If you forgot the password to an encrypted ZIP archive and you do not want to install recovery software, use a cloud form in the browser—or upload a hash extract so the ZIP stays on your disk.
Use these options only on a ZIP you personally and lawfully own. A long random password with AES-256 encryption may never be recovered, GPU or not.
Your options at a glance
| Option | Install recovery software? | What you send | When to use |
|---|---|---|---|
| A. Browser upload | No | The .zip file |
Small archive, you accept a named cloud |
| B. Hash extract | Extractor only (not Hashcat) | A few KB of features | Original must stay local, or file is large |
| C. Local tools | Yes | Nothing leaves the PC | You already run Hashcat / Passware |
| D. Stop | — | — | Random AES-256 password; do not buy a miracle |
Option A — Browser upload
No ZIP cracker on your PC. Attach the file, enter email, wait.
| Service | Pricing (check live page) | Notes |
|---|---|---|
| Catpasswd | Free, or Professional $7.49 | ~100 MB upload; Professional queue about 24 hours (pricing) |
| ezyZip | On their page | ZIP-oriented form |
| UnlockZip.com | On their page | ZIP / RAR / PDF |
| Aspose Zip | On their page | Online archive utility |
| LostMyPassPro | Often success-based | Multi-format cloud |
Start here: Catpasswd ZIP guide or upload.
Option B — Hash only
The original ZIP never leaves the machine. Cloud GPUs still run dictionary attacks.
| Step | Action |
|---|---|
| 1 | Download the Catpasswd extractor |
| 2 | Produce the small feature file (help) |
| 3 | Upload that file to Catpasswd, or use a hash-first site such as passwordrecovery.io |
Option C — Local install (not this question)
| Tool | Role |
|---|---|
| Hashcat | GPU, command line |
| John the Ripper | GPU / CPU, command line |
| Passware Zip Key | Desktop license |
Option D — It may never open
ZipCrypto plus a human password can finish on a free queue. AES-256 plus a random string will not finish in a useful window, even with GPU acceleration.
Chooser
| You… | Start with |
|---|---|
| Want only a webpage | Option A |
| Will not upload the ZIP | Option B |
| Short reused password / ZipCrypto | Free / Fast Check first |
| Also have RAR | Multi-format cloud, not ZIP-only ezyZip |
| Need a 2026 shortlist | Best online ZIP and RAR services |
FAQ
Is hash extract “installing recovery software”?
It is a small extractor. The password search still runs in the cloud.
Is this legal?
Only for a ZIP you are authorized to open.