ZIP Extractor
Inspect supported ZIP archives and extract files with explicit path, integrity and expansion limits.
This tool runs entirely in your browser. Your data is never uploaded, never stored, and never leaves your device.
List a local classic ZIP, validate member sizes and CRC-32, and download the exact bytes of a selected file.
How to use it
- 1Choose one ZIP within 10 MiB, 100 entries and 20 MiB expanded total.
- 2Wait for all file checks, then inspect names and sizes.
- 3Select a member and press Extract selected file.
- 4Download the cleaned filename; only open files from sources you trust.
Example
- Input
- Example ZIP → bytes.bin
- Output
- 00 ff 10 41 42, 5 bytes
The binary member is preserved exactly.
What happens to your data
ZIP content, member names and extraction stay local without uploads or browser-storage persistence. Page assets and anonymous usage events may use the network. Downloads create independent local copies.
Last updated October 2026
Open a small ZIP archive in your browser, inspect its member names and expanded sizes, then download the exact bytes of one selected file. Every file member is checked before the list becomes available. This is useful when you need an attachment from a ZIP on a device without an archive application.
The tool supports a bounded subset of classic ZIP: stored files and DEFLATE compression, ASCII or valid UTF-8 filenames, and empty folder records. Password-protected, split and ZIP64 archives are rejected. It does not open the extracted content, execute programs, extract a folder to your disk or scan files for malware.
How it works
Choose one ZIP up to 10 MiB. The archive may contain at most 100 entries, including folders, and 20 MiB of expanded file data in total. Local headers and the central directory must agree. Unsafe paths, parent traversal, duplicate names, case-insensitive or Unicode-normalized name collisions, overlapping entries, symbolic links and unsupported flags are rejected before extraction. Legacy filename encodings and nonempty directory payloads are outside the supported subset.
Files are checked sequentially in bounded chunks, with CRC-32 and the actual expanded byte count checked against the directory. Checking does not first allocate the full expanded archive. A forged small size, corrupt stream or excessive expansion stops processing. CRC-32 helps detect damage; it is not an authenticity check.
The list retains folder paths for inspection. Select a file and press Extract selected file to prepare its download; an empty member produces a valid empty download. Download names use only the final, cleaned filename, so files in different folders can have the same download name. Save them with distinct names if needed.
Selecting another ZIP, changing the chosen member, clearing or cancelling invalidates the previous download. Source bytes, member checks and extraction stay local. The library and page assets may use the network, but the ZIP content and member names are not uploaded or saved in browser storage. Downloaded copies remain on your device.
Worked example: Extract exact binary bytes
- Input
- example.zip → bytes.bin, stored member
- Result
- 5 bytes: 00 ff 10 41 42
The ZIP example also contains notes/hello.txt. Selecting the binary member preserves the zero and FF bytes.
Common use cases
- Saving one document from a small ZIP attachment
- Inspecting archive member names before downloading files
- Recovering exact binary test fixtures from an archive
- Checking a small ZIP for damaged members
Frequently asked questions
Can I extract a password-protected ZIP?＋
No. Encrypted members and encryption flags are rejected. Unlock or re-export the archive with a trusted archive application first.
Why does a ZIP that opens elsewhere fail here?＋
It may use ZIP64, multiple disks, a compression method other than STORE or DEFLATE, a legacy filename encoding, conflicting paths or unsupported metadata. The browser tool deliberately accepts a limited subset with strict checks.
Does the expanded-size limit rely only on ZIP headers?＋
No. Every file's actual expanded bytes are counted while its stream is checked. A declared size below the real output is rejected, and all files together must fit within 20 MiB.
Can ZIP extraction damage my folders?＋
This tool does not write an archive folder tree. It prepares a normal file download with a cleaned final filename. It rejects unsafe archive paths, but you still need to trust any downloaded file before opening it.
Does a passed CRC check mean the file is safe?＋
No. CRC-32 detects many accidental data changes but does not verify a sender, prove authenticity or detect malware. Only open downloaded files from sources you trust.
Can I download an empty ZIP member?＋
Yes. A correctly declared and checked zero-byte file can be extracted and downloaded. Folder entries are listed but are not downloadable files.
Standards and limitations
Related tools
File Type Checker
Inspect recognized file signatures, extensions and browser MIME without opening or uploading the file.
File Hash Checker
Get SHA-1, SHA-256 and SHA-512 checksums for a file, then paste the expected value to confirm a match.
GZIP Compress / Decompress
Compress a file to GZIP or decompress a supported .gz file, then download the exact output bytes.
File to Base64
Encode files locally as Base64 or data URLs, compare SHA-256 and download the full text.