Skip to content
elba.works

Guides/Elba vs 7-Zip

Elba vs 7-Zip encryption: when a zip is enough (and when it isn't)

A password-protected 7-Zip archive is real AES-256 encryption and, for many people, genuinely enough. The differences are in what leaks, how you work with the files day to day, and what happens when the archive gets old.

At a glance

Elba compared with 7-Zip
 Elba7-Zip
CipherAES-256-GCM (authenticated)AES-256-CBC (7z format)
Detects tamperingYes — authenticated encryptionOnly via CRC, not cryptographically
Hides file namesYesOnly if 'encrypt file names' is ticked
Key derivationPBKDF2, 600,000 iterationsSHA-256, 2^19 rounds
Working with one fileOpen it in placeExtract, edit, re-archive, delete the extract
Leftover plaintext riskLowHigh — extracted copies and temp files linger
Install requiredNoYes (or a bundled equivalent)
PriceOne-time, falling yearlyFree

7-Zip's encryption is not the weak part

Let us be clear, because a lot of writing on this topic is not: AES-256 in a .7z archive with a strong password is strong encryption. Nobody is brute-forcing a good passphrase out of it. If someone tells you 7-Zip is insecure, they are usually thinking of the older ZIP 2.0 format, which is genuinely broken. The .7z format is not.

The weak part is the workflow

The problem with archives is what you do with them. To read one document you extract it, which writes plaintext to disk. You edit it. You re-archive. Then you have to remember to delete the extracted copy, and hope your editor did not leave an autosave, and hope your sync client did not upload the folder in the four minutes it was open.

Elba opens the file in place, in the browser, without an extracted copy on disk. That single difference is why the two tools feel so different in daily use, even though the cipher underneath is comparable.

Metadata: what the archive still shows

By default a .7z archive lists its contents. Anyone with the file can see every file name, size, and timestamp inside without the password. 7-Zip does offer an 'encrypt file names' option and you should tick it — but it is off by default, and defaults are what most people ship with.

Elba seals names and structure as a matter of course, because there is no un-sealed mode to forget to turn on.

Authenticated encryption, and why it matters

GCM mode gives Elba authenticated encryption: if a single byte of a sealed file is altered, decryption fails loudly rather than producing subtly wrong data. The .7z format uses CBC with a CRC check, which catches accidental corruption but is not a cryptographic integrity guarantee.

For a folder that only ever sits on your own disk, this is a small point. For a file that travels — a USB stick, an email attachment, a cloud sync — it is not.

When 7-Zip is the better choice

You are sending one encrypted file to someone who must open it without buying anything. You need maximum compression. You want a format that a dozen tools on every platform can read. You want it free. All four are good reasons, and in all four cases a .7z archive with encrypted file names is the right call.

Two documents, one workflow, side by side

With a 7-Zip archive: locate the .7z, enter the password, extract the file to a temporary folder, open it, edit, save, add it back to the archive, then find and securely delete the extracted copy and any editor autosave. Six steps, two of which are easy to skip when you are in a hurry.

With Elba: open Elba, type the passphrase, open the file, edit, close. The plaintext never lands on disk, so there is nothing to remember to clean up. That is not a cryptographic advantage; it is a human one, and human error is where most real-world file leaks come from.

What about ZIP with AES?

Some tools produce ZIP archives with AES-256 rather than the broken legacy ZIP 2.0 scheme, and those are cryptographically fine. Compatibility is the catch: the recipient's built-in unzipper may not support AES ZIPs, so you end up telling people to install something anyway.

If interoperability is the reason you chose ZIP, AES ZIP files partially defeat the point. A .7z with encrypted file names is usually the cleaner choice.

Who Elba is for

Elba is for a folder you open regularly rather than an archive you seal once. If you find yourself extracting and re-archiving the same documents every week, the workflow difference is the whole argument.

Questions people actually ask

Is 7-Zip password protection secure enough for personal documents?
With a strong passphrase, the .7z format, and 'encrypt file names' ticked — yes, the encryption itself is sound. The practical risk is the extracted plaintext copies that pile up as you work.
Is ZIP encryption the same as 7z encryption?
No. Legacy ZIP 2.0 encryption is broken and trivially cracked. AES-256 in the .7z format is not.
Does 7-Zip hide the file names?
Only if you explicitly enable 'encrypt file names'. Otherwise the listing is readable without the password.
Can I open an Elba folder with 7-Zip?
No — different formats. Elba's sealed files open only in Elba.
Which has a better password-cracking resistance?
Both use a slow key-derivation step. Elba uses PBKDF2 with 600,000 iterations; 7-Zip uses 2^19 SHA-256 rounds. Both make brute force impractical against a good passphrase; neither saves a weak one.
Should I use 7-Zip for email attachments?
It is a reasonable choice, since your recipient almost certainly has a tool that opens it. Send the password by a different channel.

Quick answers

Take the island

Elba is one HTML file. It runs locally in a Chromium browser, seals a folder with AES-256-GCM, never phones home, and becomes open source on 1 January 2030.

  1. €49MMXXVI· now ·
  2. €39MMXXVII2027
  3. €29MMXXVIII2028
  4. €19MMXXIX2029
  5. FreeMMXXX2030

the price falls each year · free to all 1 jan 2030

Take the island — €49
pay once · no account · nothing leaves

Compare Elba with other tools

All guides

Related guides