ZIP Encrypt

No. Absolutely not. ZIP Encrypt runs entirely in your browser using the Web Crypto API and zip.js. Your files, password, and the resulting ZIP archive are never transmitted to any server. All processing happens locally on your device, even when you are offline.

This tool uses AES-256 (Advanced Encryption Standard with 256-bit keys), which is the same encryption standard used by governments and security agencies worldwide. The implementation follows the ZIP AES encryption specification (WinZip/AE-2 compatible), so the resulting files can be opened by any AES-aware ZIP tool.

Yes. The encrypted ZIP files use the standard AES-256 ZIP encryption format (AE-2), which is natively supported by 7-Zip, WinZip, WinRAR, macOS Archive Utility (for unencrypted), and most modern ZIP utilities. Just provide the same password you used to encrypt the file.

PBKDF2 (Password-Based Key Derivation Function 2) is a function that transforms your password into a cryptographic key. The key feature is its "iteration count" — the more iterations, the longer it takes to derive the key. This directly slows down brute-force attacks: an attacker must perform the same number of iterations for every password guess. A setting of 100,000 iterations makes dictionary attacks hundreds of thousands of times harder than if the password were used directly.

For sensitive files, aim for a password that scores "Strong" or "Very Strong" in the strength meter. A good password is at least 12 characters, mixes upper and lowercase letters, numbers, and symbols, and avoids dictionary words or predictable patterns. The built-in zxcvbn strength analyzer will give you real-time feedback and an estimated crack time. Passphrases (e.g., four random words joined) can also be very effective and easy to remember.

Yes. You can drag and drop entire folders into the drop zone. The tool will recursively add all files within the folder, preserving the directory structure inside the ZIP archive. You can also use the exclude patterns field to skip certain file types or directories (like node_modules/ or .DS_Store files) before archiving.