Comparison

Ways to make a password-protected ZIP and open it again later, side by side.

Vault-ZIPWindows built-in ZIPTypical compression tools
Encryption and passwords
Make a password-protected ZIPAES-256 onlyCannotMost can; some default to the old ZipCrypto method
Keep a record of passwordsRecorded automatically in an encrypted ledgerNoMostly no (you keep track)
Open a ZIP you madeWith the ledger's password, no typingType it each timeType it each time
Showing a passwordOnly after an identity check; can be kept off screen sharing—Varies
Passwords on the command lineStandard input only (not in logs or process lists)—Often passed as an argument
Creating
Check after writingEvery file read back (on by default)NoMany have a manual test
Existing filesNever overwritten (" (2)" added)Asks, then replacesVaries
Extracting
Recognising the formatBy contentZIP; recent Windows 11 also 7z, RAR, tar (by extension)Mostly by extension and content
Names that write outside the folderStopped before writing(not tested)Most guard against it; versions differ
Invisible characters disguising an extensionReplaced and reportedKept as they areVaries
ZIP bombsStopped by counting what is written(not tested)Varies
Old Japanese (Shift_JIS) namesRecognised automaticallyRead on Japanese WindowsMost Japanese tools handle them
macOS extra files (__MACOSX)Left out (can be changed)Extracted as they areVaries
Build and network
Main languageRust (some components in C/C++)—Mostly C or C++
Automatic connections (update checks, usage reports)NoneUpdated as part of WindowsMany check for updates automatically
Ads and trackingNone—Depends on the tool (some free editions show ads)
Published fuzzing resultsYes—Varies
Component list (SBOM)Included—Still rare
In organisations
Administrator rulesNo ZIP without a password, checks always on, and more; Group Policy, Intune—Varies
PriceFree for individuals and education; organisations 1,000 yen per PC (one-off)Part of WindowsFree to paid

The "typical compression tools" column describes what is common among widely used tools; it differs by tool and version, so check your own tool's documentation. "Windows built-in ZIP" is Windows 11 File Explorer; "(not tested)" marks what we have not tried yet.

What Vault-ZIP is not for

The mechanisms in detail: Built with care. Tested compatibility and performance: Features and specs.