Step by step
Add your files
Open send.enzonic.com and drag in the file, several files, or a folder.
Turn on the password option
In the transfer options, enter a password. Use something long that you are not using anywhere else.
Tighten the other settings
Pick a short expiry and, if only one person needs the file, a download limit of 1.
Send the link and password separately
Share the link or 6-digit code one way, and the password a different way, such as a phone call or a different messaging app.
A share link on its own is a bit like a house key under the doormat. Anyone who finds the link can use it. Adding a password changes that: the link or code gets someone to the transfer, but they still need the password to download the file. On Enzonic Send this is free and works without an account.
This page covers how to set it up, and, just as important, what the password actually protects so you can decide whether it is enough for your file.
Setting a password on a transfer
- Go to send.enzonic.com and add your files. A single file is sent as-is; multiple files or a folder are zipped in your browser first.
- In the options, enter a password.
- Choose an expiry: 1 hour, 1 day or 3 days without an account, up to 7 days with a free account.
- Optionally set a download limit (1, 5, 10, 50 or 100) and add a title and message for the recipient.
- Upload. You get a link, a 6-digit code and a QR code, all of which lead to the password prompt.
The recipient opens the link, scans the QR code, or types the code at send.enzonic.com/receive. Before the download starts, they enter the password.
What the password protects
- A leaked link. If the link ends up in a forwarded email, a group chat, a browser history or a shared screenshot, whoever finds it still cannot download without the password.
- A guessed code. A 6-digit code is short. A password on top means guessing the code is not enough.
- Over-the-shoulder exposure. Someone who photographs your QR code in a meeting room gets nothing without the password.
What it does not protect
This is where many file sharing sites get vague. Here is the plain version.
Enzonic Send encrypts files in transit with TLS, so they cannot be read on the network between you and the server. Files are also encrypted at rest on the storage side. But the service is not end-to-end encrypted. The password is an access control on the download, not a key that encrypts the file so only the recipient can read it.
In practical terms:
- The password stops other people with the link from downloading.
- It does not make the file unreadable to the service operating the storage.
- It does not protect the file once it is on the recipient's device.
For most everyday files, such as a signed contract, a set of photos, an invoice, or a design draft, a password plus a short expiry is a sensible level of protection. For medical records, legal evidence, or anything regulated, add your own encryption first (see below).
Send the password by a different route
The single most effective habit is to never put the link and the password in the same place.
| If the link goes by... | Send the password by... |
|---|---|
| Text message or a phone call | |
| Slack or Teams | A phone call or a different app |
| Text message | Saying it out loud, in person or on a call |
| Spoken 6-digit code | A text message |
The point is that one compromised inbox or one forwarded message should not expose both halves. If someone is in the room with you, just say the password out loud.
Picking a password
You do not need a password manager-grade secret here, but avoid the obvious.
- Use three or four random words, or at least 12 characters.
- Do not reuse a password from any of your accounts.
- Avoid the recipient's name, the company name, or the file name.
- Make it easy to read aloud if you will be saying it over the phone. Ambiguous characters like l, 1 and I cause mistakes.
Layer it with expiry and download limits
A password is strongest when combined with the other options:
- Download limit of 1 means even someone with the link and password cannot download after the intended recipient has.
- Short expiry shrinks the window. If the recipient is ready now, pick 1 hour.
- Delete when done. As the sender, you can delete the transfer at any time.
Our guide to creating an expiring file link goes through choosing these settings.
When you need real end-to-end encryption
If the file should be unreadable to everyone except the recipient, encrypt it on your own device before uploading. One widely used option is 7-Zip on Windows (or a compatible tool on Mac and Linux): create a .7z archive with AES-256 encryption and a strong password. Upload that archive to Enzonic Send. Then send the archive password through a separate channel, the same way as above.
Now the file is encrypted before it leaves your computer, and the transfer password adds a second layer on the download itself. Use different passwords for the two. If you are new to archives, see sending a zip file.
Limits
- Up to 500 MB per transfer without an account, 2 GB with a free account.
- Longest expiry is 3 days anonymously, 7 days signed in.
- If you forget the password you set, the simplest fix is to delete the transfer and upload again with a new one.
FAQ
Is a password-protected transfer end-to-end encrypted?
No. Enzonic Send encrypts files in transit with TLS and at rest on storage, but it is not end-to-end encrypted. The password controls who can download, it does not encrypt the file with a key only you hold.
Do I need an account to add a password?
No. Passwords, download limits, titles and messages are all available on anonymous transfers up to 500 MB.
What happens if the recipient forgets the password?
They cannot download until they have it. You can tell them again, or delete the transfer and upload a new one with a new password.
Should I put the password in the same message as the link?
No. If that one message is forwarded or the account is compromised, both pieces leak together. Send the password by a different channel.
How do I get true end-to-end encryption?
Encrypt the file yourself before uploading, for example as an AES-256 encrypted 7-Zip archive, and share that archive password separately. Then only people with the password can open the contents.
Updated 2026-10-17