Use 7zip, not zip. You can encrypt the filenames too that way. Even Windows natively supports 7zip these days.

Regarding the password, if you need to be more certain (and don’t want to get into public key cryptography), you could send the password through snail mail in a tamper-evident envelope.