How to Password Protect a Google Drive Folder in 2026 (7 Methods)

Last updated: September 2026

Quick answer: No, Google Drive cannot password protect a folder on any plan. The fastest fix is Restricted sharing (Share, then General access, then Restricted), which forces recipients to sign in with an approved Google account. For a real password, either compress the folder with 7-Zip (AES-256, under a minute) before uploading, or share it as a password-protected data room link. The seven methods below cover both, from free to business-grade.

Looking for a single Google Doc rather than a folder? See how to password protect a Google Doc. This guide is for folders and the files inside them.

I'm Deqian Jia, co-founder of Peony, a data room company used by 8,000+ customers, and I have tried every workaround for this over the past two years. Google's security model is account-level authentication plus permission-based sharing. There is no folder password, no file password, and no roadmap for one, so the protection has to come from the layer above Drive (a password-gated link) or the layer below it (encrypting the files before they reach Google).

Quick guide — match the method to the stakes:

• Low-sensitivity internal sharing? → Restricted sharing (free, built-in) — Method 1
• Need to lock down downloads? → Disable copy/download/print (free) — Method 2
• Paid Google account and need time-limited access? → Link expiration (paid only) — Method 3
• Want real encryption where even Google can't read your files? → 7-Zip or Cryptomator (free) — Method 4
• Single PDF or Office file? → Password-protect the file itself (free) — Method 5
• Saw the Google Forms trick online? → Skip it, it's security theater — Method 6
• Investor decks, legal docs, client deliverables — anything where a leak has consequences? → Peony — password-gated links with per-viewer tracking, watermarks, and instant revocation — Method 7

Can you password protect a Google Drive folder?

No. Google Drive has never offered folder-level or file-level password protection, and there is no indication it is coming. I have been watching the feature request threads since 2019; they are long, frustrated, and consistently met with "this isn't available." What you can do is restrict who gets in (Method 1), strip the download button (Method 2), time-limit access on a work account (Method 3), encrypt before uploading (Methods 4 and 5), or move the folder to a password-gated link (Method 7).

Google Drive's architecture is built around account-level authentication — your Google account login plus optional two-factor authentication — combined with permission-based sharing.

When you share a Google Drive folder, you choose between:

• Restricted — "Only people with access can open the file," in Google's own words: the accounts you add by email
• Anyone with the link — anyone who has the URL can open it without signing in to a Google account
• Your organization — on Google Workspace accounts, limits access to your domain

None of these options include a password prompt (Google's sharing help page, checked September 2026). If you need recipients to enter a password before viewing files, Google Drive simply cannot do it.

The 2025 permission inheritance change

Google announced in February 2025 that it would stop allowing restricted access on individual files inside a shared folder later that year. As of September 2026, files inside a shared folder inherit the parent folder's sharing unless they sit in a limited-access folder. You can no longer share a folder with someone and then hide specific subfiles within it.

This one caught us off guard: a partner folder where we had hidden a few internal analysis files suddenly exposed all of them. We caught it within hours through our own audit.

If someone has access to the parent folder, they have access to everything in it. To restrict access to certain files, you must move them to a separate folder with different permissions, or use the "limited access" folder feature (introduced February 2025) to lock specific subfolders to directly-added users only.

What security features does Google Drive include by default?

Encryption at rest, two-factor authentication, and Restricted sharing are on every plan. The three controls that actually vary by tier are these:

*Google One AI Premium, AI Pro, and Ultra personal subscribers can also set expirations since November 2025.

Key caveat I wish I'd known earlier: Google retains all encryption keys. Files are encrypted with AES-256 at rest and TLS in transit, but Google can decrypt and access your files if required by law. Only Client-Side Encryption — available on exactly four editions: Frontline Plus, Enterprise Plus, Education Standard, and Education Plus (Google's CSE doc) — puts encryption keys in your hands. That's a deal-breaker for some use cases.

How do you password protect a Google Drive folder? The 7 methods

Methods 1 to 3 use Google's own controls (no password, but real access limits). Methods 4 and 5 add a password by encrypting before upload. Method 6 is a trap. Method 7 moves the folder to a link that has a password.

Method 1: Restricted sharing (free, built-in)

The simplest approach: share the folder only with specific Google accounts. This is what we default to for everyday internal docs.

How to do it:

1. Right-click the folder in Google Drive → Share
2. Under General access, click the down arrow and choose Restricted
3. Add specific email addresses
4. Choose a role (Viewer, Commenter, Editor) and click Send

Pros: Free, built-in, recipients must authenticate with their Google account.

Cons: Not password-gated — anyone logged into an added account can access. Recipients need Google accounts. No engagement tracking on free accounts. Can't prevent forwarding or downloading (files can be re-shared). Files inside a shared folder now inherit its sharing; you can't hide individual files within it.

Best for: Low-sensitivity internal sharing with known contacts who have Google accounts. This is our go-to for team documentation, meeting notes, and non-confidential collaboration.

Method 2: Disable downloads and copying (free, built-in)

Combine restricted sharing with download/copy/print restrictions. I add this on anything going to external parties as a baseline.

How to do it:

1. Share the folder with Restricted access
2. In the share dialog, click the Settings gear (top right)
3. Under "People who can download, copy, and print," uncheck the roles you want to block (Google's label as of September 2026; older accounts may still show the single "Viewers and commenters can see the option to download, print, and copy" checkbox)

Pros: Prevents casual downloading and redistribution. Available on free and Workspace accounts. Enhanced IRM (launched January 2025, expanded July 2025) extends restrictions to Editors — via DLP rules on Enterprise plans, or directly by file owners and shared drive managers.

Cons: Does not prevent screenshots or screen recordings. Google Docs content can still be manually copied by retyping. Blocking the file owner requires an admin DLP rule. I tested this myself — it took me about 30 seconds to screenshot a "protected" document. It's friction, not security.

Best for: Adding a speed bump on top of restricted sharing. But be honest with yourself — if someone is motivated to copy your content, this won't stop them.

Method 3: Link expiration (paid accounts only)

Automatically revoke access after a set date. Useful, but only on a paid Google account.

How to do it:

1. Share the file or folder, then click Share again
2. Next to the person's name, click the down arrow → Add expiration
3. Next to "Access expires," pick a date within one year, then Save

Important: This feature is not available on free personal Google accounts. It requires a paid Google Workspace plan — or, since the November 2025 rollout, a Google One AI Premium, AI Pro, or Ultra subscription. As of November 2025, folder-level expiration is available for the Viewer role in shared drives.

Cons: Users can download files before expiration and retain copies permanently. Expiration works per-user, not per-link. On shared drive folders, expiration applies to the Viewer role only. The expiration only cuts off future access — it doesn't recall anything already downloaded.

Method 4: Encrypt files before uploading (free)

This is the real deal for personal encryption — files become genuinely unreadable without a password, even to Google.

Option A: 7-Zip (strongest free option)

1. Select files or folders → Right-click → 7-Zip → Add to archive
2. Choose .7z format (required for header encryption)
3. Set encryption to AES-256
4. Enter a strong password (12+ characters)
5. Check "Encrypt file names" — this is critical, it prevents viewing the file list without the password
6. Upload the .7z archive to Google Drive
7. Share the archive; send the password through a separate channel

I use 7-Zip for personal backups and one-off file transfers where I need actual encryption. The learning curve is minimal — install, right-click, set a password. It just works.

Pros: Free, open-source, AES-256 encryption. Files are genuinely unreadable without the password. Google cannot access contents.

Cons: Recipients need 7-Zip or a compatible extractor. No preview in Google Drive — must download to open. No view tracking, no access revocation once downloaded. Must re-encrypt and re-upload for any file changes.

Option B: Cryptomator (best for personal cloud encryption)

Cryptomator creates an encrypted "vault" in your Google Drive sync directory. Files are automatically encrypted before syncing. Unlike VeraCrypt, only changed files sync — no full-container re-upload.

I tested Cryptomator for about three months. It's genuinely great for protecting your own cloud files — medical records, tax documents, personal financial data. The desktop app is smooth. But the moment you try to share an encrypted vault with someone else, the experience falls apart.

Pros: Free on desktop, open-source, AES-256. File names are obfuscated in cloud storage.

Cons: Fundamentally a single-user tool. You can't share an encrypted vault with another person without giving them your vault password and requiring them to install Cryptomator. No preview, no analytics, no collaboration.

Best for: Protecting your own files stored in Google Drive from cloud-provider access or breaches. Not designed for sharing.

Note: Boxcryptor, a previously popular Google Drive encryption tool, was acquired by Dropbox in late 2022. Free accounts were deactivated in January 2023. Cryptomator is the recommended open-source replacement.

Method 5: Password-protect individual PDFs or Office files

Password-protect files at the application level before uploading to Google Drive. Straightforward for single files.

For PDFs:

• Adobe Acrobat: File → Protect → Encrypt with Password
• Free alternatives: SmallPDF, iLovePDF (online tools)
• Microsoft Word: Save As → PDF → Options → Encrypt with password

For Office files:

• Word/Excel/PowerPoint: File → Info → Protect Document (Word) / Protect Workbook (Excel) / Protect Presentation (PowerPoint) → Encrypt with Password

Pros: Files stay encrypted at rest in Google Drive. Recipients can use standard PDF readers or Office apps.

Cons: Only works file-by-file, not for folders. Google Drive preview won't work on encrypted files. No analytics or view tracking. Must manage passwords separately for each file. We tried this approach for investor updates once — managing different passwords for different investors across multiple files became unworkable within two weeks.

Method 6: Google Forms "password gate" (not recommended)

Some guides recommend creating a Google Form with a password field that reveals the Drive link only after entering the correct password. I see this suggestion pop up every few months in forums and blog posts.

Why you should skip this: The password is stored client-side in the page source code. I tested it — right-click, View Source, search for the password string, and there it is in plain text. This method provides zero actual security. It only stops someone who wouldn't bother looking. Once the Drive link is revealed, it can be shared freely.

Never use this for anything you actually care about protecting.

Method 7: Use a secure sharing platform

For business use cases — investor decks, legal documents, due diligence files, client deliverables — this is where I landed after trying everything above.

The core problem with Methods 1–6 is the same blind spot: once someone has the file or link, you lose visibility and control. Did your investor forward the pitch deck? Did a vendor share the pricing sheet with a competitor? You won't know until the damage surfaces.

We learned this lesson during a fundraising round. We shared financial projections via Google Drive with restricted access, but one investor forwarded the entire folder to their analyst, who then shared it with two more people we'd never met. We only found out when one of those people referenced specific numbers from our model. By that point, we couldn't tell who else had seen it or how far it had spread.

That's when we moved sensitive external sharing to Peony. The difference is fundamental — you go from "I hope nobody forwards this" to "I can see exactly who opened it and cut them off if needed":

• Password-gated links — recipients enter a password before viewing
• Per-page view analytics — see who viewed what, when, and for how long
• Dynamic watermarking — viewer's name/email stamped on each page
• Access revocation — disable links instantly
• Link expiration — automatic access cutoff
• NDA/agreement gates — require legal acceptance before viewing
• Download controls — allow or prevent downloads per link

Peony starts free ($0), and the free plan already includes password-protected links, link expiration, email capture, and page-by-page analytics. Business at $30/admin/month adds view-only (no download) links, screenshot protection, and remote revocation; Data Room at $52/admin/month adds dynamic watermarking and signed NDAs. Honest framing: if the folder is internal and low-stakes, Restricted sharing is enough and you do not need any of this. For enterprise-scale M&A deals, other options include Datasite, Intralinks, and Ideals. For a detailed comparison, see our top 10 virtual data room providers guide.

Why Peony over other data rooms: Traditional VDRs like Datasite and Ideals offer similar security (neither publishes a flat monthly price; see our Datasite pricing and iDeals pricing breakdowns) — but they're built for enterprise M&A teams with dedicated admins and six-figure budgets. Peony gives you the same security stack (AES-256 encryption, dynamic watermarks, complete audit trails, screenshot protection, 2FA) with AI-powered organization that sets up a data room in under 5 minutes — starting free. That's the gap it fills: VDR-grade security at file-sharing prices, without the complexity.

Best for: External sharing of sensitive business documents where you need password gates, tracking, watermarks, and audit trails. This is what we use for fundraising, client proposals, and anything where a leak would actually hurt.

Which password protection method is best for Google Drive?

My take: For personal file encryption, 7-Zip with AES-256 is free and genuinely secure, but it gives you no analytics or access control after the fact. For business workflows (investor decks, legal documents, client deliverables) a secure sharing platform like Peony provides password-gated links and per-page analytics on the free plan, and instant access revocation on Business ($30/admin/month).

How do I actually prevent Google Drive leaks in practice?

Most Google Drive leaks are configuration mistakes, not attacks. Four habits fix nearly all of them:

• Audit sharing quarterly. Every audit we run finds shares that should have been revoked months ago: former vendors, finished projects, departed staff.
• Default to Restricted. Treat "Anyone with the link" as the exception.
• Send passwords on a separate channel. Never in the same thread as the link. NIST's guidelines favor long, unique passphrases over complex character rules.
• Expire and watermark external access. Rounds close and engagements end; access should end with them. Dynamic watermarks don't stop screenshots, but they make leaks attributable.

Bottom line

Google Drive is an excellent collaboration tool, but it was never designed for controlled external sharing of sensitive documents. There's no password protection, limited tracking, and no watermarking on any plan. That won't change — it's a fundamental architectural decision, not a missing feature.

• Low stakes, internal team → Google Drive restricted sharing (free)
• Personal file encryption → 7-Zip with AES-256 (free, genuinely secure)
• One-time PDF handoff → Encrypt the file before uploading (free)
• High stakes, need to track who saw what → Peony (password gates, watermarks, analytics, revocation)

The important thing is matching the security to the sensitivity. Don't over-engineer protection for a shared team folder, and don't share investor financials behind a Google Drive link with "anyone with the link" turned on.

If you're sharing investor decks, deal documents, or client files, try Peony for free — set up a password-protected data room in minutes with full view tracking, dynamic watermarks, and instant access revocation.

Frequently asked questions

Can you password protect a Google Drive folder?

No. Google Drive has no folder password on any plan (free, Workspace, or Enterprise). Its only access controls are Restricted sharing (named Google accounts) and Anyone with the link. To get a real password prompt you have to either encrypt the folder before uploading (7-Zip, AES-256) or share it through a platform that puts a password on the link, such as a data room.

Can I password protect a Google Drive folder?

Not natively. The fastest workaround is Restricted sharing, which makes recipients sign in to a Google account you have approved; that is authentication, not a password. For an actual password, compress the folder into a .7z archive with AES-256 and encrypted file names, then upload the archive, or move the folder to a password-gated data room link.

How do I lock a Google Drive folder?

Right-click the folder, click Share, set General access to Restricted, and remove anyone who should not be there. Then open Settings in the share dialog and uncheck the download, copy, and print boxes for viewers and commenters. That is as locked as Google Drive gets: no password, no watermark, and screenshots still work.

Can you password protect a Google Drive file?

Not inside Drive, but you can password protect the file itself before uploading. PDFs: Acrobat or a free tool like iLovePDF (Protect PDF). Word, Excel, PowerPoint: File > Info > Protect Document / Protect Workbook / Protect Presentation > Encrypt with Password. Drive stores the encrypted file but cannot preview it, and there is no view tracking. For a native Google Doc, Sheet, or Slide there is no file password at all; see our separate Google Docs guide.

How do I password protect a shared Google Drive folder?

You cannot add a password to an existing shared Drive folder. Either switch it to Restricted and add each recipient by email, or move the contents to a link that supports a password. Peony does this on the free plan: upload the folder, turn on password protection and link expiration, and share one link. Business ($30/admin/month) adds view-only downloads and remote revocation; Data Room ($52) adds dynamic watermarks.

Does Google Drive encrypt files?

Yes. Google Drive encrypts all files with AES-256 at rest and TLS in transit. However, Google retains the decryption keys and can access your files if required by law. Only Client-Side Encryption (CSE), available on Frontline Plus, Enterprise Plus, Education Standard, and Education Plus editions, gives users control over their own encryption keys.

Can I set an expiration date on Google Drive shared links?

Only with an eligible work or school (Google Workspace) account or a Google One AI Premium, AI Pro, or Ultra subscription. Free personal Google accounts cannot set link expiration dates. Expiration is set per person (Share, then Add expiration next to their name, up to one year out), not per link. As of November 2025, folder-level expiration is available for the Viewer role in shared drives.

What is the most secure way to share Google Drive files externally?

For maximum security, encrypt files before uploading using 7-Zip with AES-256 and encrypted file names. For usability plus security, use a secure sharing platform or virtual data room that provides password-gated links, view tracking, watermarking, and access revocation. Google Drive's native restricted sharing provides basic access control but no password gates, analytics, or watermarks.

Is Google Drive secure enough for investor decks and legal documents?

Google Drive provides encryption and basic access control, but lacks password-gated links, dynamic watermarking, per-page view analytics, NDA gates, and granular audit trails. For investor decks, due diligence documents, and legal files that require controlled external sharing, most professionals use dedicated data room platforms that provide these features; 8,000+ customers run that workflow on Peony. Free Google accounts also lack link expiration, activity dashboards, and DLP.

Related Resources

• Top 10 Google Drive Alternatives
• Top 10 Secure File Sharing Tools
• How to Password Protect Files on Mac
• How to Password Protect Excel Files
• Password Protect Video Guide
• Protect Word Documents from Editing & Copying
• How to Prevent PDF Forwarding
• Virtual Data Room Cost Guide