EasyUnZip
Download

Security

Is EasyUnZip safe?

The checkable answer: extraction happens on your PC, nothing about your files leaves it, and the installer's hash is published so you can prove you have the file we built.

Where your files are processed

On your PC, by a program running on your PC. EasyUnZip does not upload archives to be extracted somewhere else and there is no server-side extraction to opt out of - the feature does not exist. Turn off your network adapter and extraction still works, which is the version of this claim you can test rather than believe.

What leaves the machine, exactly

Never
Archive contents. File names, inside the archive or outside it. Extraction paths. Any password you type.
On licensing
A one-way hash derived from your PC's machine identifier, the app version, and - when you activate - your licence key. Nothing else.
Never asked for
An account, an email address in the app, or a card. The trial needs none of them.
Analytics
None in the app. No trackers on this website either.
Crash reports
Not collected. A crash is reported when you choose to tell us about it.

The machine hash is one-way: we cannot reverse it into anything about your PC, and it is meaningless outside EasyUnZip. Its only job is counting how many machines a key has been used on. The privacy page states this in full.

Passwords

A password for an encrypted archive is held in memory for the session and is never written to disk, never put in the registry, and never sent anywhere. Close the app and it is gone. That is also why EasyUnZip asks again next time rather than remembering it for you - a convenience we deliberately did not build.

The installer, and why Windows may warn you

EasyUnZip v0.1.1 is not code-signed. Windows SmartScreen may show "Windows protected your PC" - not because it found anything in the file, but because it has not seen this file often enough to have an opinion. Choose More info, then Run anyway.

We would rather say that plainly than let you meet it as a surprise. A certificate is a few hundred dollars a year, and on a $3 product it comes straight out of the price. What it would buy is a name in a dialog. What the checksum below buys is the whole file, byte for byte.

Verify the download

SHA-256 of the installer for v0.1.1:

a21cbe85927f9a04dd5789bf4cfee96c9f132994ef9f7b12481c399501e3d696

certutil -hashfile EasyUnZip-Setup-0.1.1.exe SHA256

Matching strings mean you have our file. The step-by-step version of this check is here, and it works for any download, not only ours.

Download only from easyunzip.app. We publish no mirrors and no "download manager", we never bundle other software, and the installer asks for nothing except where to put the program.

What is inside the installer

EasyUnZip itself, and the official 7-Zip engine - 7z.exe and 7z.dll - which does the actual decompression. 7-Zip is open source and long-established; using it is why a small app can read RAR properly rather than approximately. 7z.dll is LGPL, so its licence and third-party notices are installed alongside it and you are free to replace it with a compatible official build.

What EasyUnZip adds over running 7-Zip yourself is a fair question, and it has its own page.

Updates

There is no silent updater. EasyUnZip does not install anything in the background; a new version is a new installer you choose to run, and what changed is listed on the changelog. Nothing on your PC is modified between releases.

Reporting a security problem

Use the support form and say what you found. Security reports go to the front of the queue. If a fix needs a release, the changelog will say what was fixed and the release notes will credit you if you want to be credited.

The honest limitations

  • v0.1.1 is not code-signed. SmartScreen may warn. The checksum is the answer.
  • EasyUnZip is not antivirus. It does not scan what comes out of an archive, and an archive from a stranger is exactly as risky after extraction as before it.
  • It cannot repair a damaged archive. If 7-Zip cannot read it, EasyUnZip reports the failure rather than guessing.
  • Windows 10 and 11 only. There is no macOS or Linux build to audit.
  • The 14-day trial contacts our licence server. That is the one network call the app makes, and the privacy page says exactly what is in it.