How do I create a password-protected ZIP file?

Why do I need a password-protected ZIP file?​

Password-protected ZIP files can be used for encrypting confidential files, if they have to be transmitted to the BOC Hotline via an insecure channel (e.g. e-mail) as an alternative.

However, please note the following:

• The file names of the files contained at the top level in a password-protected ZIP are nevertheless unencrypted. Therefore, first place confidential files in a folder with a neutral folder name and then add this top-level folder to the ZIP file.
• The password of an encrypted ZIP file must never be transferred at the same time as the ZIP file. Never transmit the password and ZIP file in the same e-mail!
• Use a secure password.
• BOC recommends using our aFFE file exchange platform instead of using password-protected ZIP files to transfer confidential data to the BOC Hotline.
• Below you will find instructions using the open source archiver "7-Zip" as an example. A possible source for download could be the official 7-zip website.

Instructions 7-Zip​

Context Menu Method:

1. Right-click on the file or folder you want to encrypt.
2. Navigate to 7-Zip, then click on Add to an archive....
3. Select and confirm a password in the Encryption field; a non-binding recommendation can be found at the end of this page.
4. Confirm your entries with OK, the encryption process starts.
5. The encrypted package is stored in the same directory as the file to be encrypted.

GUI Method:

1. Open your 7-Zip File Manager via the start menu
2. Navigate to the directory you want to encrypt and click to select it
3. Click on the Add button in the upper left corner
4. Enter a password in the Encryption field and confirm it, you will find a non-binding recommendation at the end of this page.
5. Confirm your entries with OK, the encryption process starts.
6. The encrypted package is stored in the same directory as the file to be encrypted.

Recommendations for a secure password​

• At least 20 characters long.
• A combination of upper case letters, lower case letters, numbers and symbols.
• Not a word from a dictionary, name of a person, product or organisation.
• It should be clearly different from previous passwords.
• Do not use a password that you have used in one place before or that you will ever use again in another place.