Online password recovery is a browser service that tries to find a forgotten password for an encrypted file you own—most often a ZIP or RAR—using cloud GPUs instead of a program you install.
It does not magically decrypt AES-256 or RAR5 without a guessable password. Catpasswd has used this pattern since 2016. Not the same as installing Hashcat or John the Ripper.
How it works (both formats)
| Step | What happens |
|---|---|
| 1 | You upload the archive or a hash extraction |
| 2 | The cloud tests dictionary attacks, rules, mask attacks, limited brute-force |
| 3 | A match is the password that opens the file; no match means the search lost |
ZIP vs RAR
| ZIP | RAR | |
|---|---|---|
| Weak generation | ZipCrypto | Older RAR3/RAR4 |
| Hard generation (2026) | AES-256 + PBKDF2 iterations | RAR5 (slower per guess) |
| Catpasswd guide | ZIP | RAR |
Browser upload on Catpasswd is about 100 MB; larger or private files use a feature extract.
Same definition, other shops: LostMyPassPro, passwordrecovery.io, ezyZip, UnlockZip.com.
What it is not
| Not | Instead |
|---|---|
| A guarantee | Fast Check vs Deep Recovery is two depths of the same search |
| Permission to open someone else’s archive | Terms |
| Cryptographic zero-knowledge by default | Hash extract + destroy record on Catpasswd |
| Repair for a truncated file | Restore a backup first |
Glossary
| Term | Meaning |
|---|---|
| Cloud-based password recovery | Search in a data center; you use a site |
| No software installation | Browser is enough |
| Hash extraction | Upload the verifier, not the payload |
| Success-based pricing | Pay if they find it (some competitors) |
| Catpasswd pricing | Free, Professional $7.49, custom from $89.99 |
FAQ
How long?
Minutes on ZipCrypto + dictionary; hours to never on RAR5 / AES-256. Catpasswd free days, Professional 24 hours (pricing).
Cloud vs local?
Difference between cloud and a local cracking tool.