You need to send a contract to a client by email, and it contains sensitive financial information. You need to lock a folder of tax documents on your shared family computer. You need to hand a USB drive of project files to a contractor and make sure nobody else can read them if the drive gets lost.
All three scenarios need the same thing: password protection with real encryption. Not the kind where someone can bypass it in five seconds — the kind where even a government agency with unlimited computing power would take billions of years to crack.
The good news: you don’t need to buy expensive software. Windows, Mac, and free open-source tools can all do this. The encryption they use — AES-256 — is literally the same standard used to protect classified military documents.
Password Protecting a PDF
PDFs are the most commonly shared document format, and they have built-in support for password protection. The question is how to apply it without paying for Adobe Acrobat Pro.
Method 1: LibreOffice (Free, Offline, Strong Encryption)
LibreOffice is free, open-source office software that handles PDFs well.
- Open your PDF in LibreOffice Draw (or Writer for text-heavy PDFs)
- Go to File → Export as PDF
- Click the Security tab
- Click Set Open Password and enter a strong password
- Optionally set a Permission Password to prevent printing, editing, or copying
- Click Export
The resulting PDF is encrypted with AES-128 or AES-256. Anyone trying to open it must enter the password first. Without the password, the file is unreadable gibberish.
Method 2: Online Tools (For Non-Sensitive Documents)
If the PDF isn’t highly sensitive, online tools like Smallpdf or iLovePDF are quick and easy. Upload the PDF, set a password, download the encrypted version. Takes 30 seconds.
The caveat: your unencrypted file is uploaded to their servers temporarily. For a restaurant menu or a public brochure, this is fine. For tax returns, medical records, or legal documents, use the offline LibreOffice method instead — your file never leaves your computer.
Important: PDF password protection has two levels. The Open Password prevents anyone from opening the file without the password. This is genuine encryption. The Permissions Password restricts actions like printing and editing but can be bypassed with free tools. If you need real security, always set the Open Password.
Password Protecting a Folder on Windows
Windows does not have a built-in “right-click → add password” option for folders. This is one of the most commonly requested features that Microsoft has never implemented.
There are three viable free methods:
Method 1: 7-Zip (Simplest, Most Recommended)
7-Zip is free, open-source, and available in over 80 languages.
- Install 7-Zip
- Right-click the folder you want to protect
- Select 7-Zip → Add to archive
- Set Archive format to 7z
- Under Encryption, enter your password twice
- Set Encryption method to AES-256
- Check “Encrypt file names” — this hides even the names of files inside the archive
- Click OK
The folder is now compressed and encrypted into a single .7z file. Delete the original unencrypted folder (make sure the archive opens correctly first!).
To access your files, double-click the .7z file, enter your password, and extract. When you’re done, delete the extracted files and keep only the encrypted archive.
The “Encrypt file names” option is important. Without it, someone who opens the .7z file can see the names of every file inside (though they can’t open them without the password). File names alone can reveal sensitive information — a file named “Q3_Revenue_Report_Confidential.xlsx” tells someone a lot even without opening it.
Method 2: VeraCrypt (Most Seamless Experience)
VeraCrypt is free, open-source encryption software that creates virtual encrypted drives.
- Install VeraCrypt
- Click Create Volume → Create an encrypted file container
- Choose a location and filename for the container
- Select AES encryption and SHA-512 hash
- Set the container size (must be large enough for your files)
- Choose a strong password
- Click Format
Now you have an encrypted container file. To use it:
- Open VeraCrypt → Select the container → Click Mount → Enter password
- A new drive letter appears in File Explorer
- Copy your files to this virtual drive
- When done, click Dismount in VeraCrypt
When dismounted, the container file is fully encrypted and looks like a random data file. When mounted, it behaves exactly like a normal folder on a normal drive. It’s the closest thing to a truly password-protected folder on Windows.
Password Protecting a Folder on Mac
Mac has this feature built in, and it works beautifully.
- Open Disk Utility (Applications → Utilities → Disk Utility)
- Click File → New Image → Image from Folder
- Select the folder you want to protect
- Set Encryption to 128-bit AES (fast) or 256-bit AES (stronger)
- Set Image Format to read/write (so you can add files later)
- Enter and confirm your password
- Uncheck “Remember password in my keychain” if you want maximum security
- Click Save
macOS creates an encrypted .dmg file. Delete the original folder. To access your files, double-click the .dmg, enter the password, and it mounts as a virtual drive. When done, eject the virtual drive and the contents are locked again.
This is the most elegant built-in folder encryption on any consumer operating system. Apple doesn’t get enough credit for including this.
Encrypting a USB Drive
On Windows (BitLocker — Built-in, Windows Pro Only):
- Insert USB drive
- Open File Explorer → right-click the USB drive → Turn on BitLocker
- Select “Use a password to unlock the drive” → enter password
- Save the recovery key (to a file on your computer — this is your backup if you forget the password)
- Select “Encrypt entire drive”
- Choose “Compatible mode” if the drive will be used on older Windows versions
- Click Start encrypting
After encryption, anyone plugging the drive into any Windows computer will see a password prompt before they can access anything. The entire drive contents are encrypted with AES-128 or AES-256.
Limitation: BitLocker-encrypted drives are natively readable only on Windows. Mac and Linux require additional software (Dislocker on Linux, paid tools on Mac).
On Any OS (VeraCrypt — Cross-Platform):
For a USB drive that needs to work on Windows, Mac, and Linux, use VeraCrypt:
- Install VeraCrypt
- Click Create Volume → Encrypt a non-system partition/drive
- Select your USB drive
- Choose AES encryption → set password → format
The entire USB drive is now encrypted. To use it on any computer, you need VeraCrypt installed on that machine. For portability, you can put the VeraCrypt portable installer on a small unencrypted partition of the USB drive so anyone with the password can decrypt it without pre-installed software.
A Note About Password Strength
All the encryption in the world is meaningless if your password is “password123.” AES-256 is unbreakable, but if someone can guess your password in five tries, the encryption might as well not exist.
Good passwords for encrypted files:
- At least 12 characters long
- Mix of uppercase, lowercase, numbers, and symbols
- Not a single dictionary word or common phrase
- Not reused from any other account
If you’re protecting something truly important, consider a passphrase — a string of random words like “correct-battery-staple-sunrise-42” which is both long and memorable. Or better yet, let a password manager generate and store a truly random password.
Whatever you do, don’t lose the password. Real encryption means that without the password (or recovery key for BitLocker), the data is gone forever. There is no “forgot password” link. There is no recovery option. That’s what makes encryption secure — but it’s also what makes password management essential.
If you found this guide helpful, check out our other resources: