7zip-archive with password .... is it really safe ?

Submitted by peter_g on August 1, 2007 - 1:04am.

7zip offers a function of protecting an archive with a password.

Is that a - really - secure way of protecting files ?

( categories: )

No it is :-(

... cause You could open the archive without 7-zip with other tools without a password or simply with 7-zip over Open-intern.

A password on a archiv is never secure, the only a way to have it secure is to encrypt it (with a passord for decryption)

Regards
Marko

You've paid for Sotware more or less?
What You need is OSS!

tool for encryption ?

Thanks for that answer !
I expected that answer .... Sad

Is there a - preferable portable - tool to encrypt just one or more files without the need to encrypt the hole folder or drive ?

axcrypt2go beta

You've paid for Sotware more or less?
What You need is OSS!

that is not portable !

That tool is not portable !

You Sure?

I'm pretty sure that 7z files encrypt the entire file using AES encryption.

Live with purpose.

Could be that I'm wrong ...

... but it only works with the option "encrypt filenames" and the format 7z.
Without this option or with another format like zip it don't work.

That's not really secure, cause the user could not see any hint, that only 7z with the "encrypt filename" option will protect the archiv.
The Password-Option is for the other formats active too but useless.

Regards
Marko

You've paid for Sotware more or less?
What You need is OSS!

7z without

I think that 7z without encrypt filenames still encrypts all the files... you can just see the names of them.

Live with purpose.

sounds good :-)

Thanks, that sound good !

And it fits perfect to my personal needs !

PLEASE...

...try it out!

Without "encrypt filenames" You are able to open any !!!(the 7z an selfextracting exe too!) archiv without asking for the given password!

Is that secure? That's nonsens! (Pardon me)

Once again: Without "encrypt filenames" the given password will never protect Your archiv (tested with the last version of 7-Zipportable)

Regards
marko

You've paid for Sotware more or less?
What You need is OSS!

Ummm

I don't think so. Just because you are able to see the filenames does *NOT* mean you are able to actually extract them. You *ARE* able to see the list of file name within a tool like 7-Zip or by running the self extractor... but you're SUPPOSED to be able to... unless of course you select to encrypt filenames. You just can't open or extract ANY of the files.

Just because you can see the file listings does not mean you can open the archive. They are two entirely different things.

Live with purpose.

Sorry, You're right!

I didn't klick of the extract button Sad.
If I did it I had seen the question for the password.

Pardon me John!
YOU ARE RIGHT!

Sometimes it seems better to sleep about a problem...

Regards
Marko

You've paid for Sotware more or less?
What You need is OSS!

... 7z - selfextracting-file ?

does the encryption work with the 7z - selfextracting - file-format (*.exe) ?

Yea

Yea

Live with purpose.

perfect !

Smiling

(.. thanks !)

not only AES ...

but 256 bit AES .
good luck cracking that if a secure password is used ..

And the encryption got even

And the encryption got even better and faster beginning with v 4.48. The latest beta might be used with the 4.42 launcher till the next final will be released...