RAR Files

Password-Protected and Encrypted RAR Archives

A password-protected RAR archive uses encryption to keep its contents unreadable without the correct password — there is no legitimate shortcut around one you don't know.

RAR archives support password protection using AES encryption. When you set a password while creating a RAR archive, WinRAR encrypts the compressed file data so it can't be extracted without supplying the same password later. Depending on the option chosen at creation time, the archive's file names can be encrypted too, in which case even the file listing is hidden until the correct password is entered.

How the encryption works

• RAR uses AES encryption to scramble the compressed data inside the archive.
• The password itself is never stored in the archive — it's used to derive the encryption key needed to decrypt the data.
• If "encrypt file names" is enabled when the archive is created, the file list is also hidden, and a viewer will show nothing meaningful until the password is entered.
• Encryption strength depends on both the algorithm and how strong the chosen password is — a short, guessable password is weak protection no matter how strong the underlying algorithm is.

If you own the archive and know the password

1. 1Open the archive in your extractorDouble-click the .rar file or open it in your archive program as usual.
2. 2Enter the password when promptedYou'll be asked for the password either when viewing the file list (if names are encrypted) or when extracting.
3. 3Extract normallyOnce the correct password is accepted, extraction proceeds exactly like an unprotected archive.

If you set the password yourself but forgot it

Check any password manager, notes, or the original context where you created the archive — for instance, a password you reuse for personal backups. There is no built-in "forgot password" recovery for RAR encryption; the password is required to derive the decryption key, and there's no backdoor.

Ethical and legal note

Only attempt to access a password-protected archive's contents if you created it yourself or have clear permission from the person who did. Attempting to bypass protection on an archive you don't have rights to can be both unethical and, depending on the content and jurisdiction, illegal.

How to Extract a Password-Protected RAR File

A password-protected RAR archive encrypts its contents so that extraction requires the correct password. See password-protected RAR files for how this encryption works generally; this guide covers the extraction steps themselves.

Extracting with the password

1. 1Right-click the RAR file and choose ExtractUse File Explorer's native option on Windows 11, or your extraction tool's Extract command.
2. 2Enter the password when promptedYou'll see a password dialog before extraction proceeds.
3. 3Wait for extraction to completeIf the password is correct, files extract normally.

Encrypted file names

Some password-protected archives encrypt only the file contents, leaving the list of file names visible before you enter a password. Others use full header encryption, hiding file names, sizes, and folder structure until the correct password is supplied. If you can't even see what's inside the archive without a password, it likely uses this stronger option.

If you've lost the password

If the archive isn't password-protected but still won't open, the issue is more likely corruption or a missing multi-part volume — see RAR file not opening.

RAR Archive Is Password Protected: What You Can and Cannot Do

WinRAR supports real AES-256 encryption for password-protected archives, not a cosmetic lock. There is no legitimate quick fix that recovers a forgotten or unknown strong password, and this guide doesn't cover cracking tools or techniques, since they're generally used to bypass protection on files someone else secured. See password-protected RAR files for the mechanics of how this encryption works.

What you can actually do

1. 1Ask the sender for the passwordIf someone shared this archive with you, they set the password intentionally and are the fastest source of it. Reply to whatever email, message, or listing you got the file from.
2. 2Check where you originally got itPassword-protected downloads (software, courses, media packs) often list the password on the same download page, in a linked readme, or in a follow-up confirmation email that's easy to overlook.
3. 3Check whether you set the password yourselfIf you created the archive, look in a password manager or notes app for a password you used around the time you made it.
4. 4Confirm it's the right fileIf you have no path to the password at all, double-check you actually need this specific archive — sometimes an unprotected duplicate or an earlier unencrypted version exists elsewhere.

Encrypted filenames are a separate setting

WinRAR has an option to encrypt file names in addition to file contents. If an archive shows a password prompt before you can even see a file list, this option was likely enabled, and it does not change your options above — you still need the actual password to see or extract anything.

WinRAR is a trademark of its respective owner. RareExplorer is an independent resource and is not affiliated with or endorsed by RARLAB or win.rar GmbH. Read our editorial policy to see how this page was researched.