Password Encrypted 7zip file opens without password

Norm777 · 09 Nov 2016

I'm trying to protect a 70GB folder (TEST) from prying eyes. I have Win7 x64 and am using 7zip to compress the folder. I selected zip format and encryption of AES-256 and password protected the file. Everything seems good, no errors etc. But when I click on the zipped file (TEST.zip) Windows explorer is happy to open the archive and even lets me click on individual files within the archive but gives me an error than Windows cannot complete the extraction & the destination file could not be created. I'm am never asked for a password, and all the folder content filenames are 100% visible, I can even go the various levels within the archive so that sucks. I would like to be asked for the password or even I'll never be able to view file data within the archive, and it would be nice if file names in the archive aren't shown until a password has been entered. At this point my password encrypted archive is totally not acceptable. Searching for user guides online usually only brings up command line info, or examples from years ago that I can't follow on my 7zip version 16.

I tried to join the 7z website to ask there, but the site says my email address is banned etc. So I'm asking here is anyone can help me correct this issue.

Thanks!

pbcopter · 09 Nov 2016

As far as I know, that is the way 7zip works. You can see the names of the files in the archive but not the contents of those files. You will be asked for the password only if you open the archive with 7Zip.

RolandJS · 09 Nov 2016

Correct -- I've had the same experience earlier. 7zip does it that way to enable the password-setter to see a table of contents weeks, months, years later.

Norm777 · 09 Nov 2016

Hmmm, so it's necessary to archive the original archive again? I read something about an archive inside another archive but didn't understand it. Does the archive in another archive make only the buried archive visible but not its sub directories? I also read about someway to prevent Windows from using its own zip opener. It sounded confusing to do, but even if you stopped Windows from opening the archive in the archive someone could easilt undo whatever change you made to stop Windows opening clicked on archives anyway. I suppose setting zip file types to use 7zip as a default wouldn't be safe either.

Thanks for your replies, much appreciated.

Callender · 09 Nov 2016

Do you need to keep this archive on your computer or send it somewhere else?

Anyway this works to encrypt files without displaying contents or filenames until a password is entered:

SafeHouse Explorer - Create Password Protected USB

Note: Can be used on PC just as well as USB.

If you need to move the container ( .sdk file) elsewhere you can cut/ copy/ paste it or zip it and email it and still access contents using the portable Safehouse App.

EDIT: Optionally you can install the additional driver. Tools> Options> Install Performance Enhancements.

Norm777 · 09 Nov 2016

Do you need to keep this archive on your computer or send it somewhere else?
On my computer.

Is there a way to just create a password folder and stick my password encrypted zip in it?

Alejandro85 · 09 Nov 2016

The fundamental issue here is that you're using zip files. While these support encryption of file contents, they don't support encrypting of file names and archive contents, that's why even the rudimentary Windows support of zip files is able to view them. Any other program will give you the same results (like viewing it in 7Zip or WinRar).

The only realistic solution is to use a more advanced archiving format. 7z and rar both support, optionally, encryption of file names. Of course, Windows Explorer won't open these natively, though.

RolandJS · 10 Nov 2016

...and I hope you're keeping a locked notebook of folder names and passwords, archive file names and passwords; else, you might end up...with information protected even from you.

Norm777 · 10 Nov 2016

Thanks everyone for opening my eyes in this matter. I'm going to explore the 7z option and see where that leads me.

Callender · 10 Nov 2016

Norm777 said:

Do you need to keep this archive on your computer or send it somewhere else?
On my computer.

Is there a way to just create a password folder and stick my password encrypted zip in it?

Look you can encrypt an encrypted 7z folder in an encrypted SafeHouse folder (container) but what is the point? You only need to add encrypted files to the SafeHouse container and there is no way to view file names or contents without the password.

So once you launch SafeHouse and open your folder (container) using the SafeHouse password you get to see the contents. If you encrypted those contents using password protected 7-zip you are then asked for the password in 7-zip.