A complete guide to securing your sensitive files on macOS Sequoia, Sonoma, and Ventura. Learn how to use built-in tools like Disk Utility and Terminal, and when it makes sense to upgrade to dedicated Mac security software.
Yes, you can password protect a folder on a Mac for free. While macOS lacks a simple "right-click to lock" option in Finder, you can achieve folder protection by using Disk Utility to convert the folder into an encrypted DMG file, or by using the Terminal command line to create a password-protected ZIP archive.
Before modifying how your files are stored, it is important to understand how macOS handles file security. Unlike Windows, which offers a built-in Encrypting File System (EFS) directly in the file explorer context menu, Apple relies heavily on encrypted disk images (.dmg files) and system-wide, full-disk encryption (FileVault).
The methods outlined in this guide have been tested and verified across modern Apple operating systems:
Platform Boundary: This guide covers how to password protect a folder on Mac exclusively. If you are looking to secure a USB drive on a PC, refer to our specific guides for Windows.
Not sure which method to use? Answer one question to find the best approach for your specific macOS needs.
Here are the proven ways to restrict document access and secure your files on an Apple machine, starting with free native tools.
The most common native approach is using macOS Disk Utility. Instead of locking the folder directly in Finder, you convert the folder into an encrypted disk image (.dmg). To access the files, you double-click the DMG and enter your password, which mounts it like a virtual USB drive on your desktop.
If you prefer a compressed `.zip` file—especially useful for emailing or sharing—you can use the built-in Terminal. Note: The default macOS Archive Utility (right-click -> Compress) cannot create password-protected zips; it can only open them.
cd followed by a space, then drag and drop the parent folder (where your target folder lives) into the Terminal window and press Return to change the directory.SecureFile.zip with your desired filename, and FolderName with the exact name of your folder:zip -er SecureFile.zip "FolderName"
Terminal will prompt you to enter and verify a password. The keystrokes will be invisible for security reasons while you type.
Many users ask: Is FileVault the same as folder password protection on Mac? No. FileVault encrypts your entire Mac hard drive. If your Mac is turned off or stolen, everything is secure. However, once you log into your macOS account, all your folders are decrypted on-the-fly and visible to anyone physically using your computer.
If you share a MacBook Air or MacBook Pro with family, the best free method is to ensure FileVault is enabled (System Settings > Privacy & Security), and create separate macOS User Accounts for each person. A standard user cannot view the files inside another user's Home folder.
How the built-in macOS methods stack up against dedicated document security software.
| Method | Ease of Use | Sharing / Cloud | Limitations |
|---|---|---|---|
| Native macOS Tools (Free) | |||
| Disk Utility (DMG) | Moderate | Clunky (Requires mounting) | Fixed or slow dynamic sizing; manual original deletion required. |
| Terminal (ZIP) | Hard | Excellent for Email | Requires command-line knowledge; no bulk editing inside ZIP. |
| Third-Party Security (Paid) | |||
| Dedicated App (e.g. Folder Lock) | Very Easy | Seamless Sync / Cloud | Requires software installation and paid license for full features. |
While Disk Utility is functional, relying on it for daily workflow becomes tedious. Upgrading to a third-party app designed for macOS changes how you interact with secure documents.
Of all the options we covered, if you manage sensitive files daily, we recommend Folder Lock for macOS. It bypasses the clunky DMG mounting process, offering instant AES-256 encryption, seamless cloud syncing, and cross-platform access.
When users ask "how to lock a document so it cannot be edited or copied" or "can I make a word document password protected?", it is vital to understand the difference between Open Passwords and Permissions Passwords.
An Open Password encrypts the actual contents of the document. Without the exact password, the file reads as complete gibberish to the computer. This is what Disk Utility DMG creation and Folder Lock AES-256 do. It is highly secure.
A Permissions Password (often used in PDFs or Office files to "restrict document access" or "prevent document copying") does not encrypt the file. It merely sets a digital flag telling the PDF reader or Word app, "Please don't let the user print or edit this." Many third-party readers ignore permissions passwords entirely, meaning they offer virtually zero real security against intentional copying.
If you compress a folder into an encrypted ZIP using Terminal, you can email it safely. However, never email the password in the same message. Send the password via a secure, end-to-end encrypted messaging app (like Signal or iMessage) or via text message.
People often ask: "Can I create a password protected folder in google drive?" Google Drive natively relies on account access permissions, not folder-level passwords. If you upload an encrypted DMG or ZIP to Google Drive, the files inside remain secure, but you cannot open or preview them in the browser. You may see errors like: "couldn't be opened for import. if the file is password protected, try removing the password" in Google Sheets. You must download the file back to your Mac to unlock it, unless you use a tool like Folder Lock which explicitly manages cloud-locker integration.
We see queries like "how to crack folder lock password" or "remove password from a protected folder on Mac". If you used robust AES-256 encryption (via Disk Utility, Terminal, or a third-party app), there is no backdoor or simple crack tool. The encryption is mathematically designed to be unbreakable without the key.
Owner-Safe Recovery Steps:
While macOS native tools are free, they require manual management. Determine if a paid upgrade is worth it for your workflow.
Folder Lock Pro is available as a one-time license for $39.95.
Not directly in the Finder right-click menu. Apple relies on system-wide FileVault encryption. To lock a specific folder, you must convert it into an encrypted disk image (.dmg) using Disk Utility.
The process is identical across modern macOS versions. You use Disk Utility to create an "Image from Folder" and select 128-bit or 256-bit AES encryption.
No, Finder does not have a native "lock folder" button. You must use Disk Utility, Terminal, or a third-party application to secure the folder.
If protected with AES-256 encryption and a strong, unique password, it cannot be hacked using brute force within a human lifetime. However, if you use a weak password or only use a "Permissions Password" in a PDF, it can be bypassed easily.
If you want to avoid mounting DMG files via Disk Utility, you must either use Terminal to create an encrypted ZIP archive or install dedicated software like Folder Lock to lock directories in place.
Yes. If you place all documents into a single folder and encrypt that folder using Disk Utility or Folder Lock, you effectively batch-protect them. Dedicated apps also encrypt files on-the-fly as you drop them into the secure vault.
If you only need to secure a single archive of tax documents once a year on your Mac, the native Disk Utility method is perfectly sufficient. If you need to email a secure file, use the Terminal ZIP method.
However, if you handle sensitive office files daily, require cross-platform access, or want to instantly lock and sync directories to the cloud without managing clunky DMG files, a dedicated third-party tool is highly recommended.