Security

Is EasyUnZip safe?

Extraction happens on your PC. The published installer hash lets you check your download against the release, but it does not verify publisher identity or guarantee safety.

Where your files are processed

On your PC, by a program running on your PC. EasyUnZip does not upload archives to be extracted somewhere else and there is no server-side extraction to opt out of - the feature does not exist. Turn off your network adapter and extraction still works, which is the version of this claim you can test rather than believe.

What leaves the machine, exactly

Never

Archive contents. File names, inside the archive or outside it. Extraction paths. Any password you type.

On licensing

A one-way hash derived from your PC's machine identifier, the app version, and - when you activate - your licence key. Nothing else.

Never asked for

An account, an email address in the app, or a card. The trial needs none of them.

Analytics

None in the app. No trackers on this website either.

Crash reports

Not collected. A crash is reported when you choose to tell us about it.

The machine hash is one-way: we cannot reverse it into anything about your PC, and it is meaningless outside EasyUnZip. Its only job is counting how many machines a key has been used on. The privacy page states this in full.

Passwords

A password for an encrypted archive is held in memory for the session and is never written to disk, never put in the registry, and never sent anywhere. Close the app and it is gone. That is also why EasyUnZip asks again next time rather than remembering it for you - a convenience we deliberately did not build.

The installer, and why Windows may warn you

EasyUnZip v0.1.2 is not code-signed. Windows SmartScreen may show "Windows protected your PC" for an unfamiliar download. SmartScreen also checks for known threats, so we cannot assume why a warning appeared. If Windows blocks the installer or you are unsure, stop and contact support.

The missing signature is a limitation. A valid Authenticode signature would verify the signing publisher and the integrity of signed content. The checksum below lets you compare file contents, but it does not provide that publisher identity check or make a security warning safe to ignore.

Verify the download

SHA-256 of the installer for v0.1.2:

8b37b1190c0b00bb0afe380c6164130a00d8250c876dac47bba207f33254f3dd

certutil -hashfile "EasyUnZip-Setup.exe" SHA256

Compare all 64 hexadecimal characters, ignoring letter case and spacing. A match confirms that the download matches this published hash, provided you trust its source. It does not guarantee the software is safe. If the hashes differ, do not run the file. The step-by-step version of this check is here, and it works for any download, not only ours.

What is inside the installer

EasyUnZip itself, and the official 7-Zip engine - 7z.exe and 7z.dll - which does the actual decompression. 7-Zip is open source and long-established; using it is why a small app can read RAR properly rather than approximately. 7z.dll is LGPL, so its licence and third-party notices are installed alongside it and you are free to replace it with a compatible official build.

What EasyUnZip adds over running 7-Zip yourself is a fair question, and it has its own page.

Updates

There is no silent updater. EasyUnZip does not install anything in the background; a new version is a new installer you choose to run, and what changed is listed on the changelog. Nothing on your PC is modified between releases.

Reporting a security problem

Use the support form and say what you found. Security reports go to the front of the queue. If a fix needs a release, the changelog will say what was fixed and the release notes will credit you if you want to be credited.

The honest limitations

• v0.1.2 is not code-signed. A checksum verifies a match with the published file; it does not guarantee safety.
• EasyUnZip is not antivirus. It does not scan what comes out of an archive, and an archive from a stranger is exactly as risky after extraction as before it.
• It cannot repair a damaged archive. If 7-Zip cannot read it, EasyUnZip reports the failure rather than guessing.
• Windows 10 and 11 only. There is no macOS or Linux build to audit.
• Starting the 14-day trial and activating a key contact our licence server. The privacy page explains the licensing data sent.