- Who makes 7-Zip and what it costs
- The licence and what the code is allowed to do
- What 7-Zip does on your computer
- Past security flaws in 7-Zip and why updating matters
- Fake 7-Zip download sites
- How to download 7-Zip without picking up something extra
- Opening files safely with 7-Zip
- Is 7-Zip safe?
- Frequently asked questions
7-Zip is a long-running free file archiver developed by Igor Pavlov, first released in 1999 and licensed mainly under the GNU LGPL. The usual risk is a fake download site, not the program: BleepingComputer reported one that bundled proxy software with a working copy. Get it from the official site and keep it updated.
I get asked about 7-Zip more than you'd expect, usually by someone who has just been told to open a zip file and is nervous about installing anything. It's a fair worry, because the programs people trust most are the ones scammers copy. Here's what the official site, Wikipedia and a security news report say, so you can decide for yourself.
Who makes 7-Zip and what it costs
The 7-Zip website lists Igor Pavlov as the copyright holder, and Wikipedia says he's the developer and that 7-Zip was first released on 2 January 1999. The site says 7-Zip is free software, that you don't need to register or pay, and that you can use it in commercial organisations too.
That's a useful first filter. If a page asks you to pay, subscribe or create an account to download the real thing, you're not on the official site.
The licence and what the code is allowed to do
According to the 7-Zip website, most of the code is under the GNU LGPL, some parts are under the BSD 3-clause License and some parts carry unRAR licence restrictions. In everyday terms, the source code is open for inspection, which is one reason security researchers can study it and report problems.
Open code isn't a safety certificate, and I'm not claiming an independent audit because I haven't found one named in a source. It simply means the program isn't a black box.
What 7-Zip does on your computer
The site lists Windows installers for x64, x86 and ARM64. It says 7-Zip can pack and unpack 7z, XZ, BZIP2, GZIP, TAR, ZIP and WIM, and unpack many other formats such as ISO, RAR and DMG. The download page also lists Linux and macOS console builds, and says downloads are hosted on GitHub and SourceForge.
It's a compression tool, so it needs access to the files you point it at. It isn't a security product and it doesn't scan what's inside an archive for malware. If someone emails you a zipped invoice you weren't expecting, 7-Zip will happily open it, and the danger comes from what is inside.
Past security flaws in 7-Zip and why updating matters
Every widely used program has had bugs, and 7-Zip is no exception. Wikipedia lists flaws that were fixed, including CVE-2018-10115 in versions before 18.05, CVE-2023-31102 in versions before 23.0 and CVE-2024-11477 in versions before 24.07. Each is described as a way that a specially made archive could run code on a vulnerable version.
That is the practical reason to keep it current. If you installed an old copy years ago and forgot about it, check the version and get the latest from the official download page. The same habit helps with everything else on your machine, and my notes on keeping hackers away from a business website cover the wider routine.
Fake 7-Zip download sites
This is the real risk. BleepingComputer reported on 10 February that an attacker registered 7zip.com to impersonate the official 7-zip.org, copying its text and layout. The outlet said the installer was a working copy of 7-Zip that also installed proxy software, which turned the PC into a residential proxy node that others could route traffic through.
BleepingComputer said one user reported finding the fake installer through a YouTube PC-building tutorial. Because the program still opened archives normally, nothing felt wrong. That's the nasty part of this kind of trick.
Want AI doing the heavy lifting in your marketing?
I build the systems that handle the boring 80 percent, so you get your week back. Done properly, with the human kept in.
| What I checked | What the sources say |
|---|---|
| Official site | 7-zip.org, with Igor Pavlov as copyright holder |
| Price | Free, no registration needed, commercial use allowed |
| Licence | Mostly GNU LGPL, with BSD 3-clause and unRAR-restricted parts |
| Official downloads | Hosted on GitHub and SourceForge, per the download page |
| Known copycat | 7zip.com, reported by BleepingComputer on 10 February |
How to download 7-Zip without picking up something extra
- Type 7-zip.org into your browser yourself, or use a bookmark, rather than clicking a link in a video description.
- Skip promoted search results and any page that asks for payment or an account.
- Choose the installer for your system. The download page recommends the exe installer over the msi.
- Run the installer you downloaded, not a different file a pop-up offers you.
- Check for updates now and then, since fixed flaws only help once you install the fixed version.
BleepingComputer's own advice was to avoid download links in YouTube videos or promoted search results, and to bookmark the official download sites for software you use often. That's good advice for any utility, not just this one.
Opening files safely with 7-Zip
Even a clean install won't protect you from a dangerous file. Be careful with archives that arrive by email, chat or a download button you didn't expect, particularly password-protected ones from people you don't know. If something goes wrong, change your passwords from a different device. A password manager helps here, and my password manager review explains what to check before choosing one.
The tool is safe to use if the copy is real, current and you only open files from sources you trust.
Is 7-Zip safe?
Going by its own site and Wikipedia, 7-Zip is an established free archiver with a named developer and an open licence. The sensible caution is the copycat site and old versions, not the software's purpose. Get it from 7-zip.org, keep it updated and treat unexpected archives with suspicion.
Frequently asked questions
Is 7-Zip safe to download?
Yes, from the official 7-zip.org site. The site lists Igor Pavlov as the copyright holder and says it's free. The danger is fake sites, such as 7zip.com, which BleepingComputer reported as bundling proxy software.
Is 7-Zip free?
The 7-Zip website says it's free software and that you don't need to register or pay, including in commercial organisations.
Does 7-Zip have viruses?
The official program is not described as containing malware. Wikipedia lists past security flaws that were fixed in later versions, so update to the latest release. A fake installer is a separate risk.
Where should I download 7-Zip from?
Go to 7-zip.org directly. The download page says downloads are hosted on GitHub and SourceForge. Avoid links in video descriptions and promoted search results.
Does 7-Zip scan files for malware?
Nothing on the official site says it does. It's a compression tool, so a dangerous file inside an archive stays dangerous once you open it.
