Help

Frequently asked questions about ZipVault.

Getting Started

How do I create an archive?
  1. Drag files or folders onto the drop zone, or click Choose Files. Adjust compression and password settings on the right panel. ZipVault showing files added to the drop zone with compression dial and settings
  2. Click Create ZIP, then pick a name and save location. ZipVault archive location dialog with save-as field and folder picker
  3. ZipVault compresses and encrypts your files. ZipVault creating archive with progress indicator at 88%
  4. If Check archive is enabled, validation runs automatically. ZipVault checking archive, validating ZIP structure and security settings
  5. Review the summary - encryption method, file size, integrity status, and save location. ZipVault archive complete screen showing encryption with AES-256, integrity verified
How do I choose where archives are saved?

When you click Create ZIP, a save dialog appears where you pick the file name and destination folder for your archive.

ZipVault archive location dialog with save-as field and folder picker

Passwords & Security

How does password protection work?

Toggle Password setting on, enter a password and confirm it. The archive will be encrypted so that extracting any file requires the password.

ZipVault with password field and masked input
What is AES-256 vs Legacy Compatibility Mode?

AES-256 (default) uses strong, modern encryption. Enable Compatibility Mode to use legacy PKWARE encryption, which is weaker but compatible with older tools that don't support AES.

ZipVault settings panel showing all options including Compatibility Mode toggle
Should I use Compatibility Mode?

Warning

Compatibility Mode is not recommended. Only enable it if your recipient specifically needs to extract the archive using Windows Explorer's built-in ZIP handler, which does not support AES encryption.

Compatibility Mode uses PKWARE/ZipCrypto encryption, a cipher that has been cryptographically broken since 1994. Free, open-source tools can crack it in minutes by exploiting known file headers (e.g. PNG signatures, PDF headers) as a starting point for key recovery.

If your recipient uses 7-Zip, WinZip, The Unarchiver, Keka, or any modern archive tool, they can open AES-256 encrypted archives without issue. Keep Compatibility Mode off.

ZipVault settings panel with Compatibility Mode toggle
What information is visible in an encrypted archive?

Regardless of encryption method (AES-256 or Compatibility Mode), the ZIP format stores certain metadata outside the encrypted payload. Anyone who has the archive file can see:

  • Filenames and folder structure
  • File sizes (compressed and uncompressed)
  • Modification timestamps
  • CRC-32 checksums

Encryption protects the file contents only; not the names or structure. This is a limitation of the ZIP format itself, not of ZipVault.

For very small files (around 4 bytes or fewer), the CRC-32 checksum alone may be enough to determine the exact contents. If hiding filenames or structure is critical, consider placing the encrypted ZIP inside a second encrypted ZIP.

How does Keychain storage work?

When Store password is enabled, ZipVault saves the archive password in your macOS Keychain. It is stored with WhenUnlockedThisDeviceOnly accessibility — device-local, never synced.

Can I reveal a stored password?

Yes, but you must first enable the Store in Keychain option when creating the archive. Once stored, open History, select an archive, and tap the reveal button. You'll be prompted for device-owner authentication (Touch ID or password) before the password is shown.

ZipVault history view showing recent archives with password indicators

Archives

What does 'Check archive' do?

When enabled, ZipVault reads the archive after creation to verify its ZIP structure (end-of-central-directory record, central directory entries) and confirms whether password protection was applied correctly.

ZipVault checking archive - validating ZIP structure and security settings ZipVault archive complete screen showing integrity verified
What compression levels are available?

The compression dial maps to ZIP levels 0 through 9. Level 0 stores files with no compression (fastest). Level 9 applies maximum compression (smallest file size). The default is level 5 ("Normal").

ZipVault compression dial set to Normal level
What archive formats are supported?

ZipVault creates .zip archives only. It's a focused tool built to do one thing well — secure ZIP archiving with strong encryption and validation.

Support for additional formats may be added in a future update.

Can ZipVault unzip archives?

No. ZipVault is focused exclusively on creating secure ZIP archives.

You don't need a separate app to extract, macOS can natively unarchive anything ZipVault creates. Just double-click the .zip file in Finder and enter the password when prompted.

Still have questions? Contact support