Extract Password-Protected ZIP

This tool is for one specific situation: you have a ZIP that asks for a password, and you already know that password. You upload the archive, type the password you were given, and the contents are decrypted and unpacked directly in your browser. It does not crack, guess, or bypass anything — if you do not have the correct password, it cannot open the file.

The realistic fits are everyday sharing and archiving cases. A colleague or vendor sends you an encrypted ZIP and shares the password over a separate channel; a client delivery arrives locked; or you encrypted an archive yourself months ago and now need a single file back out of it. Admin and student workflows fit too — an exported records bundle, a course materials archive, or a backup you protected and set aside.

Because decryption is local, it suits anything you would rather not push through a third-party server: HR documents, contracts, invoices, source bundles, or personal files. The archive and the password stay on your device throughout.

The path is short: drop or select one .zip file (up to 200 MB), enter the password, and choose Unlock & extract. The tool reads every entry, decrypts it in memory, and shows a list of the recovered files with their sizes. From there you download files one at a time, or use Download all to repackage everything into a single unencrypted ZIP for convenience.

It reads the two encryption types ZIP files use in practice: modern AES (128, 192, and 256-bit) and legacy ZipCrypto. The same correct password covers either. Output is the original files, byte-for-byte — folder structure inside the archive is preserved in the entry names.

What it deliberately does not do: it does not recover or brute-force a forgotten password, does not handle RAR, 7z, or other non-ZIP containers, and a handful of proprietary or non-standard encryption schemes simply cannot be read in a browser. It also processes one archive at a time rather than a batch.

The most common dead end is expecting recovery. There is no password field that "tries harder" — a wrong or unknown password produces an error, full stop. The error message is intentionally shared between two causes: the password is incorrect, or the ZIP uses an encryption type the browser cannot read. If you are certain the password is right, suspect the encryption format or a corrupt download.

Passwords are case-sensitive and whitespace-sensitive. A trailing space pasted from chat or email, a smart-quote substituted by an app, or an autocorrected character will all fail silently as "wrong password." Use the show-password toggle to confirm exactly what you typed before assuming the file is the problem.

Two practical limits: the archive must be an actual .zip (RAR and 7z files will not load), and very large archives are held entirely in memory, so a low-powered phone or tablet may stall or run out of room on a big extraction. Only open archives you own or have been given permission to open.

After extraction, check the file count and names against what you expected — the list shows every entry with its size, so a zero-byte or missing file is easy to spot. Open at least one or two of the actual files (a document, an image, a spreadsheet) to confirm they render correctly, not just that they downloaded. If you used Download all, remember that bundle is a fresh, unencrypted ZIP; store or delete it accordingly.

Sizes are a quick sanity check: a file that extracted far smaller than expected, or that will not open in its native app, points to a truncated source archive or a partial decryption rather than a tool error. Re-download the original ZIP and try again if a file looks wrong.

For anything official, financial, or legal — signed contracts, tax records, evidence, regulatory filings — verify the extracted files manually against the source before relying on them. Confirm the document is complete, the version is the one you expected, and nothing was silently dropped. Browser-side extraction is faithful when it succeeds, but a human check is the only thing that guarantees the recovered file is the one that matters.