How to Password Protect a Folder on Your Mac

macOS makes it surprisingly hard to do something simple: put a password on a folder. Right-click a folder and you will not find a Lock option. There is no checkbox in Get Info. Apple assumes your login password is the only gate you need, which leaves a real gap when you want one specific folder protected from anyone who already has access to your account.

Here are the genuine ways to password protect a folder on a Mac, what each one costs you in convenience, and how to choose.

Option 1: Disk Utility encrypted disk image

The built-in route is to wrap your folder in an encrypted disk image. It works, but it is fiddly.

Open Disk Utility, then choose File, New Image, Image from Folder.
Select the folder you want to protect.
For Encryption, pick 128-bit or 256-bit AES.
Set a password and, importantly, uncheck “Remember password in my keychain” so it actually asks each time.
Choose read/write if you want to keep editing the contents.

You now have a .dmg file. Double-click it, enter the password, and it mounts like a drive. Eject it when you are done and the contents are sealed again.

The catch is workflow. You are now managing a disk image, not a folder. You have to mount and eject it deliberately, the original folder should be deleted once you are sure the image works, and it is easy to leave the image mounted and defeat the whole point. It is secure but clumsy.

Option 2: Compress with a password

For a folder you rarely touch, a password-protected archive is enough. The built-in Archive Utility does not add passwords, so you use Terminal:

zip -er protected.zip MyFolder

It will prompt for a password twice, then produce an encrypted zip. To open it, you supply the password. This is fine for cold storage, files you want to tuck away and almost never open, but it is not a working folder. You cannot edit files in place, and zip encryption is weaker than a proper AES disk image.

Option 3: An encrypted vault

The cleanest experience is a dedicated tool that gives you an encrypted folder you can open with Touch ID and that re-locks itself when you are done. This is the approach Cloak takes. It encrypts the folder’s contents with AES-256, the same standard used for the disk image route, but removes the manual mounting and ejecting. You authenticate with your fingerprint, the folder opens, and it seals again when you lock it.

The advantage over Disk Utility is that you are still working with a folder, not babysitting a disk image, and the advantage over a zip is that it stays usable day to day while remaining strongly encrypted. If you want to understand what AES-256 actually protects against, we cover that in how to encrypt files on your Mac.

Since version 1.1 this works for a single file as well as a folder. If you only need to protect one document or one photo, see how to lock a file on Mac.

Which one should you use

Choose the Disk Utility image if you want a free, fully built-in option and do not mind the mounting and ejecting ritual.
Choose the password-protected zip only for files you want to archive and rarely open.
Choose an encrypted vault if you want a folder you actually use, protected with strong encryption, opened with a fingerprint instead of a typed password every time.

The mistake to avoid

Whatever you pick, do not leave the original, unprotected copy of the folder sitting next to the protected one. People do this constantly: they create an encrypted image but forget to delete the plain folder it came from, so the sensitive files are still right there in the open. Protecting the copy means nothing if the original is one click away.

The same goes for backups and cloud sync. If your protected folder is encrypted but your Mac is also syncing the plain version to a cloud drive, you have quietly created an unprotected copy somewhere else. Check what is syncing before you assume a folder is private.

If you want a folder you can lock with Touch ID and AES-256 without the disk-image hassle, Cloak handles it locally, with a one-time purchase and nothing sent to the cloud.

Questions people ask

How do you password protect a folder on a Mac?

Two ways. The built-in way is Disk Utility: File, New Image, Image from Folder, set Encryption to 256-bit AES, and choose a password. You get a disk image that opens with that password. The simpler way is Cloak, which locks the folder where it is, encrypts it with AES-256, and opens it with Touch ID.

Can you put a password on a folder on a Mac without Disk Utility?

Not with macOS alone. The other built-in route is a password-protected zip, which needs Terminal and leaves the original folder unprotected. Cloak puts a password or Touch ID on any folder or file in place, with no disk image and no Terminal.

Is there a way to password protect a folder on a Mac for free?

Yes. The Disk Utility encrypted image is free. The cost is convenience: you get a disk image rather than a folder, you have to eject it when you are done, and if you forget the password nothing can recover it.

How do I lock a folder on a Mac with Touch ID?

macOS has no Touch ID option for folders. Cloak adds one. Pick the folder, and it is encrypted in place and hidden until you unlock it with your fingerprint or your password.