Create a password-protected ZIP with real AES-256 encryption - locally in your browser, no upload.
Running locally on your device ...
Running locally on your device ...
0%
Your files never left your device
No. Everything runs in your browser - your file never leaves your device. How this is verifiable
The plain create-ZIP tool packs files with no protection at all - anyone who gets the file can open it. This tool adds a real password via the modern ZIP AES extension from the WinZip AES specification (documented in the ZIP APPNOTE), not the legacy ZipCrypto scheme - which a known-plaintext attack cracks in minutes and which the plain ZIP tools deliberately leave out for exactly that reason.
PBKDF2-HMAC-SHA1 with 1,000 rounds (the format standard's own fixed round count, not a gottrix choice) derives a 256-bit AES key and a separate HMAC key from your password; every file in the archive gets a fresh random salt, its content is encrypted in CTR mode and authenticated with an HMAC-SHA1-80 tag - so a file altered afterwards honestly fails on extraction instead of silently producing garbage. Everything runs through the zip.js library locally in your browser, with no server and no foreign CDN.
Worth knowing: the file content is encrypted, not the archive directory - file names and sizes stay visible in the ZIP structure even without the password. If you need to protect the content itself, this is the right tool; if you also need to hide the file names, you need a different tool. Opening it needs a current unzip tool with AES support (7-Zip, WinRAR, the macOS Archive Utility); older, ZipCrypto-only programs reject an AES ZIP.
| Output format | ZIP |
|---|---|
| Batch processing | Yes |
| Processing | Locally in your browser (JavaScript) |
| File upload | None |
Limitations: Only the file content is encrypted - file names and sizes stay visible in the archive. A forgotten password cannot be recovered by anyone; there is no back door. Opening it needs an unzip tool with AES support (7-Zip, WinRAR, the macOS Archive Utility); ZipCrypto-only programs reject the file. Very large batches need time and memory on older devices.
No. Encryption and the password stay entirely local in the browser - nothing is sent.
No. The plain "Create ZIP" tool has no protection at all; this tool additionally encrypts the content with AES-256 via the modern WinZip AES extension.
No. Only the file content is encrypted; file names and sizes remain visible in the ZIP structure, even without the password.
Our "Extract password ZIP" tool, or any current unzip program with AES support, such as 7-Zip or WinRAR.
There is no recovery and no back door - a forgotten password makes the archive permanently unreadable.
Extract password ZIP · Create ZIP · Encrypt file · Password generator · UUID generator · Decrypt file · Codice Fiscale