Explainer · 5 min read
How to Remove a Password from a ZIP File
Understand ZIP encryption methods and how to extract password-protected archives you own.
ZIP archives can be encrypted using two methods: the legacy ZipCrypto (also called "traditional" or "PKWARE" encryption) and the modern AES-256 encryption introduced in WinZip 9.0 (2003). If you own an encrypted archive and know its password, you can extract its contents using any compliant ZIP tool without needing a third-party cracking service.
Only extract or decrypt ZIP archives you own or are explicitly authorized to access. PasswordRemover does not crack or brute-force ZIP passwords.
ZipCrypto versus AES-256 ZIP encryption
ZipCrypto (PKZIP 2.x): The original ZIP encryption method, dating to the early 1990s. It uses a stream cipher with a 96-bit key derived from the password using a simple CRC-based algorithm. ZipCrypto is considered cryptographically weak and is vulnerable to known-plaintext attacks when the attacker has a copy of any unencrypted file from the archive.
AES-256 (WinZip AE-2): Strong encryption using AES with a 256-bit key and PBKDF2-HMAC-SHA1 key derivation. This is what modern tools like WinZip, 7-Zip, and macOS Archive Utility use when you select "AES-256" encryption. AES-256 ZIP files are substantially more secure than ZipCrypto archives.
Note: the .zip file extension does not indicate the encryption method. You must inspect the archive properties to know which scheme was used.
Extract a password-protected ZIP you own
On Windows: Right-click the ZIP file → "Extract All." Enter the password in the extraction dialog. If Windows Explorer fails, use 7-Zip (free, open-source): right-click → 7-Zip → Extract Here, then enter the password.
On macOS: Double-click the ZIP file and enter the password when prompted. For AES-encrypted files that Archive Utility cannot open, install "The Unarchiver" (free, App Store) or use the terminal command: unzip -P yourpassword archive.zip
On Linux / terminal: unzip -P yourpassword archive.zip or 7z x archive.zip -pYOURPASSWORD
Tips
- 7-Zip supports both ZipCrypto and AES-256 ZIP on all platforms and is the most reliable cross-platform tool.
- If you need to decrypt and re-archive without a password, extract all files first, then create a new ZIP without encryption.
Create a decrypted copy of the archive
Extract all contents to a folder, then re-compress without a password. In 7-Zip: right-click the folder → 7-Zip → Add to archive → leave the password field empty. This creates a new, unencrypted archive.
In Python (built-in zipfile module): import zipfile; zipfile.ZipFile("encrypted.zip").extractall("output/", pwd=b"yourpassword") — then re-zip the output folder.
Why PasswordRemover does not offer a ZIP password cracker
Password cracking tools attempt to recover a forgotten password by trying millions of combinations. They are legitimate for file owners who have genuinely lost access, but they are equally useful for unauthorized access — so we do not offer this capability.
If you have genuinely lost the password to your own archive, commercial tools such as Passware Kit or Elcomsoft Advanced Archive Password Recovery can perform recovery, but success is not guaranteed for strong AES-256 passwords.
Best practices for creating encrypted ZIP files
Always choose AES-256 over ZipCrypto when your recipients' tools support it. 7-Zip, WinZip 9.0+, and Info-ZIP 6.0+ all support AES-256.
Use a passphrase of at least 12 characters and store it in a password manager. The PBKDF2 iteration count in AES-256 ZIP slows brute-force attacks, but a weak password still fails quickly.
Note that file names inside a standard ZIP archive are stored unencrypted even when content is encrypted. If file names are sensitive, consider using 7z format with AES encryption, which encrypts the file list.
Ready to unlock your document?
PasswordRemover processes your file locally in the browser — no uploads, no account required.
Go to tools