ZIP file viewer and extractor
See every path and size in a ZIP archive, then download only the file you choose. No upload, no account.
- SECURE
- NO UPLOADS
- NO SIGNUP
- BROWSER BASED
- FREE
- FOREVER.
Support us with a link or a share
Drop a ZIP archive
Nothing is uploaded — the archive is listed in this tab.
Use the ZIP file viewer before expanding the archive
A ZIP file keeps its authoritative contents list in a central directory near the end of the archive. This viewer reads that directory first and shows every recorded path, compression method, compressed size, declared expanded size, and expansion ratio. Listing does not decompress the files, so you can understand an unfamiliar archive before choosing an entry.
Use the path filter for a large archive. The visible list is bounded to keep the page responsive, while the archive summary still counts the complete directory. ZIP64 sizes and offsets are accepted when they fit JavaScript safe integers. Stored and Deflate entries are the extractable V1 formats; unknown methods remain visible with an unsupported label.
Unsafe paths are quarantined, not repaired silently
An archive entry can be named ../../secret.txt, begin at a filesystem root, or use a Windows drive path. Native extraction software that joins such a name to a destination without checking it can write outside the selected folder. This browser tool never creates that directory tree. It quarantines absolute and parent-traversal paths and gives every safe download only the final filename.
Encrypted entries are listed but not offered for extraction. Extremely large declared output and high-ratio expansion bombs are also blocked before allocation. During Deflate extraction, the decompressor may not exceed the exact declared uncompressed size, and the finished bytes must match both that size and the central-directory CRC. A damaged archive therefore cannot produce a successful download receipt.
Extract one deliberate file
Select Download beside a regular safe entry. The browser decompresses only that entry, checks its CRC and saves it; it does not unpack unrelated neighbors. This is useful for checking a package, retrieving one document, or examining an archive sent by someone else without first scattering files across a folder.
The archive stays on this device. No path, filename, directory listing, compressed byte, or extracted content is uploaded, and you can test that claim in your own browser by opening an archive with the Network panel recording. Extracted database scripts can be opened in the SQL file viewer, and an extracted contact export can be read card by card in the VCF file viewer. Document packages are ZIP archives too, but they belong with the dedicated converters rather than treated as arbitrary folders: an EPUB goes through EPUB to PDF, and a Word DOCX through Word to Markdown.
Questions
Is the ZIP uploaded?
No. The central directory is parsed and selected entries are decompressed in this browser tab.
Why can some entries not be extracted?
Absolute and parent-traversal paths, encrypted entries, unknown compression methods, and declared expansion bombs are quarantined instead of being renamed or expanded silently.
Does it extract the whole archive?
No. The route lists the whole archive and extracts one selected regular file at a time. That keeps the destination explicit and avoids writing an untrusted directory tree.
Does it support ZIP64?
The listing reader supports ZIP64 central-directory sizes and offsets when they fit JavaScript safe integers. Stored and Deflate entries can be extracted.