Extract a ZIP File
Open a ZIP archive and download the files inside, with path traversal refused.
Fill in the form and press “Extract files” to see the result here.
How to use it
- 1Select your file, or drag and drop it onto the upload area.
- 2Adjust the options if you need something other than the defaults.
- 3Press the button. Everything happens on your device.
- 4Download the result.
About the Extract a ZIP File
Every entry is checked before anything is written: absolute paths, Windows drive letters and any `..` segment are refused rather than silently rewritten. That is the "zip slip" vulnerability, and refusing is the only correct response.
Entries that expand to more than 250 times their stored size are also refused, which is what a decompression bomb looks like.
Because a browser cannot recreate folders in your downloads, paths are flattened to file names. Files with the same name in different folders will therefore arrive with the same name.
Questions people ask
Is it safe to open an archive from someone else here?
Extraction is defended against the two standard attacks: entries whose paths try to escape the extraction folder are refused outright, and entries that expand to hundreds of times their stored size are refused as decompression bombs. Nothing is executed, and nothing is uploaded. It still cannot tell you whether the files inside are malicious.
Can it open a password-protected ZIP?
No. Encrypted entries are detected and reported clearly rather than failing with a confusing error. Use a desktop archiver that can prompt for the password.
Is your file uploaded to a server?
No. This tool runs entirely in your browser using standard web APIs, so your file never leaves your device. You can confirm it by opening your browser's network panel while the tool runs, or by disconnecting from the internet after the page has loaded.
Is it free, and do I need an account?
Yes, it is free, and there is no account, no sign-up and no watermark on the result. The project is funded by optional donations.