Protect files the way technicians do - AES-256 in 7-Zip, a long password, saved properly and tested before sending. Five minutes now, no recovery drama later.
Most ZIP password problems are created on the day the archive is made - a weak password, the old encryption type, and the password kept only in someone's memory. Five careful minutes while creating the archive prevents all of it. This is the technician way to protect a ZIP with 7-Zip and AES-256, so it opens easily for the right person and nobody else. Use this guide only for archives you own or are authorised to open - your own forgotten password, or a file someone sent to you. Never use these steps to break into someone else's protected files.
Download 7-Zip only from 7-zip.org - look-alike download sites bundle junk with it. Select the files or folder to protect, right-click, and choose 7-Zip - Add to archive. Set the archive format to zip if the receiver might open it anywhere (Windows, phone, office systems), because ZIP opens everywhere. The 7z format compresses slightly better and can hide file names too, but only helps if the receiver also has 7-Zip or a compatible app - choose compatibility unless you know the receiver's tools.
In the Encryption section, enter the password and set the encryption method to AES-256. Never accept ZipCrypto for anything sensitive - it has documented attacks and survives on habit, as our encryption guide explains. Build the password from length, not tricks: four or five random words joined together beat a short complex string, are easier to type on a phone, and are vastly harder to guess. Never use a password you already use for email or banking - this archive may travel, and its password will be shared in messages.
The step everyone skips, and the reason recovery videos exist. In the same minute the archive is created, save an entry in your password manager - Bitwarden, KeePass or your browser's manager - named with the archive's file name and date. If the archive is for a client or colleague, agree the password channel in advance: archive by email, password by a different channel such as a call or a separate message, never in the same email as the file. A password written in the same message as its archive protects against nothing.
Close everything, then open the new archive fresh and extract one file using the saved password from your manager - not from memory. This thirty-second test catches the two classic disasters: a typo made while setting the password, and a password saved wrongly. Only after the test passes should the archive be sent, uploaded or archived as the only copy. If the old unprotected originals are being deleted, keep them until the receiver confirms the archive opened at their end.
And if you are on the receiving end of a forgotten password for your own archive, the video shows the full recovery process step by step.
Watch Full VideoAES-256, every time the file matters. ZipCrypto remains only for compatibility with very old systems and offers weak protection with known attacks. If a receiver's old tool cannot open AES, that is a reason to update their tool, not to weaken the archive.
Use zip when the receiver is unknown or may use a phone or office PC - it opens everywhere. Use 7z when you control both ends and want slightly better compression plus the option to encrypt file names as well.
Send the archive and the password through different channels - for example the file by email and the password by a phone call or a separate messaging app. Password and file travelling together cancel the protection entirely.