Blog

How to password-protect a file before you send it

Updated September 2026

A share link is only as private as everywhere it ends up -- forwarded in a group chat, left open in a browser tab, sitting in a "Sent" folder someone else has access to, or just typo'd to the wrong contact. A password on top of the link means having the URL isn't enough by itself.

The zip-file password trap

The classic workaround is a password-protected zip file. The catch: many zip tools still default to the original ZIP encryption scheme from the 1990s, which has known weaknesses that make it crackable with freely available tools, not a real barrier if someone actually wants in. Newer AES-256 zip encryption is genuinely strong, but plenty of default zip utilities don't use it unless you specifically choose that option -- so "I zipped it with a password" doesn't reliably mean what it sounds like. It's also common to see the password sent right below the file in the same email, which defeats the point of having one at all.

How Send Shed's password protection works

Both Quick Share and Encrypted Share let you add a password at upload time. On either tier, a locked file reveals nothing to someone without the password -- not the filename, not the size, nothing to download. On Encrypted Share specifically, the password sits on top of the client-side AES-256-GCM encryption key itself, rather than replacing it -- so you get both the zero-knowledge encryption (the server never has the key at all) and a second factor the recipient needs before they can even attempt to decrypt.

Practically: send the link one way (email, a message) and the password a different way (a text, a call, in person) so a single intercepted message doesn't hand over both halves.