How to Send Encrypted Files Without Installing Software

You need to send a sensitive document — a tax return, a contract, login credentials, or medical records. The file is sitting on your desktop, and the recipient is waiting. What do you do?

Most people reach for email. They attach the file, hit send, and move on. But standard email attachments travel in plain text across servers. Anyone with access to those servers — or anyone who intercepts the message — can open the file.

The good news is that you do not need to install encryption software, set up PGP keys, or learn command-line tools. Several browser-based solutions let you encrypt and share files directly from your web browser, with zero installation required.

Why Email Attachments Are Not Secure

Standard email protocols (SMTP) were designed in the 1980s without encryption in mind. While modern email providers use TLS to encrypt messages in transit, there are critical gaps:

• Stored in plain text — Once delivered, attachments sit unencrypted in both the sender's and recipient's inbox
• Multiple server hops — Emails pass through multiple servers, each a potential point of interception
• No access control — Anyone who gains access to the email account can download every attachment ever sent
• Forwarding risk — Recipients can forward the email (and its attachments) to anyone without your knowledge
• No expiration — Attachments remain accessible indefinitely unless manually deleted

For casual files, this is fine. For sensitive documents, it is a real problem.

Method 1: Password-Protected ZIP Files

The most traditional approach is creating a password-protected ZIP archive before sending it through any channel.

How it works:

1. Right-click the file and create a ZIP archive
2. Set a strong password on the archive
3. Send the ZIP file through email, cloud storage, or messaging
4. Share the password through a separate channel (phone call, text message)

Pros:

• Works with any operating system
• No internet-based tools required
• The encrypted file can be sent through any medium

Cons:

• ZIP encryption (ZipCrypto) is weak and can be cracked with modern tools
• 7-Zip's AES-256 encryption is stronger but requires the recipient to install 7-Zip
• You still need a separate channel to share the password
• No way to confirm the recipient accessed the file
• The file persists on both devices after extraction

Method 2: Cloud Storage with Password Protection

Services like Google Drive, Dropbox, and OneDrive let you share files via links. Some offer limited password protection.

How it works:

1. Upload the file to cloud storage
2. Generate a sharing link
3. Set access permissions (and a password, if the platform supports it)
4. Share the link with the recipient

Pros:

• Familiar interface
• Large file support
• Link can be revoked after the recipient downloads the file

Cons:

• Google Drive does not support password protection on individual links
• Dropbox password protection requires a paid plan
• Files remain on the cloud provider's servers — you are trusting their security
• No built-in self-destruct or expiration on most platforms
• The cloud provider can technically access your files

Method 3: Encrypted Email Services

Services like ProtonMail and Tutanota offer end-to-end encrypted email, including attachments.

How it works:

1. Compose an email in the encrypted email service
2. Attach the file
3. The service encrypts the message and attachments
4. The recipient decrypts using their own account or a password you provide

Pros:

• Strong encryption (E2E for both parties if both use the same service)
• Integrated with the email workflow
• Some services offer self-destructing messages

Cons:

• Both parties ideally need accounts on the same service for full E2E encryption
• Password-based decryption for external recipients can be confusing
• File size limits (ProtonMail: 25 MB, Tutanota: 25 MB)
• Requires creating an account

Method 4: Browser-Based Encrypted Sharing Tools

This is where modern tools shine. Browser-based platforms handle encryption entirely in your browser, require no installation, and work on any device with a web browser.

How it works:

1. Open the tool in your browser
2. Upload or paste your content
3. The browser encrypts the content before sending it to the server
4. You receive a shareable link
5. The recipient opens the link, enters the password, and accesses the decrypted content

Using LOCK.PUB for Browser-Based Encrypted Sharing

LOCK.PUB is a browser-based platform that supports multiple content types — memos, links, images, audio, and more — all protected by password and encryption.

For sending sensitive text (passwords, credentials, instructions):

1. Go to lock.pub and select Memo
2. Paste your sensitive text content
3. Set a strong password
4. Configure expiration (e.g., 1 hour, or self-destruct after first view)
5. Share the generated link with the recipient
6. Send the password through a separate channel

For sharing password-protected links:

1. Select Link and enter the destination URL
2. Set a password — the recipient must enter it before being redirected
3. Useful for sharing access to documents stored elsewhere (Google Drive, Dropbox) with an added password layer

Advantages of browser-based tools:

• No software installation on either end
• Works on desktop, tablet, and mobile
• Content can self-destruct after viewing
• Password adds a second layer of protection
• No account required for basic use

Comparison Table: Encrypted File Sharing Methods

Method	Installation Required	E2E Encryption	Self-Destruct	Password Protection	Max File Size
ZIP + Email	No (basic) / Yes (7-Zip)	No	No	Yes (weak)	Email limit
Google Drive	No	No	No	No (free tier)	5 TB
Dropbox	No	No	No	Yes (paid)	2 GB (free)
ProtonMail	No	Yes	Optional	Yes	25 MB
Yopass	No	Yes (client-side)	Yes	No	Small files
LOCK.PUB	No	Yes (chat), Password (memo)	Yes	Yes	Text/image/audio

Best Practices for Sending Encrypted Files

Regardless of the method you choose, follow these guidelines:

1. Always Use Separate Channels

Send the file (or link) through one channel and the password through another. For example, email the link and text the password. This way, compromising one channel does not expose the content.

2. Set the Shortest Reasonable Expiration

If the recipient needs the file within an hour, set a 1-hour expiration. There is no reason for a sensitive link to stay active for 30 days.

3. Use One-Time View When Possible

If the recipient only needs to access the content once, enable self-destruct after first view. This eliminates the risk of the link being reused later.

4. Verify the Recipient First

Before sharing anything sensitive, confirm you are communicating with the right person. A quick phone call or video check prevents sending secrets to the wrong address.

5. Avoid Descriptive File Names

A file named tax-return-2026-john-smith.pdf reveals information even before it is opened. Use generic names like document.pdf when sharing sensitive files.

When You Need Something Quick

For most situations where you need to send a short secret — a password, an API key, a private note, or a confidential instruction — a browser-based tool like LOCK.PUB is the fastest option. No installation, no account setup, no learning curve. Create a password-protected memo, set it to self-destruct, and share the link.

For large files that exceed what browser-based tools can handle, the cloud storage + password approach (or encrypted email) remains practical. The key is always adding a layer of password protection and using separate channels for the link and the password.

Start sharing secrets securely at lock.pub — no software required.