Unzip files online

Open a .zip file, see every file in it and download one or all. Password-protected entries and zip bombs are refused. Nothing is uploaded.

How it works

  1. Add your .zip file
  2. Look through the list and download the files you need, or extract all
  3. Download a file or the whole set as a zip

How the unzip tool works

To unzip a file online, add the .zip file here, look through the list of what it holds, and download one file or extract all of them; the zip is opened in your browser and nothing is uploaded. A zip stores its list of files at the end, so the tool reads that list first: each name, its size, its size inside the zip and the date it was saved. That is quick even for a large zip, because nothing is unpacked yet. When you press Download beside a file, only that file's bytes are read and unpacked, and the result is checked against the CRC-32 check value stored in the zip before it is saved. Extract all unpacks every file one after another, shows progress, can be cancelled, and ends with a Download all (.zip) button that keeps the folders. A zip is recognised by its first bytes, not by its extension, so a renamed file still opens.

A worked example

Take a zip with a docs folder, docs/readme.txt (17 bytes) and photo.bin (3,000 bytes), and a second file other/readme.txt. The list shows 3 files and 1 folder, in alphabetical order of their paths. Extract all gives three files. Two of them are called readme.txt, so the second is named readme-2.txt in the result list, while Download all (.zip) keeps docs/readme.txt and other/readme.txt in their folders. The list also shows dates as stored, such as 2024-05-17 13:45. A zip keeps them in the local time of the computer that made it, with no time zone, so they cannot be converted.

Safety checks before anything is unpacked

A zip can be built to cause harm, so the tool checks the list before it unpacks anything. It refuses a zip with more than 10,000 entries, one whose files would unpack to more than 1 GB on a computer or 300 MB on a phone, and one that claims to unpack to over 200 times its own size once it passes 100 MB, which is the shape of a zip bomb. An entry that claims more than 1,032 times its packed size is marked as damaged, because a deflate stream cannot expand further. While a file is unpacked, the tool stops it if it produces more bytes than the zip declared. Names are made safe: a leading slash, a drive letter such as C:, . and .. parts are dropped, so ../../evil.txt is listed as evil.txt, and characters Windows cannot use in a name become -. Symbolic links and other special files are listed as Link, not extracted and are never followed. Extract all is limited to 300 MB on a computer and 100 MB on a phone, because the files are held in memory until you download them; larger zips can still be downloaded file by file.

What it cannot open

Password-protected entries are listed with the label Password-protected and are not opened, whether they use the older ZipCrypto or AES. The tool does not ask for a password. Only the two compression methods used by almost every zip are supported, stored and deflate; entries that use another method such as bzip2, LZMA or Deflate64 are marked Not supported. RAR, 7z, tar and gz files are not zip files and are not supported. A zip split across several parts must be joined first, and an empty zip is not accepted. A self-extracting .exe has a program in front of the zip and is not recognised. Names are read as UTF-8 when they are valid UTF-8, and otherwise in the older DOS character set (CP437), which is what the zip format specifies.

Limits on this device

Everything runs in this tab. A zip over 500 MB on a computer shows a warning, and on a phone files over 150 MB are not added. The list shows 200 rows at a time with a box to search the names. Downloads come out as plain files; the tool does not write folders to your disk, so a file taken from a folder is saved under its own name.

Frequently asked questions

How do I open a zip file without installing software?

Add the .zip file on this page. The list shows each file with its size and date, and Download saves the one you pick. Only the file list is read first, not the files themselves, so a zip with 40 files is listed before anything is unpacked.

How do I extract just one file from a zip?

Find it in the list, using the search box if the zip is long, and press Download beside it. Only that file is unpacked, so a single 2 MB file from a 400 MB zip does not need the other files to be read.

Why is a file marked Password-protected?

The zip stores that entry encrypted, with ZipCrypto or AES. This tool does not take passwords, so the entry is listed but not unpacked. Open the zip in a desktop app that asks for the password, or ask the sender for an unprotected copy.

What is the largest zip I can open?

The files inside may unpack to 1 GB in total on a computer, or 300 MB on a phone, with up to 10,000 entries. Extract all holds the files in memory, so it is limited to 300 MB on a computer and 100 MB on a phone. A zip over those totals is refused with a message.

Can I open RAR, 7z or tar.gz files here?

No. Only .zip files are accepted, and the check is on the file's first bytes, so renaming a .rar to .zip does not help. A file that is not a zip is refused with a message. Convert it to a zip in a desktop archive app first.

Is my zip file uploaded?

No. The zip is processed in your browser and not uploaded. Its names and files are never sent anywhere or saved, and this tool stores no settings.