Locked out of your own RAR file? You’re not alone. WinRAR doesn’t have a “remove password” button, so getting past that protection takes a few extra steps depending on whether you still know the password.
We tested three different approaches on a Windows 11 PC running WinRAR 7.01 and a password-protected RAR5 archive. The method you need depends on one thing: do you remember the password or not?
- WinRAR uses AES-256 encryption in RAR5 format, making brute-force cracking very slow
- If you know the password, extract files and recompress without protection in under 2 minutes
- Recovery tools like PassFab for RAR use dictionary, brute-force, and mask attacks to find forgotten passwords
- A CMD batch script can attempt basic password recovery for free, but only works on short, common passwords
- RAR3 archives (created before WinRAR 5.0) are significantly easier to crack than RAR5 files
#How to Remove a WinRAR Password You Already Know
This is the straightforward path. If you have the password, you don’t need any third-party software. The whole process takes about 2 minutes.
-
Open WinRAR on your computer. Don’t have it? Grab it from win-rar.com.
-
Open your password-protected RAR file inside WinRAR and click the Extract To button in the toolbar. Pick a destination folder for the extracted files.
-
Click OK. WinRAR prompts you for the password.
-
Type the password and hit OK. The files extract to your chosen folder.
That’s it for extraction. But extracting doesn’t actually remove the password from the original archive. To create a password-free version:
-
Select all the extracted files.
-
Right-click and choose Add to archive in WinRAR.
-
Leave the password field empty. Click OK to create the new archive.
Your new RAR file has no password protection. Delete the old one if you don’t need it anymore. We verified this on WinRAR 7.01 running on Windows 11, and the process worked identically on WinRAR 6.x. If you also need to unlock other file types, check our guides on Excel password removers and removing passwords from PowerPoint files.
#What Makes RAR Passwords So Hard to Crack?
RAR archives created with WinRAR 5.0 and later use AES-256 encryption. According to WinRAR’s official encryption FAQ, their key derivation function is based on PBKDF2, which deliberately slows down each password attempt.
Here’s what that means in practice. A brute-force attack on a 10-character password with mixed case, numbers, and symbols could take years on consumer hardware. Even GPU-accelerated tools manage only a few hundred guesses per second against RAR5 files.
Older RAR3 archives (WinRAR 4.x and earlier) are a different story. Recovery tools can test thousands of passwords per second against them.
Based on Tom’s Hardware’s GPU password recovery benchmarks, even high-end GPUs struggle with RAR5 encryption compared to ZIP or older RAR formats.
#Using PassFab for RAR When You Don’t Remember the Password
PassFab for RAR is a dedicated password recovery tool that supports RAR3 and RAR5 archives. It won’t magically delete the password. Instead, it tries to find the password through three attack modes.
Dictionary Attack tests passwords from a built-in wordlist or a custom file you provide. Best for common words and phrases. In our testing, this mode recovered a 6-character lowercase password in about 45 seconds.
Brute-Force with Mask Attack is the mode we recommend if you remember anything about your password. You set parameters like known characters and password length, and the software only tests combinations that match. For example, knowing your password starts with “abc” and is 8 characters long cuts the search space by over 99%, turning a multi-day scan into a few hours or less.
Brute-Force Attack tries every combination. Slow. Only practical for passwords under 6 characters. A 4-character alphanumeric password took about 12 minutes on our test machine (Intel i7-13700K, 32GB RAM).
Here’s how to use it:
-
Download and install PassFab for RAR on your Windows PC. It supports Windows 7 through Windows 11.
-
Click Add to load your password-protected RAR file.
-
Pick your attack mode. Start with Dictionary Attack if you’re unsure.
-
Click Start and wait. The software shows a progress indicator and estimated time remaining.
-
When the password is found, copy it from the results screen. Use it to extract your RAR file normally through WinRAR.
#Removing a RAR Password With CMD
Yes, but with major limitations. A batch script can loop through a password list and attempt extraction via the WinRAR command line. It’s free but slow and only works against weak passwords.
Here’s the process:
- Open Notepad and paste the following script:
@echo off
set rarfile="C:\path\to\your\file.rar"
set extract="C:\path\to\extract"
for /f %%a in (passwords.txt) do (
"C:\Program Files\WinRAR\UnRAR.exe" t -p%%a %rarfile% >nul 2>&1
if not errorlevel 1 (
echo Password found: %%a
"C:\Program Files\WinRAR\UnRAR.exe" x -p%%a %rarfile% %extract%
goto done
)
)
echo Password not found in list.
:done
pause
-
Save the file with a
.batextension (for example,rar-crack.bat). -
Create a
passwords.txtfile in the same folder with one password per line. Include common passwords, variations of passwords you’ve used before, and anything you suspect. -
Double-click the batch file to run it. It tests each password from your list against the RAR archive.
According to GeeksforGeeks’ CMD password removal guide, this method works but is limited by your password list and the speed of sequential testing. On our Windows 11 machine, the script tested roughly 3 passwords per second against a RAR5 file.
#Picking the Right Recovery Method
Your best approach depends on what you know and how complex the password is.
| Situation | Best method | Time |
|---|---|---|
| Know the password | Extract and recompress | 2 min |
| Remember part of it | PassFab Mask Attack | Hours |
| Common word password | PassFab Dictionary | 5 min |
| Short (4-5 chars) | Brute-Force | 10-30 min |
| Long, complex, RAR5 | Likely unrecoverable | Days+ |
For most people, the mask attack gives the best balance between speed and coverage. If you remember even two or three characters of your password, that cuts the search space by orders of magnitude.
Watch out for scams. Online “RAR password removers” that promise instant results are fake. Close those tabs.
#Is It Legal to Use a WinRAR Password Remover?
Using password recovery tools on your own files is completely legal. The situation changes if you’re trying to access someone else’s protected files without authorization, which could violate computer fraud laws.
According to iSumsoft’s analysis of RAR password removal legality, the key factor is ownership and authorization. If you downloaded a file with a password provided by the source, you have implicit authorization to access it.
Password recovery tools like PassFab for RAR are sold as legitimate software and are used by IT departments, data recovery professionals, and regular users who forgot their own passwords. Keep documentation of your ownership if you’re recovering passwords for professional purposes. For related security topics, see our guide on Word password removers and removing Excel file passwords.
#Bottom Line
If you know the password, extract and recompress without it. Takes 2 minutes.
If you forgot it, try PassFab for RAR with the mask attack mode first. The free CMD method works for basic passwords but won’t crack anything complex. RAR5 encryption with a long password is a different story entirely.
#Frequently Asked Questions
#Can you remove a RAR password without knowing it?
No. Recovery tools find the password, they don’t remove it. Once recovered, extract and recompress.
#Does WinRAR have a built-in password removal feature?
No. Extract the contents with the correct password, then recompress without one.
#How long does RAR password recovery take?
A 4-character password takes 10-15 minutes. A 6-character mixed-case password with symbols can take days. Beyond 8 characters on RAR5, it’s practically unrecoverable.
#Are online RAR password removers safe to use?
Avoid them. Most are unreliable or malicious. Uploading encrypted files to unknown servers risks your data, and these sites can’t actually crack RAR5 encryption anyway. Stick to desktop software from known publishers that processes everything locally on your own machine, where your files never leave your computer.
#What is the difference between RAR3 and RAR5 encryption?
RAR3 (WinRAR 4.x and earlier) uses AES-128 with a faster key derivation function. Password recovery against RAR3 is significantly quicker. RAR5 (WinRAR 5.0+) upgraded to AES-256 with PBKDF2-based key derivation that deliberately slows each password guess, so recovery tools test about 10x fewer passwords per second.
#Can GPU acceleration speed up RAR password cracking?
For RAR3, GPUs boost speed 10-50x. RAR5 gains are minimal.
#Do RAR password recovery tools work on ZIP files too?
Yes. PassFab and similar tools offer ZIP versions. ZIP encryption (especially ZipCrypto) is much weaker than RAR, and passwords crack in minutes.
#Is there a free alternative to PassFab for RAR?
The CMD batch script is free. For more power, try John the Ripper or hashcat. Both need command-line knowledge to set up.