Password protected ZIP shows contents structure

[lalelunet]

Configuration

• Keka version: 1.2.56 (5023)
• macOS version: 12.3.1

Describe the bug

MacOS asks for the password to open the zip file. In Windows you can open the zip file without the password. No confirmation window or anything else pops up. The windows explorer just opens the zip archive without asking for the password. The protection does not work on windows operating system.

To Reproduce

Steps to reproduce the behavior:

1. Create zip archive with password protection in keka on macos
2. Open it with Windows 10 or 11 (double click or right click open with explorer)

Expected behavior

Windows explorer should not be able to open the archive without the password

Keka_2022-10-21-105511079.log

[aonez]

There's a limitation in the ZIP password protection, it does not encrypt the filenames, only the data. So you can see the structure and the names that it contains, but can't get the data without the password.

Can you extract the contents of the file without the password?

I suggest you use 7Z instead, it has stronger encryption and does encrypt filenames.

[aonez]

Dupe of #592. I'll be leaving this one opened just in case anyone looks for the same.

[lalelunet]

Sorry for late answer. I did not encrypt the data. Just add a password to the zip. On Macos the finder asks for the pass before it extract the data. In windows I can access the content without beeing asked for a password.

[aonez]

This is because, in the screenshot, you're using the macOS extractor (not Keka) and it tries to extract the files, not just list them.

Windows is only listing them, if you try to open or copy a file it will ask you for the password.