Drop your ZIP here
or
Maximum file size: 100MB
or
Maximum file size: 100MB
Opens a ZIP: Extracts the contents of a ZIP archive on the server.
Filters unsafe files: Executables, scripts and unsafe paths are excluded from the result.
Returns a clean archive: The safe contents are repackaged into a new ZIP for you to download.
Archives are a common way to move harmful files around, so anything executable is removed rather than passed on. The excluded extensions include .php and its numbered variants, .exe, .sh, .bat, .cmd, .com, .msi, .ps1, .psm1, .vbs, .vbe, .js, .jse, .wsf, .wsh, .jar, .cgi, .pl, .py, .rb, .asp, .aspx and .jsp.
Entries that try to escape their folder using path traversal are also refused, and macOS metadata such as the __MACOSX folder and ._ files is dropped because it is rarely wanted.
Extraction happens on our server, so the archive is uploaded. It is used only to produce your download, which is removed after it is sent, and temporary files are cleared automatically.
One ZIP archive of up to 100 MB, containing a maximum of 200 entries and 500 MB of uncompressed content. Requests are limited to ten per minute from the same address.
Executable and script files are removed for safety, including .php and its variants, .exe, .sh, .bat, .cmd, .com, .msi, .ps1, .vbs, .js, .jar, .py, .rb, .pl, .asp, .aspx and .jsp. Path traversal entries and macOS metadata are also dropped.
No. Encrypted and password-protected archives are not supported on this page.
No. Only the ZIP format is handled. RAR, 7z and TAR archives need dedicated software.
The safe contents are repackaged into a new archive so they can be delivered as a single download. Extract that archive to get the individual files.
It guards against archives that are small on disk but expand enormously when opened, which can otherwise be used to exhaust server resources.
Keep moving through common developer workflows with ZIP Compressor, Compress PDF, Merge PDF. You can also browse the full Developer Tools collection or return to the all tools hub.