fileformer
search⌘KtranslateENexpand_moreupload_fileConvert
Converters8 file families · 44 direct conversions
What changes in a conversionarrow_forward
home/tools/archive-tools

Someone sent you a .7z, .rar or .tar.gz. Now what?

Windows and Macs open ZIPs on their own, but most other archives need extra software. Pick the extension you've got to see where it comes from, whether your computer can already open it, and the quickest way in.

folder_zip.zipinventory_2.rardeployed_code.7zterminal.tar.gzlayers.tarcompress.gzalbum.iso
.rarfrom WinRAR on WindowsA popular Windows format with good compression and recovery records. Opening it needs extra software on Macs and older Windows.
desktop_windowsWindowschange_circlesometimeslaptop_macMaccancelneeds an appphone_iphonePhonechange_circlesometimes
typical 100 MB of mixed files, compressed
≈ 55 MB · 45% saved
the quickest way inConvert RAR to ZIParrow_forwardSo anyone can open it without installing WinRAR.infoWindows 11 opens RAR since the 2023 update; earlier versions need 7-Zip or WinRAR.
~/before-you-extract

Look inside an archive before you unpack it.

An archive can carry more than files. It can hold paths that climb out of the folder you extract into (the “Zip Slip” attack), links to elsewhere on your disk, programs disguised as photos, and entries that expand a thousandfold. Drop one in and your browser reads its directory without extracting anything to disk: the ZIP central directory, or the TAR headers after un-gzipping in memory. Everything happens on your device. The first sample was built in your browser to trip every check.

holiday-photos.zipbuilt to trip every checkdownload
trip-2026.tar.gza clean ustar archive, gzippeddownload
holiday-photos.zip26.8 KB · 9 entries in the central directory
entrysizepackedmethod
warningREADME.txt196 B54 Bdeflate
warningIMG_2026.jpg.exe4.0 KB4.0 KBdeflate
warning../../.bashrc44 B44 Bdeflate
warningdata/padding.bin20.0 MB19.4 KBdeflate
warningshortcutsymlink-stored
warningprivate/passwords.txt96 B96 BZipCrypto
warningRésumé.docx2.0 KB2.0 KBstored
warningreadme.TXT17 B19 Bdeflate
draft__MACOSX/._README.txt120 B125 Bdeflate
ZIP archiveZIP
entries9 (8 files)unpacked20.0 MBratio775.7:1encrypted1
File dates2026-09-14
Time formatDOS: local time with no zone, in 2-second steps
move_upPaths that leave the folder (Zip Slip)Extracting would write this entry outside the folder you chose, so they could overwrite files elsewhere. Windows Explorer, macOS and 7-Zip strip the ../, but many scripts and older tools don’t.../../.bashrc
link1 symbolic linkA link can point anywhere on your disk. A later entry with the same name then writes through it, a known way to escape the extraction folder.shortcut → /Users
theater_comedyPrograms disguised as documentsWindows hides known extensions by default, so IMG_2026.jpg.exe shows as IMG_2026.jpg. Opening it runs a program.IMG_2026.jpg.exe
bombExtreme compression ratiodata/padding.bin expands from 19.4 KB to 20.0 MB, a ratio of 1,028:1. Ordinary files manage 2-10:1. Zip bombs use ratios like this to fill a disk or crash a scanner.data/padding.bin
lock_openWeak ZipCrypto encryption on 1 entryThe original PKZIP cipher falls to a known-plaintext attack, published by Biham and Kocher in 1994, that needs as little as 12 known bytes. And as in every ZIP, names, sizes and dates stay readable: you’re seeing them now.private/passwords.txt
translateNames may come out garbledThese names aren’t flagged as UTF-8, so Windows Explorer decodes them as code page 437: Résumé appears as R├⌐sum├⌐.Résumé.docx
differenceNames that collideWindows and macOS treat README.txt and readme.TXT as the same file, so extracting one silently overwrites the other.readme.TXT README.txt
mopOperating-system clutterLeftovers from Finder or Explorer. They’re harmless, but show which kind of computer made the archive.__MACOSX/._README.txt
next stepRe-pack only the files you need with the archive converterarrow_forward
~/two-dots

Why .tar.gz has two extensions: bundle first, squeeze second.

Unix tools split the job in two. TAR glues files into one stream without compressing; GZIP, BZIP2 or XZ then compresses that stream. ZIP and 7Z do both at once and compress each file separately.

ZIP and 7Z: one step
photo.jpgeach filecompressedseparately.zipin one archive
Because each file is compressed on its own, you can pull one out without unpacking everything.
TAR.GZ: two steps
.tarall files glued togethergzipwhole stream squeezed.tar.gzone file
Compressing everything as one stream finds more repetition, but to read the last file you have to decompress all of it.
~/measured-in-your-browser

Per-file or one stream: the same files, packed both ways.

Your browser generates a set of files and packs them twice with the same deflate compressor: once as a ZIP, compressing each file on its own, and once as a TAR.GZ, one compressed stream. It then times how long it takes to get the last file back out of each. Every number is measured, and both archives can be downloaded and opened.

CONTENT
Source codeServer logsPhotos (JPEG)
FILES
520100
EACH FILE
2 KB20 KB
20 files · 41.0 KB measured
Uncompressed100%41.0 KBAs a plain TAR: 52.2 KB, because every file gets a 512-byte header and is padded to a 512-byte boundary.
ZIP · per file23%9.2 KBEach file compressed alone, plus 2.3 KB of local and central headers.
TAR.GZ · one stream5%2.2 KB7.0 KB smaller: repeats across files are found once, not once per file.
folder_zipRead the last file from the ZIPJump to it through the central directory and inflate only its 383 B.0.40 ms383 B inflated
layersRead the last file from the TAR.GZThere is no index, so the whole 2.2 KB stream is inflated to reach it.0.40 ms2.2 KB inflated
lightbulbMany similar files favour one stream: the TAR.GZ is 76% smaller. Pick ZIP when people will open single files, TAR.GZ (or solid 7Z) when the whole set moves together.downloadlab.zipdownloadlab.tar.gz

Both use deflate at your browser's default level, so the gap comes only from the layout. 7Z and RAR in solid mode behave like TAR.GZ, with stronger compressors. Timings are the fastest of three runs and depend on your device.

~/reference

Limits and guarantees of nine archive formats.

The fields that decide whether a format can hold your files: how big, how many, which names and dates survive, and what is protected. GZIP, XZ and Zstandard compress a single stream, which is why they're paired with TAR.

formatmax filemax entriesfile namestimestampsencryptionintegrity
ZIP4 GB65,535CP437, or UTF-8 when flaggedDOS local time, 2 s; extended in extra fieldsZipCrypto or AES; names never hiddenCRC-32 per file
ZIP6416 EB2⁶⁴ − 1as ZIPas ZIPas ZIPCRC-32 per file
TAR ustar8 GBunlimited100 + 155 bytes, no set encodingUnix secondsnoneheader checksum only
TAR paxunlimitedunlimitedUTF-8, any lengthsub-secondnonenone
7Z16 EBpractically unlimitedUTF-16100 ns (NTFS)AES-256, can hide namesCRC-32
RAR 58 EBpractically unlimitedUTF-8high precision, optionalAES-256, can hide namesCRC-32 or BLAKE2sp
GZIPone stream1optional Latin-1 nameUnix secondsnoneCRC-32 + size mod 4 GB
XZone stream1none storednonenoneCRC-32, CRC-64 or SHA-256
Zstandardone stream1none storednonenoneoptional 32-bit xxHash

From tape archives to Zip Slip

1979tarVersion 7 Unix ships tar for writing file trees to tape.
1989ZIPPhil Katz publishes PKZIP and the APPNOTE format description.
1992gzipJean-loup Gailly and Mark Adler release a patent-free replacement for compress.
1993RAREugene Roshal releases RAR, with recovery records for damaged archives.
19997-ZipIgor Pavlov releases 7-Zip; LZMA follows in 2001.
2001ZIP64 and paxPKZIP 4.5 lifts the 4 GB limit, and POSIX.1-2001 standardises the pax tar format.
2016Zstandard 1.0Facebook releases a compressor that rivals xz on size and gzip on speed.
2018Zip SlipSnyk reports path-traversal extraction bugs in thousands of projects.