How to Extract AES-256 RAR Files with Unrar

This guide explains how to extract RAR archives protected with AES-256 encryption using the command-line utility unrar. You will learn how to verify your unrar installation, extract files using interactive password prompts, supply passwords directly in the command line, and preserve original directory structures.

Prerequisites

AES-256 encryption is the standard encryption method for the RAR5 format. To extract these archives, ensure you have the original, non-free unrar binary installed, as standard open-source alternatives like unrar-free often lack support for RAR5 and modern encryption algorithms.

On Debian/Ubuntu:

sudo apt update
sudo apt install unrar

On Fedora/RHEL:

sudo dnf install unrar

On macOS (via Homebrew):

brew install unrar

Method 1: Extract with an Interactive Password Prompt

The most secure way to extract an encrypted archive is to let unrar prompt you for the password. This prevents your password from appearing in your shell history.

Run the following command:

unrar x archive.rar
  • x: Extracts files with their full relative directory paths intact.
  • archive.rar: The path to the file you want to extract.

Once executed, unrar will automatically detect the AES-256 encryption and output:

Enter password (will not be echoed) for archive.rar:

Type your password and press Enter. The files will extract to the current directory.

Method 2: Extract by Passing the Password Directly

If you are automating extractions in scripts, you can pass the AES-256 password directly using the -p switch.

unrar x -pYourPassword archive.rar

Important Syntax Rules:

  • Do not place a space between -p and the password string.
  • If your password contains special characters or spaces, enclose the password in quotes: 
    unrar x -p"My Secret P@ssword!" archive.rar

Specifying an Output Destination

To extract the encrypted files to a specific destination folder rather than the current working directory, add the destination path at the end of the command:

unrar x archive.rar /path/to/destination/

Ensure the trailing slash is included so unrar recognizes the destination as a directory.

Common Errors

  • Checksum error / Corrupt file: This usually indicates an incorrect password was entered, as AES-256 decryption cannot complete without the exact key.
  • Unknown format: Indicates your version of unrar is outdated or you are using unrar-free, which cannot process modern RAR5 AES-256 archives.