An AES-256 password ZIP protects the file itself, so it stays locked wherever it goes. An iCloud Anyone with the link share protects nothing once the URL is out: whoever has the link can open the item, and from iOS 27.3 Apple checks such items and says they are no longer end-to-end encrypted. For private files, lock the file first and share it through a restricted channel.
What each one protects
- iCloud Anyone with the link: convenient, no password, no account needed to open. The access control is the secrecy of the URL. Apple's support article says the item is accessible to anyone with the link, including Apple, and not end-to-end encrypted even with Advanced Data Protection.
- Encrypted ZIP: the contents are encrypted with AES-256 on your device. The ZIP can travel through email, Messages, AirDrop or a cloud link, and without the password it cannot be opened. It is only as strong as the password.
The two are not opposites. You can place an encrypted ZIP inside an iCloud link and it stays unreadable without the password, although you should still prefer People you choose over a public link. The check on public links is tied by press to child-safety aims, and a locked ZIP is not a way to get around it; it is a way to protect ordinary private files such as IDs and tax papers.
Make an encrypted ZIP on iPhone
Password-Protect ZIPEncrypt files into a password-protected ZIP with AES-256 in your browser. The password and files never leave your device.Open tool- Open Password-Protect ZIP in Safari and choose your files.
- Enter a long password, at least a few random words. Do not reuse a password from another account.
- Tap Encrypt. The AES-256 encryption happens on your device and the files are not uploaded.
- Save the ZIP and send it.
The Filevale iPhone app can also create ZIPs with an optional AES-256 password, and Share privately (Pro) builds an encrypted ZIP from a file in your Vault. See Filevale for iPhone.
Send the password separately
This step is what makes the lock useful. If the password travels in the same email or chat, it protects very little.
- Send the ZIP by email and the password by a phone call or a message in a different app.
- Agree on the password in person if you can.
- Never type the password in the file name or the email subject.
What the recipient needs
Unzip FilesOpen ZIP files on any device, see what's inside and extract single files or everything. Password-protected ZIPs (AES and classic) are supported.Open toolAES-256 ZIPs open with 7-Zip, WinRAR, The Unarchiver, Keka and Filevale's Unzip, which asks for the password on the recipient's device. The built-in Windows and macOS openers may not handle AES, so tell the person in advance. For a single PDF, Password Protect PDF locks the PDF without a ZIP.
Limits
In many ZIPs the file names stay visible even when the contents are locked, so avoid names such as "passport-scan". It cannot be recalled once sent. Anyone with the password can open every copy. If the password is lost, the files are not recoverable.
Related: iCloud public link vs People you choose, Password Protect a File on iPhone and Share files privately from iPhone.
Frequently asked questions
Is a password-protected ZIP end-to-end encrypted?
The contents are encrypted on your device with AES-256 and only decrypted when someone enters the password, which gives similar protection for that file. It is not a messaging system, so you manage the password yourself.
Can I put an encrypted ZIP in an iCloud link?
Yes. The recipient still needs the password. Prefer People you choose rather than a public link, and send the password separately.
What happens if I forget the ZIP password?
The files cannot be recovered. Keep the password in a password manager or write it down somewhere safe.