How to Send Documents Securely
Tax returns, contracts, IDs, medical records — at some point you have to send them to someone. The rule that covers every case: encrypt the file itself before it travels, and share the password on a different channel. Then it doesn't matter if the email is forwarded, the link leaks, or the USB stick is lost.
Why "just attach it" isn't enough
- Email is a postcard. Attachments sit unencrypted in your Sent folder and their inbox indefinitely, and forwarding is one click. You control none of it after Send.
- Share links spread. "Anyone with the link" means anyone the link is ever forwarded to, pasted to, or logged by.
- "Confidential" in the subject line encrypts nothing.
Encrypting the document itself fixes all three at once: whatever leaks, the contents stay locked.
The 4-step secure send
- Encrypt on your device. Open Password Protect ZIP, drop your documents, set a strong password (use the Suggest a passphrase button). Choose Encrypted .zip — or Vault (.html) if your recipient isn't technical (more below). Your files never leave your device during this step; the encryption runs in your browser.
- Send the locked file any way you like. Email attachment, Drive/Dropbox link, WeTransfer, USB stick — it no longer matters, because the file is sealed.
- Share the password on a different channel. Documents by email → password by text or phone call. Never in the same thread as the file.
- That's it. No accounts to create, nothing for either of you to install.
Encrypt your documents now
Free, in your browser. Files and password never leave your device.
Open Password Protect ZIP →Sending to someone non-technical? Use a vault file
The classic failure mode of secure sending: you did everything right, and then the recipient can't open the encrypted ZIP because Windows Explorer doesn't support it and they can't (or won't) install 7-Zip.
The vault file exists for exactly this person. Instead of a .zip you send a single .html file. They double-click it, their browser opens a password box, they type the password you gave them, and save the files. Works on any device — locked-down office PCs, iPhones, tablets — with nothing to install, even offline.
Rule of thumb: technical recipient or archival storage → encrypted .zip. Human being who "just wants the file" → vault. Both come out of the same free tool.
What not to do
- Don't put the password in the same email. This is the most common mistake, and it undoes everything.
- Don't rely on the legacy "zip password" that Windows Explorer can open — that scheme has been crackable for decades. Real protection is AES-256 (our tool only produces AES-256).
- Don't reuse an important password (like your email password) to protect a file you're handing to someone else.
- Don't "password protect" by hiding — renaming files or burying them in folders protects nothing.
FAQ
Is emailing sensitive documents as attachments safe?
Treat email like a postcard: it may be encrypted in transit, but attachments sit readable in both mailboxes forever and forwarding is one click. Encrypt the file first and the question stops mattering.
How should I give the recipient the password?
On a different channel than the file. Email the file, text the password — or say it on a call. If both travel the same route, one breach exposes both.
What if the recipient can't install any software?
Send a vault file — a single .html that opens in any browser, asks for the password, and lets them save the files. Nothing to install on either end.
Are Google Drive / Dropbox links secure enough?
A link is only as private as everyone who ever sees it. For sensitive material, encrypt before you upload — then a leaked link exposes nothing.
Related: password protect a ZIP on Windows · on Mac · password protect a folder