- AES-256 encryption is the most robust standard to ensure that sensitive data remains inaccessible to third parties.
- Hiding file names prevents curious people from knowing what's inside the package before entering the key.
- Using external software is essential because native Windows and macOS tools have very limited protection capabilities.
Sometimes we find ourselves in situations where we need to store sensitive documents on a computer we share with others, or perhaps we want to send important papers by email without any nosy neighbors being able to snoop on them. The smartest way to avoid these problems is to encrypt the compressed files , ensuring that only the person with the access key can see what's inside.
Although Windows and Mac offer their own folder management systems, they fall short when it comes to true security. Therefore, the best approach is to use specialized software that allows you to not only set a password but also employ powerful encryption algorithms and hide file names, leaving no trace of the stored information.
The problem with native Windows and macOS tools
If you're using Windows 10, you'll see that you can right-click on a file, go to Properties, enter Advanced, and check the box to encrypt contents to protect data . The problem is that this uses the EFS file system, which is tied to your user account. This means that if you send that file by email, the recipient won't be able to open it because the encryption doesn't travel with the file ; it remains in your local session.
In Apple's case, things aren't much different. Finder doesn't allow you to easily password-protect ZIP files. There is a workaround using Disk Utility to create folder images in .dmg format with 128-bit or 256-bit AES encryption, but it's a more cumbersome process that involves creating a virtual disk drive that you then have to eject for the security to be effective.
PeaZip and advanced file protection
When we talk about tools like PeaZip, we're entering the realm of professional security. One of its most powerful features is the ability to hide file names . In a standard ZIP file, even if the contents are protected, anyone can open the file and see the list of file names inside. By enabling the file name encryption option, the software blocks all access; the user won't even be able to see what files are inside until they enter the correct password.
It's important to note that, in some formats, adding files to an already protected archive can be confusing. If you notice that the program allows you to add folders without prompting for the password, this could be a limitation of the standard ZIP format. To avoid risks, it's best to use the .7z format or proprietary formats that better manage file integrity and ensure complete file locking from the very beginning.
Comparison of encryption methods: ZipCrypto vs AES-256
Not all passwords are created equal. If you look at the options in programs like PeaZip, 7-Zip, or WinRAR, you'll see that you can choose between ZipCrypto and AES-256. The former is the older method, highly compatible with any system but extremely vulnerable to modern hacking tools that can crack the key in the blink of an eye.
On the other hand, the AES-256 standard is what governments and cybersecurity experts use. It uses a 256-bit key, making brute-force attacks virtually impossible today. If you truly want your data to be safe, don't take chances and always choose AES-256 , even if it means the recipient needs to install a compatible program to open the file.
Practical guide with external software
If you decide to use 7-Zip or WinRAR, the process is quite similar. Generally, you select your folder, right-click, and choose " Add to archive ." In the settings window, that's where the magic happens: you enter your password and, very importantly, check the box to encrypt filenames . If you use 7-Zip, remember to choose the .7z format to take advantage of the highest level of encryption available.
In Linux, the story is similar. Although you can use the terminal with the command zip -eThis uses weak ZipCrypto encryption. To be on the safe side, it's best to install the package p7zip-full and execute the encryption command specifying the AES-256 method. This way, you ensure that the confidentiality of your documents is complete, regardless of the platform.
Golden tips for total security
Having the best software is useless if you use a password like "12345". For encryption to be effective, you must use long and complex keys , preferably more than 12 characters long, mixing letters, numbers, and symbols. Furthermore, a very common mistake is sending the compressed file and the password in the same email; this is like locking the door and leaving the key in the lock.
The most sensible approach is to send the key through a different channel , for example, sending the file by email and the password via WhatsApp or SMS. It's also advisable, if you're very meticulous, to generate a SHA-256 hash of the file so the recipient can verify that the document hasn't been altered in transit.
To maintain maximum privacy, the winning combination is to use open-source software such as PeaZip or 7-Zip, select the AES-256 algorithm, block the visibility of file names, and manage passwords externally, thus ensuring that sensitive information remains invisible to anyone who does not have the proper authorization.