RAR Files
Password-Protected and Encrypted RAR Archives
A password-protected RAR archive uses encryption to keep its contents unreadable without the correct password — there is no legitimate shortcut around one you don't know.
Get an archive tool for your computer
Download the installer and start opening RAR, ZIP and 7z archives in a few minutes.
RAR archives support password protection using AES encryption. When you set a password while creating a RAR archive, WinRAR encrypts the compressed file data so it can't be extracted without supplying the same password later. Depending on the option chosen at creation time, the archive's file names can be encrypted too, in which case even the file listing is hidden until the correct password is entered.
How the encryption works
- RAR uses AES encryption to scramble the compressed data inside the archive.
- The password itself is never stored in the archive — it's used to derive the encryption key needed to decrypt the data.
- If "encrypt file names" is enabled when the archive is created, the file list is also hidden, and a viewer will show nothing meaningful until the password is entered.
- Encryption strength depends on both the algorithm and how strong the chosen password is — a short, guessable password is weak protection no matter how strong the underlying algorithm is.
If you own the archive and know the password
- 1Open the archive in your extractorDouble-click the .rar file or open it in your archive program as usual.
- 2Enter the password when promptedYou'll be asked for the password either when viewing the file list (if names are encrypted) or when extracting.
- 3Extract normallyOnce the correct password is accepted, extraction proceeds exactly like an unprotected archive.
If you set the password yourself but forgot it
Check any password manager, notes, or the original context where you created the archive — for instance, a password you reuse for personal backups. There is no built-in "forgot password" recovery for RAR encryption; the password is required to derive the decryption key, and there's no backdoor.
Ethical and legal note
Only attempt to access a password-protected archive's contents if you created it yourself or have clear permission from the person who did. Attempting to bypass protection on an archive you don't have rights to can be both unethical and, depending on the content and jurisdiction, illegal.
Download and try it yourself
Install the archive tool and apply the steps from this guide on your own files.
Frequently asked questions
Can WinRAR recover a forgotten archive password for me?
No. There's no built-in password recovery feature, because the password is required to derive the encryption key — there's no stored copy to retrieve.
Are the file names inside a password-protected RAR archive always hidden?
Only if "encrypt file names" was selected when the archive was created. Otherwise, the file list may still be visible even though the file contents remain encrypted.
Is RAR password protection strong?
It uses AES encryption, which is a strong algorithm, but overall protection also depends on how strong and unique the chosen password is.
Can I remove a password from a RAR archive?
Only if you know the current password. You'd extract the contents using the password, then create a new archive without one.
Related guides
- The RAR File Format ExplainedRAR is a proprietary archive format with its own header structure, versioning, and optional features like solid compression and recovery records.
- WinRAR Licensing ExplainedWinRAR is commercial software distributed under an evaluation model, not a free program, though it keeps working after the trial ends.
- RAR File Viewer: See What's Inside Without ExtractingA RAR file viewer lets you browse an archive's contents and open individual files without writing anything to your disk.
WinRAR is a trademark of its respective owner. RareExplorer is an independent resource and is not affiliated with or endorsed by RARLAB or win.rar GmbH. Read our editorial policy to see how this page was researched.