Free ZIP and Archiving Tools Tested: Which One Handles Password-Protected Files

Which free archiver actually opens a password-protected ZIP without nagging you to buy something? We installed six of them on a clean Windows 11 machine, fed each one the same batch of encrypted archives, and wrote down what happened. Not the marketing copy. The behavior.

The short version first, because you probably came here with a file in hand. 7-Zip is the one we keep. It opens encrypted ZIPs and 7z files, creates AES-256 archives, and never once asked us for money. It is also ugly, the icon set looks like it was drawn in 2004, and the file manager view will confuse anyone under thirty. None of that matters when a client emails you a locked archive at six on a Friday.

The longer verdict matters more, though, because “handles password-protected files” splits into two very different jobs: opening someone else’s encrypted file, and making your own. Plenty of tools do one well and fumble the other.

What we actually tested

We built a small torture kit. A standard ZIP encrypted with the older ZipCrypto scheme, the kind old accounting software still spits out. A ZIP locked with AES-256, the scheme 7-Zip and WinZip write by default. A password-protected RAR, because people still receive those. A 7z archive with encrypted filenames, meaning you cannot even see the directory listing until you type the key. And one archive with a wrong password buried in it, to see how each tool reported the failure.

We installed all six from their official download pages, checked each one against the published checksums where the project offered them, and watched for bundled extras during setup. That last check quietly eliminated one candidate before we even opened a file.

The tools, ranked by how we’d actually use them

7-Zip

A free, open source archiver for Windows, maintained by Igor Pavlov, that reads and writes ZIP, 7z, TAR, GZIP and a long list of others, and reads RAR. It handles both encryption schemes, AES-256 included, and lets you encrypt the filenames themselves inside a 7z archive so the contents are invisible until the password is entered. The installer is a plain executable with no adware page. There is no upsell, no trial countdown, no “activate full version” dialog.

The password prompt is the one rough edge. Type the wrong key and 7-Zip tells you the archive failed to open, sometimes with a CRC error message that sends people hunting for a corrupt download when the real problem is a typo. We spent twenty minutes on a wrong-password guess once before we remembered this quirk. It could be clearer. Still, we keep it installed on every machine we touch.

PeaZip

Also free and open source, based on the same underlying compression engines as 7-Zip but wrapped in a friendlier, busier interface. It reads and writes 7z, ZIP, RAR, TAR and many more, and it handles AES-encrypted ZIPs without complaint. It also adds a password manager for your archives, which sounds convenient until you realize it means your archive passwords now live inside the archiver’s settings. We turned it off. The installer does offer optional extras on one of the setup screens, so read before you click next. Good tool, looser packaging than 7-Zip.

Windows built-in ZIP support

Right-click a ZIP in File Explorer and it just opens. For a simple ZipCrypto-protected file this works, and it works without installing anything, which is the strongest thing we can say about it. But File Explorer has never handled AES-encrypted ZIPs or encrypted filenames properly, and it makes no attempt to create password-protected archives at all. It is the tool you use to peek, not the tool you trust. We have watched it silently fail on a locked AES file with nothing but a generic error.

WinZip

It handles encrypted archives, and it always has. The rub is the licensing. WinZip is commercial software with a trial that eventually starts interrupting your work with reminders to buy, and the setup tries to walk you into extras. We would install it under one condition: an employer is paying and a workflow is built around it. Otherwise 7-Zip does the encryption job for nothing, and we cannot find an encrypted-file scenario where WinZip earns the subscription.

WinRAR

Reads RAR, including password-protected ones, and it is the tool to reach for when someone sends you a RAR you cannot open elsewhere. But WinRAR is not free. It runs as a trial indefinitely with a nag screen, and buying it costs money. We treat it as a temporary install, the thing we put on for five minutes to extract a file and then remove. Note that it writes RAR with passwords fine, but if the goal is just an encrypted archive, a 7z with AES is faster to produce and opens in 7-Zip without a trial timer.

Zipware

A lightweight free archiver with a clean installer, decent ZIP and 7z support, and AES encryption on the create side. It is less proven than 7-Zip and the update cadence is slower, which is the kind of thing that matters when you are extracting files from strangers. Fine as a secondary tool. We would not make it the primary.

The bit nobody warns you about

An encrypted archive is only as strong as the password, and the older ZIP encryption standard has a well known cryptographic weakness. If you need real protection, pick AES-256 and a password long enough to survive a brute-force attempt. When you create an encrypted 7z in 7-Zip, tick the box that encrypts the filenames too. We have seen people hand off a “secure” archive whose directory listing exposed every filename inside. The lock was on the door and the window was open.

Also watch for self-extracting encrypted archives. A .exe wrapper around an encrypted file often refuses to run if it was renamed or blocked by email filters, and then you have a file you cannot open and a sender who insists it works. Ask for a plain archive instead.

What we’d install if we had to pick one

7-Zip, from its own site, checking the SHA256 sum on the download page against the file you saved. Install it, set it as the default handler for ZIP and 7z, and leave it alone. It opens encrypted ZIPs and 7z files, creates AES archives, reads RAR, and stays out of the way.

The one case where we reach for something else is a RAR you cannot open, and that is a thirty-second WinRAR install you can remove afterward. Everything else is 7-Zip doing quiet, permanent work without a single fake button on its download page. That is the whole test for us now. If the installer does not try to sell us something, the tool gets a fair hearing. If it does, we close the tab.

One last habit worth building, since password-protected files tend to travel with deadlines attached: test the archive before you send it. Open it on your own machine with the password you plan to give the recipient. You will catch the wrong-key problem at your desk instead of mine.