Practical security for everyday technology.

An encrypted archive can still reveal its filenames

A laptop displaying a generic archive file list on a home desk beside a small external drive.
AI-generated photographic illustration; not documentary photography.

A password prompt can protect the documents inside an archive while leaving their names visible. That distinction matters when a filename itself reveals a client, a project or a personal subject. Before sending a protected bundle, check what someone can learn without entering the password.

The contents list is information too

Archive behaviour depends on the format and settings. In 7-Zip, the 7z creation dialog offers a separate option to encrypt filenames. The British Columbia government’s illustrated 7-Zip guide shows that option selected alongside the password settings. Choosing a password should not be treated as proof that every part of an archive is hidden.

For a harmless demonstration, create two test documents with invented names. Make an archive using the settings you intend to use, close the application, then reopen the archive without supplying the password. Can you browse the list? Does the application ask for the password only when you try to extract a document? That test reveals more than the lock icon alone.

Check the whole handover

Use a recipient who can open the chosen format, or test with the software they plan to use. A privacy setting is not helpful if the recipient responds by asking for an unprotected copy because their normal tool cannot read it. For sensitive organisational material, use the approved sharing method and ask the responsible team when requirements are unclear.

Also inspect the archive’s own filename and the message surrounding it. Hiding the internal list does not hide a revealing subject line or the name of the attachment. Avoid unnecessary sensitive detail in both places, and keep the password separate from the archive using an agreed channel.

Finally, remember that encryption does not remove the original documents from your computer or control what happens after extraction. Keep the original, archive and extracted copies within the storage rules that apply to the material. The practical goal is a verified handover with appropriate protection, rather than assuming one checkbox makes every surrounding detail private.