How to Password-Protect Any File on Mac Without Disk Utility

The "official" way to password-protect a file on Mac is to make a Disk Image with Disk Utility, set the encryption to AES-256, and copy your file in. It works, but it is awkward — you end up with a .dmg that other people may not know what to do with, especially Windows users. Pages can password-protect a Pages document. Numbers can password-protect a Numbers spreadsheet. Preview can password-protect a PDF. None of those help if you need to lock down a video, an installer, a ZIP archive, or a CSV.

This guide shows a faster, more universal approach: open the free file password protector in any browser on your Mac, drop in the file, set a password, and download an encrypted .enc file. It works for any file type and the recipient can decrypt on Mac, Windows, Linux, Chromebook, iOS, or Android.

The 30-Second Workflow

1. Open Safari, Chrome, Firefox, or Arc on your Mac.
2. Visit the free file password protector.
3. Drag your file from Finder onto the drop zone (or click to browse).
4. Type a strong password — at least 16 characters or four random words joined together.
5. Click Encrypt & Download.

You will get back a .enc file in your Downloads folder. The original file is unchanged. Move the .enc file wherever you need it: AirDrop to a colleague, email it, attach to a Slack message, or copy to a USB drive.

Why Not Disk Utility?

Encrypted disk images are excellent for one use case: you want to keep an ongoing collection of files locked, mounted only when you enter the password. They are not great for one-off file sharing because:

• The recipient needs a Mac to mount a .dmg natively (Windows users have to install third-party software).
• The .dmg is larger than the original file (it includes filesystem overhead).
• You have to size the disk image when you create it — too small and it fails, too large and you waste space.
• Sharing a .dmg via email gets blocked by some corporate filters that flag disk images.

For "I need to send this one file to one person securely," wrapping the file in a single .enc container is faster and more compatible.

Sell Custom Apparel — We Handle Printing & Free Shipping

Why Not Compress with a Password?

macOS Finder's Compress option creates plain ZIP files with no password support — Apple removed the encrypted ZIP option years ago. The terminal command zip -e still works, but it uses ZipCrypto, which is cryptographically weak by modern standards. AES-encrypted ZIPs require third-party software like Keka or Archive Utility extensions.

Browser-based AES-256-GCM is stronger than legacy ZIP encryption and works without installing anything.

Sending Across Operating Systems

The biggest practical advantage of the .enc format is cross-platform compatibility. The recipient does not need a Mac, does not need any specific software, and does not need an account anywhere. They visit the same URL in their browser (Windows, Linux, Chromebook, iPhone, Android — all work), drop the .enc file into the Decrypt tab, and enter the password you shared.

Compare that to a .dmg sent to a Windows user: they have to install DMG Extractor or similar, which most people will not bother with. Or a Pages-encrypted document sent to someone who does not have Pages — they have to find an online Pages converter, which defeats the encryption.

Apple Silicon and Performance

Apple Silicon (M1/M2/M3/M4) Macs have hardware-accelerated AES instructions in the CPU. The Web Crypto API uses those instructions automatically when available, which means encrypting a 100MB file takes about a second. Intel Macs are slower but still fast enough that you will not notice the wait.

For very large files (1GB+), the bottleneck is not the encryption itself but the browser's memory handling. Try to keep files under 500MB for the smoothest experience. For larger payloads, split them first.

Frequently Asked Questions

Does the file get uploaded to any server?

No. The encryption happens entirely in your Mac's browser using the macOS Web Crypto API. We never see the file or the password.

Will the recipient need a Mac?

No. The .enc file is decrypted in any browser on any operating system. We have tested it on Windows, Linux, Chromebook, iOS, and Android — all work identically.

Is this stronger than a password-protected Pages document?

Pages uses AES-128 with a key derived from your password. Our tool uses AES-256-GCM with PBKDF2 100,000-iteration key stretching. Both are strong; ours uses a longer key and a more rigorous key derivation step.