Thank you for the info, Tanvir.
Yes, now I get it.
Out of curiosity, what if I set a package that contains only 1 file with following way?
package password is 12345
file password is ABCDE
in that case, the user needs to enter both passwords ? or package password will overtake file password?
Thank you.