The short answer: Mac doesn't have a built-in folder lock, but you have three real options
macOS does not include a native "password protect this folder" button. Instead, you can create an encrypted container that holds your files, use the Finder's built-in encryption tool, or rely on third-party software. The fastest method for most people is to create an encrypted disk image — a single file that acts like a locked vault. When you double-click it, you enter a password and the folder appears on your desktop. When you eject it, the contents are encrypted and inaccessible without the password.
The trade-off is convenience: you cannot straightforward open the folder and work inside it the way you normally would. You have to mount the encrypted image first, which takes a few seconds. But the encryption is strong, and the setup takes about five minutes.
Key Takeaways
- The easiest method is to create an encrypted disk image using Disk Utility, which is already on your Mac and requires no installation.
- You can also use the Files app to create an encrypted folder, though this method is newer and works best if you use iCloud Drive.
- Third-party apps like Keka or The Unarchiver offer password protection, but they add another program to manage and may cost money.
- Whatever method you choose, write down your password somewhere safe — if you forget it, the encrypted files are locked permanently.
Creating an encrypted disk image with Disk Utility
Disk Utility is the tool built into every Mac for managing storage and encryption. Open it by pressing Command + Space, typing "Disk Utility", and pressing Enter. Once it opens, go to the menu bar and click File, then New Image, then Blank Image.
A dialog box will appear asking you to name the image, choose where to save it, and set the size. Give it a name like "Private Documents". For size, pick something larger than you think you need — you can always create another one later. The important part comes next: in the Encryption dropdown, select 128-bit AES encryption or 256-bit AES encryption. 256-bit is stronger but slightly slower; 128-bit is fine for most personal use. Then click Create.
You will be prompted to enter a password twice. Use something you can remember but others cannot guess. Click Create Image. The file will appear on your desktop or in your chosen folder. Double-click it, enter your password, and a new "drive" will appear on your desktop. Drag your files into it. When you are done, right-click the drive and select Eject. The files are now encrypted inside the image file.
Using the Files app for encrypted folders
If you use iCloud Drive, the Files app (called Finder on older Macs) has a built-in encryption feature. Open Finder, navigate to iCloud Drive, right-click in an empty space, and select New Folder. Name it something descriptive. Right-click the folder, select Get Info, and look for an Encrypt or Lock option in the window that opens.
This method is simpler than Disk Utility because the folder stays visible in Finder and you do not have to mount or eject anything. However, it only works reliably if your files are stored in iCloud Drive, and the encryption is tied to your Apple ID. If you forget your Apple ID password, you may lose access to the folder.
Third-party apps: when you need more control
Programs like Keka, The Unarchiver, and Encrypto let you password-protect individual files or folders. You typically drag a file into the app, set a password, and it creates an encrypted version. The advantage is that you can send the encrypted file to someone else and they can open it with the same app and password.
The disadvantage is that you are adding another program to your Mac, and some of these apps cost money or show ads. For protecting a folder on your own computer, the built-in Disk Utility method is usually simpler and does not require installation. Third-party apps make more sense if you regularly need to send encrypted files to other people.
What happens if you forget your password
If you forget the password to an encrypted disk image or folder, there is no recovery option. Apple cannot unlock it for you, and no tool can crack a properly encrypted container without the password. This is by design — it is what makes the encryption actually work. Before you set a password, write it down and store it somewhere safe: a notebook in a drawer, a password manager like 1Password or Bitwarden, or even a note in your phone if it is password-protected.
If you are worried about forgetting it, test the password before you put important files inside. Create the encrypted container, add a test file, eject it, and then try to open it again with your password. Once you know it works, you can add your real files.
Comparing the three methods
| Method | Setup time | How it works | Best for |
|---|---|---|---|
| Disk Utility (encrypted image) | 5 minutes | Double-click to mount, eject when done | Protecting folders on your own Mac |
| Files app (iCloud Drive) | 2 minutes | Folder stays visible, encrypted automatically | Files already in iCloud, minimal setup |
| Third-party apps | 10+ minutes | Drag files in, set password, create encrypted version | Sending encrypted files to others |
Common mistakes to avoid
The biggest mistake is putting an encrypted image inside a cloud folder like Dropbox or Google Drive and then thinking the files are protected. The encryption protects the image file itself, but if someone gains access to your cloud account, they can read the entire image file. The password protects the contents, but not the file's existence. Keep encrypted images on your local drive or in a cloud folder only if you trust the account security.
Another common error is creating the encrypted image but forgetting to eject it when you close your laptop. If your Mac goes to sleep with the image still mounted, someone with physical access to your computer could potentially access the files. Always eject the image when you are done working, especially if you are leaving your Mac unattended.
Frequently Asked Questions
Can I password-protect a folder without creating an image file?
Not with the built-in Mac tools. Disk Utility requires you to create an image file, and the Files app only works with iCloud Drive folders. If you want a traditional folder with a password, you need a third-party app like Encrypto or Keka.
Is 128-bit or 256-bit encryption better?
256-bit is stronger and would take longer to crack, but 128-bit is already strong enough that brute-force cracking is not practical. For personal files, either is fine. Use 256-bit if you are protecting highly sensitive information or if you do not mind the slightly slower performance.
What if I need to share an encrypted folder with someone else?
Create the encrypted disk image, then send the image file itself to the other person via email or file transfer. They can open it on their Mac or Windows computer by entering the password. Third-party apps like Encrypto are often easier for sharing because they create a single encrypted file rather than an image.
Will password-protecting a folder slow down my Mac?
No. Encryption happens when you save the file and when you open the image, but it does not affect your Mac's overall speed. The only noticeable delay is the few seconds it takes to mount an encrypted image when you double-click it.
Can I resize an encrypted disk image after I create it?
Not easily. If you run out of space, you have to create a new image with a larger size and copy the files over. This is why it is worth picking a larger size than you think you need when you first create the image.