Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I am looking for command line encryption utility for Windows - paid or free. Would prefer it to support AES-256. It has to be something with large user base and actively in development. Need to be able to specify password in command line - not looking to use private/public keys.

It will be used as a part of my backup process. In a nutshell I would just use Winzip or 7-zip encryption but the list of files in encrypted archive is visible and I don't like that. So the plan is to zip files without the password and then encrypt ZIP file itself.

I do use TrueCrypt but it is not convenient for this process - one has to backup whole volume which is not effective storage-wise plus one cannot create encrypted volumes from the command line as far as I know.

Basically looking for something like this: but this software doesn't seem to be under active development.

share|improve this question
up vote 6 down vote accepted

In the command line version of 7-zip 7z.exe you can use the -p switch to set a password. This will also enable header encryption ( -mhe option for the 7z format) which means file names will also be encrypted.

share|improve this answer
Thank you for that!!! This is what I will likely use. – Joe Schmoe Jun 9 '12 at 19:00
Unless the 7-zip encryption code is Open Source, I would not recommend using it. Open Source encryption code has been vetted by more eyes, and is much harder to hide backdoors in. – Fran Jun 9 '12 at 19:29
7-zip uses AES and it's LGPL v2 and I really think a guy who is competent enough to invent a widely-used archieve format knows how to use an ecryption lib correctly. – Jun 9 '12 at 19:32
2 I agree. I just didn't know if the source was open. It is, so 7-zip is a perfectly valid solution. – Fran Jun 10 '12 at 0:22

openssl is available for Windows is widely used and supports command line encryption

# encrypt file.txt to file.enc using 256-bit AES in CBC mode
openssl enc -aes-256-cbc -salt -in file.txt -out file.enc

If necessary, you can specify the pass-phrase on the command-line

… -pass pass:mySillyPassword


… -pass file:/path/to/secret/password.txt


See also this answer to a related question that mentions GPG

share|improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .