Forgot your ZIP password? Start here

Before you start

This guide assumes the archive is yours, or that you have clear permission to open it. If someone else created the file, the fastest and most appropriate step is often to ask them for the password rather than to recover it. With that settled, take a breath. A forgotten password may be misplaced rather than lost, and the steps below go from the effortless to the effortful. It also helps to keep a scratch note open as you work, so you can jot down every base password and variation that comes to mind. Half-remembered fragments are still valuable, because the tool can expand them into full candidates for you rather than making you type each one. If you would rather see each screen first, the screenshot walkthrough shows the tool step by step.

Step by step

1. Check where you store secrets. Start with your password manager, then your browser's saved passwords, then any notes or memo app you use. Search for the file name, the project, the recipient, or the word zip. Also glance at email drafts and chat messages where you might have sent the password to yourself or a colleague. If the password turns up here, you are done without running anything.
2. Ask the person who sent it. If the archive came from someone else and you are authorized to open it, asking is faster, kinder to your time, and more reliable than any recovery run. They may still have the password or the policy that generated it.
3. List the variations you actually use. If you reuse a few base passwords with small tweaks, write down those bases, then their common forms: a capital first letter, a trailing year, an exclamation mark, a swapped letter for a number. A short list of passwords you really use beats a long list of guesses.
4. Run a dictionary of your candidates. Feed that list into ZipRecover as a dictionary. The tool tests each entry and can apply small automatic variations, so you do not have to type every permutation by hand. For a password you chose, a list built from your own habits is the strongest place to start.
5. Use a mask if you remember the shape. When you recall the structure but not the exact characters, describe it with a mask. If you know it was a word followed by four digits, a pattern like a fixed prefix plus four digit placeholders tests only that family of passwords, which keeps the search small and fast.
6. Try bounded brute force as a last resort. If nothing above lands and the password was short, let the tool try every combination up to a length you set. Keep the bound realistic, no longer than something you could have typed and remembered, and stop once it passes that point. On AES archives this is slow by design, so treat it as a final, limited attempt rather than an open-ended one.

What to expect

Situation	Realistic outlook
ZipCrypto, and you have a hint or a pattern	Fast to search, so a good hint is worth trying
AES, short or predictable password	Feasible with a good wordlist or mask
AES, long and random password	Effectively not recoverable by guessing

If you set the password yourself and can describe even part of it, your chances are much better, and the first four steps are where your effort pays off most. If the password was generated to be long and random, and you kept no copy anywhere, be prepared for the possibility that it will not be recovered. Strong random passwords, especially on AES archives, are built to resist exactly this kind of guessing, and knowing that limit in advance saves you from an endless run. There is no shame in stopping. Recognizing that a password was strong enough to resist recovery is itself a useful answer, and it frees you to reach the data another way, such as an original source, a colleague who has the file, or an unencrypted backup you made earlier.

Two habits make the difference. First, spend your effort on remembering rather than on raw computing power, because a precise candidate list or mask can shrink a search of trillions of candidates to thousands. Second, once you do recover the password, save it in your password manager immediately so this is the last time you go looking. A good manager keeps it encrypted and synced across your devices, which removes the very problem that brought you here. When you are ready, open the tool and work the list. The platform-specific guides for Windows, macOS, and Linux show how to check which encryption your archive uses before you begin.