Creating a password-protected ZIP on Android starts with choosing a file manager that supports encrypted archives. Files by Google can create ordinary ZIP files, but its documented compression workflow doesn't include a password option. That's a limitation of Files by Google, not Android as a whole.
Material Files, a separate Android file manager, does support encrypted ZIP creation. Its September 2026 update changed ZIP encryption from the older ZipCrypto method to AES-256, giving users a documented option for stronger protection. Another app, Zipper, also supports password-protected ZIP and 7z archives.
Both apps offer ways to protect files without uploading them to an online compression service. The important steps are choosing an appropriate encryption method, confirming that the finished archive requires a password, and making sure the recipient can open it.
AES-256 or legacy encryption: what a password field doesn't tell you
A password prompt on a ZIP tool doesn't automatically tell you which encryption method protects the file.
Modern archive writers can encrypt ZIP contents with AES-256, while older tools may use ZipCrypto, a legacy method with significant security weaknesses. The person opening the file also needs an extractor that supports the encryption method used.
Material Files now provides a documented answer. Its version 1.7.5 release notes explicitly state that ZIP creation switched from ZipCrypto to AES-256.
That version was released in September 2026 and requires Android 6.0 or later. If you're using an older Material Files release, update the app before assuming it creates AES-256-encrypted archives.
Zipper also documents AES-256 support for ZIP and 7z creation. Its project documentation identifies zip4j as the ZIP encryption library and Apache Commons Compress as the component used for encrypted 7z archives.
These are documented implementation details, not independent security audits. They establish which encryption method the developers intend to use, but don't guarantee that every archive is free of implementation problems.
How to create a password-protected ZIP with Material Files
Material Files is an open-source Android file manager that can browse, extract, and create compressed archives.
To create an encrypted ZIP:
Install or update Material Files. Use version 1.7.5 or later if you want the documented AES-256 ZIP encryption support.
Open the folder containing your files. Navigate to the documents, photos, or other items you want to protect.
Select the files. Use the app's selection controls to choose the items for your archive.
Open the compression option. Choose Compress or the equivalent archive-creation command in your installed version.
Choose ZIP and enter a password. Look for the password or encryption field in the archive settings.
Create the archive. Choose a destination and save the resulting ZIP.
Test the ZIP before sharing it. Try extracting it with an incorrect password, then with the correct one.
The exact labels and screen layout may differ between Material Files versions. The important requirement is that you're creating a ZIP with password protection enabled, not simply compressing files into an ordinary archive.
If your installed version doesn't show an encryption option, check its version number before trying another app. The project's release notes confirm AES-256 support in version 1.7.5, but don't provide a complete screen-by-screen walkthrough.
How to create a password-protected ZIP on Android with Zipper
Zipper is another open-source option for creating encrypted archives. It supports ZIP, 7z, TAR, and TAR.GZ creation, with password protection available for ZIP and 7z.
According to its GitHub documentation, Zipper runs offline, requires Android 8.0 or later, and can extract RAR archives without creating them.
The documented workflow is:
Open Zipper and start a new archive.
Select the files or folders you want to include.
Choose ZIP as the archive format.
Enter a password in the available password field.
Select the destination for the finished archive.
Create the ZIP and wait for the operation to finish.
Open the completed archive and test extraction using an incorrect password, followed by the correct one.
The project describes archive creation as a process of selecting source files, choosing a destination, and running the operation. Exact button names may vary by version.
Zipper's documentation also confirms that ZIP and 7z password protection uses AES-256. Its implementation relies on zip4j for encrypted ZIP files and Apache Commons Compress for 7z archives.
That makes Zipper a documented alternative if Material Files isn't installed or its archive controls don't fit your workflow.
You can also try sharing files from another file manager into Zipper, although the project's documentation doesn't guarantee that every share-sheet handoff is supported. If sharing doesn't work, open the files directly inside Zipper instead.
What a password doesn't protect
A password-protected ZIP doesn't necessarily hide the file names inside it.
Zipper's documentation is explicit: ZIP encryption protects file contents, but the archive's file names remain visible. That's a limitation of the ZIP format's standard encryption structure.
For example, someone might be unable to open an encrypted document but could still see a descriptive filename such as "2026-bank-statements.pdf."
Avoid putting sensitive information in file or folder names. Rename files before creating the archive if their names reveal information you don't want others to see.
Zipper's 7z implementation also doesn't encrypt filenames, even though the 7z format can support that feature in other applications.
Sending the password through the same channel as the archive creates another risk. If someone intercepts both, the password offers little protection against that person.
Share the password separately, preferably through a different trusted communication channel or a secure password-sharing feature.
Use a strong, unique password rather than a short PIN, common phrase, or password you've already used elsewhere.
Testing the archive before you send it
Creating the ZIP is only the first step. Test it before deleting the original files or sending the archive to someone else.
Start by opening the ZIP in an extraction app that supports password-protected archives. Try extracting one file without entering a password.
The app should require a password or refuse extraction.
Next, enter a deliberately incorrect password. The extraction should fail. Finally, enter the correct password and confirm that the file opens without corruption.
That sequence checks whether password protection is being enforced and whether the archive can be extracted successfully. It doesn't independently prove which encryption algorithm was used.
For that, rely on the archiver's documented encryption method or inspect the archive with a tool that reports its encryption details.
Compatibility matters, too. Some extraction tools support older ZipCrypto archives but can't open AES-encrypted ZIP files.
If the recipient's default file manager rejects the archive, try an extractor that explicitly supports AES-encrypted ZIP files before assuming the archive is damaged.
Don't delete your unencrypted originals until you've confirmed that the encrypted archive opens correctly and that you can recover its contents.
What to do now
Start with the file manager already installed on your phone.
If you use Files by Google, its official compression instructions explain how to create a standard ZIP, but don't provide a password-protection option. You'll need another app to create an encrypted archive.
If you have Material Files, check that it's version 1.7.5 or later. That release documents AES-256 encryption for newly created ZIP archives.
Zipper offers another documented, offline route to AES-256-protected ZIP files on Android 8.0 and later.
Whichever app you choose, verify the archive with an incorrect and correct password before sending it. Avoid sensitive filenames, confirm that the recipient's extraction app supports the encryption method, and share the password separately.
A password-protected ZIP is useful for sharing documents and other private files, but its protection depends on the encryption method, password strength, and how the password is handled after the archive is created.
Comments
Be the first, drop a comment!