What This Tool Does
This tool inspects how a ZIP is encrypted. It reads the per-entry encryption metadata, distinguishes legacy encryption from modern AES, and reports whether the archive headers are encrypted as well as the file contents.
Knowing the encryption setup matters when you choose a tool to open the archive or evaluate how it was secured by the sender.
What the Report Shows
- The encryption method detected for the entries.
- Whether AES, legacy or hybrid encryption is in use.
- Whether strong encryption is also applied to the entry names.
Step by Step
- 1
Upload the ZIP.
- 2
Click Check Encryption.
- 3
Read the method and header-encryption notes.
How Identification Works
The engine reads the version and flag fields of the ZIP directory, which record the encryption scheme. Legacy encryption and AES carry distinct markers, and header protection appears as strong encryption on the directory itself.
Troubleshooting
- Header-encrypted ZIPs may list entries as opaque; that is a report detail, not a failure.
- Mixed archives, some entries encrypted and some not, are reported per-entry.
- Damaged directories can hide method details; run repair first.
Frequently Asked Questions
What is legacy encryption?
The older ZIP encryption method. It is widely supported but weaker, so AES is preferred for new archives.
What is AES in ZIP?
Modern strong encryption supported by current tools; identified separately from legacy flags.
Can header encryption be detected?
Yes, when the directory itself is encrypted, the report surfaces that detail.
Does this reveal the password?
No, this is a structural inspection only.
Is anything extracted?
No, only directory fields are read.