August 13, 2026).
- PKWARE APPNOTE — ZIP structure and metadata behavior (accessed August 13, 2026).
- 日本語版：パスワード付き ZIP の作り方 — current Karuzip archive-creation flow and format selection guidance (accessed August 13, 2026).
Related help
Create the archive once, then verify it before you send it.
Karuzip can create password-protected ZIP and 7z archives with no ads or app telemetry. The Microsoft Store version is for Windows 11. The 64-bit direct-download installer supports Windows 10 and Windows 11, but it is an unsigned beta.
- Updates itself automatically
- No ads or bundled software
- App sends no usage data
Karuzip runs on Windows 10 / 11. Open this page on a Windows PC to download it.
With the CLI, check the recipient’s workflow too
The direct installer’s archive.compress supports password-protected ZIP and 7z creation. Put the global --password-stdin option before the action and supply one line over standard input. There is no --password argument or password environment-variable option.
Password-protected ZIP creation uses AES-256 from 2.2.7, with filenames left visible; 7z uses AES-256 and encrypted filenames. Confirm the recipient’s software first, then test the archive with the correct password and extract it into a separate folder. Do not include a real password or private files in an example or screenshot.
Use a new archive name and keep the source files. GZIP, BZIP2, XZ, TAR, and WIM have no password-creation setting. An AES-256 ZIP still shows its file names, and the built-in Windows extractor may not open it, so tell the recipient which app to use.
Start with the CLI reference, then follow the actual local-command workflow for Codex, Claude Code, or DeepSeek Harness.
Checked on September 12, 2026 against 2.2.3 before its release on September 21, 2026. Current public download: 2.2.10. Historical screenshots and measurements retain their original version. Editorial and testing policy.