How do I create a password-protected ZIP file?
Why do I need a password-protected ZIP file?
Password-protected ZIP files can be used for encrypting confidential files, if they have to be transmitted to the BOC Hotline via an insecure channel (e.g. e-mail) as an alternative.
However, please note the following:
- The file names of the files contained at the top level in a password-protected ZIP are nevertheless unencrypted. Therefore, first place confidential files in a folder with a neutral folder name and then add this top-level folder to the ZIP file.
- The password of an encrypted ZIP file must never be transferred at the same time as the ZIP file. Never transmit the password and ZIP file in the same e-mail!
- Use a secure password.
- BOC recommends using our aFFE file exchange platform instead of using password-protected ZIP files to transfer confidential data to the BOC Hotline.
- Below you will find instructions using the open source archiver "7-Zip " as an example. A possible source for download could be the official 7-zip website.
Instructions 7-Zip
Context Menu Method:
- Right-click on the file or folder you want to encrypt.
- Navigate to 7-Zip, then click on Add to an archive....
- Select and confirm a password in the Encryption field; a non-binding recommendation can be found at the end of this page.
- Confirm your entries with OK, the encryption process starts.
- The encrypted package is stored in the same directory as the file to be encrypted.
GUI Method:
- Open your 7-Zip File Manager via the start menu
- Navigate to the directory you want to encrypt and click to select it
- Click on the Add button in the upper left corner
- Enter a password in the Encryption field and confirm it, you will find a non-binding recommendation at the end of this page.
- Confirm your entries with OK, the encryption process starts.
- The encrypted package is stored in the same directory as the file to be encrypted.
Recommendations for a secure password
- At least 20 characters long.
- A combination of upper case letters, lower case letters, numbers and symbols.
- Not a word from a dictionary, name of a person, product or organisation.
- It should be clearly different from previous passwords.
- Do not use a password that you have used in one place before or that you will ever use again in another place.