May 28, 2026

How to Password Protect a Google Drive Folder (2026)

Google Drive Security Password How-to Privacy Productivity

Google Drive does not support per-folder passwords — and likely never will, because Google’s security model is “you authenticate to your account; folders inherit that trust.” But “I want my folder password-protected” usually maps to one of three real goals, each with a working solution. Here are all four paths.

First: What Are You Actually Trying to Stop?

Real goal	The right tool
Stop other people in my org from opening the folder	Restrict sharing (built-in, free)
Stop someone using my unlocked computer	Encrypted ZIP upload
Force the file to expire or block download	Confidential mode (single docs only)
Need a vault with audit logs	Workspace Business+ sensitivity labels

Pick by goal — there’s no single “lock this folder” button.

If “password protect” really means “I don’t want randos in my company seeing this folder”:

In Drive, right-click the folder > Share > Share.
Under General access at the bottom, switch from Anyone with the link or Your organization to Restricted.
Under People with access, leave only yourself (and anyone you want to keep).
Click Done.

Now no one can open the folder unless explicitly added — even if they get the URL. That’s the closest native equivalent of a password for most use cases.

Method 2: Upload as an Encrypted ZIP

For genuine password protection where a password is required even by people you’ve shared with:

On Mac

Install Keka (free; from the App Store or keka.io) or use the Terminal command zip -er secret.zip folderName (the -e flag prompts for password).
Choose AES-256 encryption.
Set a strong password (don’t reuse).
Upload the resulting .zip to Drive.

On Windows

Install 7-Zip (free; from 7-zip.org).
Right-click the folder > 7-Zip > Add to archive…
Set Archive format to .zip (or .7z).
Under Encryption, enter a password and pick AES-256.
Click OK. Upload the encrypted archive to Drive.

To use the contents, anyone (including you) downloads the ZIP, extracts it with the password, and re-encrypts after editing. Tedious — but unbreakable without the password.

Don’t lose the password. There’s no recovery for AES-256 — Drive can’t help either.

Method 3: Confidential Mode (Single Documents, Not Folders)

Confidential mode adds an SMS passcode and an expiration date — but it only works on individual Google Docs, Sheets, and Slides shared via the share dialog, and only when sharing externally.

Right-click a Doc, Sheet, or Slide > Share.
Click the gear icon > toggle Editors cannot change permissions and share and Viewers and commenters can see the option to download, print, and copy to OFF.
For email-based sharing with passcode: from inside the file, File > Email > Email this file > toggle Confidential mode at the bottom of the email composer.

This isn’t a folder solution — but if you need protection on just a few files inside a folder, it’s a real layer.

Method 4: Workspace Business+ Sensitivity Labels

If you’re on Google Workspace Business Plus, Enterprise, or Education Plus, your admin can configure DLP (data loss prevention) rules and sensitivity labels that act on folders and their contents.

Files in a labeled folder can be blocked from being downloaded, copied, printed, or shared externally.
Access can be limited to specific groups, with full audit logs.
Workspace can enforce labels automatically (e.g., any file with credit-card patterns gets the “Confidential” label).

Talk to your Workspace admin. The end-user experience: you assign a label from the file or folder menu; the rules do the rest.

Method 5: Third-Party Encrypted Drives (When the Stakes Are High)

For genuinely sensitive data, a third-party encryption layer is the right tool:

Cryptomator (free, open source) — creates an encrypted vault inside any cloud folder. Files are encrypted client-side; Google only stores ciphertext.
Boxcryptor / Tresorit Drive — paid commercial alternatives with the same model.

Setup is a one-time install + pick the Drive folder to encrypt. Day-to-day, your “vault” looks like a normal folder; files are sealed before they leave your machine. This is the strongest protection short of not using Drive at all.

Troubleshooting

”Restricted” still shows the folder in search to org members

File names can appear in search even with Restricted access if someone was previously a viewer. Remove people explicitly from the share dialog. Drive search shows the title to people who once had access for a transition period.

ZIP password feels weak

Use a 16+ character random password. Pair with a password manager so the strong password isn’t your problem to remember.

Confidential mode missing

You’re trying it on something other than a Google native file (Doc/Sheet/Slide) shared via the Gmail send flow. PDFs, images, and ZIPs don’t support Confidential mode — use Method 2 or Method 5 instead.

Forgot the ZIP password

There is no recovery for AES-256. Either restore from a personal backup or recreate the contents. This is the trade-off — true encryption has no back door.

Cryptomator vault is slow

First sync of a new vault is slower than uncrypted Drive. Once it’s mounted, day-to-day performance is close to native.

Quick Reference

Goal	Method	Effort
Org-internal privacy	Restricted sharing	Low
External privacy	Encrypted ZIP	Medium
Time-bound + revocable	Confidential mode (Docs only)	Low
Audit + admin enforcement	Workspace Business+ labels	Med (admin)
Maximum security	Cryptomator vault	Medium

Ready to automate your busywork?

Carly schedules, researches, and briefs you—so you can focus on what matters.

Get Carly Today →

Or explore our free tools