WizePassword-protect a zip without sending anything anywhere
Drop your files here
or click to browse
No size limit · no file count limit
A lost password is gone for good.
The fifty-seven other tools
Three unpleasant things, said before you click
Windows File Explorer won’t open this archive. It only knows the old ZipCrypto encryption, broken for twenty years. To open an AES-256 archive, you need 7-Zip, WinRAR, Keka on Mac, or your distribution’s archive tool. They’re free and widespread, but you do need to have them.
File names stay visible. The zip format stores its table of contents in the clear, even when the content is encrypted. Someone who intercepts the archive will see “budget-2026.xlsx” without being able to open it. If the names themselves are sensitive, rename the files first.
A lost password is gone for good. There’s no recovery, no security question, no recourse. That’s exactly what gives encryption its value, and it’s also what makes it ruthless.
Why this encryption and not a PDF password
The site deliberately offers no tool to protect a PDF: a PDF password can be cracked offline in a few minutes with public tools. Selling a lock we know to be fake would go against everything this site stands for.
AES-256 is another matter. It’s the encryption governments use for their classified documents. With a decent password, there is no known method today to open it without the key.
The password does all the work
The encryption is unbreakable; the password isn’t. “hello2026” is found in seconds by a dictionary attack, whatever the algorithm behind it.
A phrase of four or five unrelated words is better than a complicated word with numbers in place of letters: it’s longer, easier to remember and much harder to guess. The password generator makes them, with an exact entropy calculation.
And send it through a different channel from the archive. A password sent in the same email as the file protects nothing at all.
Why the encryption is written by hand here
It’s not a matter of principle; it’s a measured necessity. The browser can do AES, but its counter increments the opposite way from what the zip format expects: the two block sequences are identical for the first block and diverge at the second. Any file over sixteen bytes would come out unreadable, and nothing would flag it at encryption time. There is no setting for this.
The core of the algorithm is therefore written here, and it is checked against two test vectors published by NIST, byte for byte. An encryption engine can’t validate itself: a successful round trip only proves you understand yourself.
Frequently asked questions
Are my files sent anywhere? No. You can check for yourself in thirty seconds: here is how.
Why won’t Windows open my archive? Because File Explorer only knows the old ZipCrypto encryption. You need 7-Zip, WinRAR, Keka or your system’s archive tool, all free.
Are my file names encrypted too? No. The zip format stores its table of contents in the clear: names stay visible even though the content doesn’t. Rename the files first if the names are sensitive.
What happens if I lose the password? The content is lost for good. There’s no possible recovery, and that’s what gives encryption its value.
Is this encryption really safe? The algorithm is; it’s checked here against the test vectors published by NIST. Real strength then depends entirely on your password.