Can Unrar Extract Files with a Partial Password?

When dealing with password-protected RAR archives, users often wonder if providing a partially correct password allows unrar to extract at least some data. This article explains how RAR encryption operates, why unrar cannot perform partial extractions with incomplete credentials, and how modern cryptographic standards strictly prevent data recovery unless the exact password is provided.

The short answer is no: unrar cannot extract files, partially or otherwise, using a partially correct password. RAR archives rely on modern symmetric encryption algorithms—specifically AES-128 in older RAR formats and AES-256 in the RAR 5.0 format. Because of the mathematical principles behind these algorithms, encryption keys are all-or-nothing.

When you enter a password into unrar, the utility does not compare your input to a stored plain-text string. Instead, it passes your input through a key derivation function (PBKDF2) along with a cryptographic salt to generate a decryption key. Due to the "avalanche effect" inherent to cryptographic hash functions, changing even a single character in the password yields a completely different decryption key. A password that is 99% correct results in a key that is just as wrong as a completely random guess.

What happens during the extraction attempt depends on how the archive was created:

• Standard Encryption (Data Only): If the archive was created without encrypted file headers, unrar can read the table of contents and display file names. However, when it attempts to decrypt the actual file data using the wrong key, the output is pure cryptographic noise (garbage data). The extraction process immediately fails because the decrypted data will fail the integrity check (CRC32 or BLAKE2sp checksum).
• Encrypted Headers: If the archive was created with header encryption enabled (often using the -hp flag in WinRAR), unrar cannot even read the file structure or list file names. It will reject the password immediately upon reading the archive header and terminate without attempting extraction.

Because cryptographic keys derived from partial passwords cannot decrypt any portion of the underlying data stream, unrar will always output an error indicating a wrong password or a checksum mismatch. To extract files from a secured RAR archive, the password supplied must match the original string character for character.