What's new in Pullzip
Every change to the Pullzip web tool, desktop app and AI (MCP) connector, newest first. Subscribe with the Atom feed to hear about new versions.
- v0.8.8
Fixed the desktop app layout: the new top strip had pushed the toolbar and the page below the sidebar. The strip now sits across the top and everything is back in place.
- v0.8.7
A thin line at the top of every page and app now links to more programs, apps and games from Project Team For You. The wording of ten languages has also been polished.
- v0.8.6
Tick the files you want and extract only those, and create 7z archives (AES-256 with hidden file names when you set a password) right in the browser. The Android app now opens archives straight from other apps via “Open with” and “Share”, with bigger buttons.
- v0.8.6
Password-protected 7z and RAR files now open on this site and in the Android app, even ones with encrypted file names. The password never leaves your device. On Android you can also extract straight into a folder you pick.
- v0.8.6
Pullzip is now on Google Play: check an archive before you open it, on your Android phone too. Free, nothing is uploaded.
- v0.8.6
Save location is now clear in the app: “Extracts to” shows the folder with a “Change” button, Simple mode remembers it so extracting is one click, and the Compress save dialog opens in the folder you used last.
- v0.8.5
New simple mode for first-time users: one tap on “Simple mode” (top right, or View › Simple mode in the app) shows only two big tabs — “Extract” and “Compress” — with just the basics: drop a file, see the safety verdict, extract; or add files, name them, optionally set a password, and make the ZIP. In the desktop app it also turns into a small window you can keep beside your folders. The same safety checks run underneath, your choice is remembered, and “Full view” brings every feature back.
- v0.8.4
A full bug sweep: over 40 fixes across the app, the website and the AI extension. Safety: a file name padded with spaces or quotes can no longer drag blocked files out of an archive (new benchmark case, 36 now), extraction refuses to write through a folder link someone left in the destination, and the downloaded-from-the-internet mark now survives on files from a ZIP whose names were repaired. Data: unpacking archives inside an archive no longer touches archives you already had in that folder, making an archive over an existing file replaces it instead of merging into it, and redaction no longer breaks letters in non-UTF-8 text. On the website: you can open another file from the result view or by dropping it anywhere, 7z/RAR archives with encrypted contents are no longer shown as “safe”, wrong or missing passwords get a clear message and a “Try password” button, the compress tab can remove files and confirm a password, and long extractions can be cancelled.
- v0.8.3
Optional AI check for instructions hidden for AI. The desktop app (Settings › AI injection check) and the AI extension can add a small AI model that reads the text files in an archive and points out instructions planted for an AI assistant — including reworded and non-English ones the built-in rules miss. Nothing downloads until you turn it on (about 300 MB, once, checked by SHA-256), and it runs only on your computer; nothing you open is sent anywhere. Measurements are on the safety benchmark page.
- v0.8.3
More accurate personal-data and garbled-name checks, and a desktop fix for passwords. Measured on public Hugging Face datasets the rules never saw while being written: phone numbers found in 95.3% of documents (before: 0.4%), US social security numbers 92.4% (before: 0%), passwords and keys 50.4% with no false alarms (before: 0%), and card numbers are now reported only when they are real (precision 64.5% → 100%). Old ZIP names are decoded correctly 99.2% of the time (before: 96.9%); a single Chinese name went from 75% to 94.3%. The desktop app now lists 7z and RAR archives that encrypt their file names, and fixes extracting password-protected archives, which sent 7-Zip an empty password.
- v0.8.2
Much better at spotting instructions hidden for AI. When an AI reads text inside an archive (Claude via the Pullzip extension, or the preview), Pullzip warns about text written to steer it: overriding earlier instructions, posing as the system, slipping the assistant an urgent side task, asking it to hide something from you or reveal its instructions — also when the words are disguised with look-alike letters, leetspeak or other languages. On public Hugging Face datasets it now catches 98.9% of instructions hidden in documents (before: 0%) with no false alarms on 2,046 ordinary technical files. Results are on the safety benchmark page.
- v0.8.1
Compression bombs are now refused before anything is written, in the web tool and the desktop app alike (the app used to unpack them straight to disk after a warning). The web tool also stops if a file comes out much larger than the archive said it would.
- v0.8.1
After extracting, the folder opens by itself (on by default; untick “Open the folder when done” to stop it). When an archive holds one top folder, that folder opens instead of the place it was unpacked into, and the “Open folder” button goes there too.
- v0.8.0
Update from inside the app, a proper password window, and garbled names fixed in ZIPs over 4 GB. The installed Windows app now downloads a new version in the background, checks its size, SHA-256 and Microsoft code signature against the running app, and installs it with one “Restart to update” click. In the web tool the browser’s bare prompt is replaced by a password window that checks the password by actually decrypting a file and lets you retry in place; encrypted 7z and RAR say clearly that they need the desktop app. Broken Korean, Japanese and Chinese file names are now repaired in ZIP64 archives too (over 4 GB or 65,535 files). The portable app is now code-signed as well.
- v0.7.4
Full review fixes. Security: an archive could hide blocked entries under a file named like their folder — now blocked everywhere; links written during an extraction in the Windows app are removed afterwards; a crafted name can no longer disturb the web page. Windows app: tar.gz compression no longer hangs on errors, Explorer's “Compress” keeps folder structure, and files opened from Explorer at startup are no longer lost.
- v0.7.3
On phones, Safari and Firefox, where a page cannot write into a folder, the extract button now saves the safe files as a new ZIP: blocked entries and anything flagged dangerous (such as a program disguised as a PDF) are left out, and repaired file names are kept.
- v0.7.3
Choose where files go with one tap under “Extract to folder”: Auto, Right here, New folder by file name, or a custom folder name — the full path is shown before you extract, and your choice is remembered. The Windows installer now shows Projectteamforyou instead of “Nullsoft Install System”.
- v0.7.2
Windows app: after extracting, an “Open folder” button takes you straight to the files. Two new options are remembered: “Use the same folder next time” (no folder dialog) and “Open the folder when done”. Closing the window now keeps Pullzip on the taskbar; quit from the tray icon.
- v0.7.1
Fixed: in the Windows app, “Extract to folder” could refuse Downloads, Desktop or Documents with “This folder can't be opened because it contains system files”. The app now uses the Windows folder dialog and its own 7-Zip engine, so you can extract anywhere.
- v0.7.0
You can now make Pullzip the default for zip, 7z and rar. The installer asks once, and the app — at first run and from Settings — shows what opens each type today before sending you to the Windows page where you confirm it. Windows does not let a program set that by itself.
- v0.6.0
The table now covers six programs, with WinRAR 7.1 and NanaZip 7.0 added. Of the five that open ZIP, only Pullzip recovered the legacy Japanese names; Pullzip and NanaZip kept the Mark-of-the-Web, and only Pullzip refused the zip bomb.
- v0.6.0
The comparison table was measured again on Windows, now including Bandizip: with default settings, 7-Zip 26.03 and Bandizip 7.46 both garbled the Shift-JIS names and left no Mark-of-the-Web on the extracted file.
- v0.6.0
The comparison table is live: the same 33 samples run through Pullzip, 7-Zip, tar and Info-ZIP unzip, with the exact command each one was given.
- v0.6.0
Update news now has its own page in every language, an Atom feed, and an in-app notice when a new version is out.
- v0.6.0
Garbled Korean, Japanese and Chinese file names are now repaired on macOS and Linux too, not only on Windows.
- v0.6.0
Files extracted by the app keep their Mark-of-the-Web, so Windows still warns about a program that came from the internet.
- v0.6.0
The desktop app gets a menubar, a tool sidebar, a sortable file list with columns, a live compression progress bar and TAR.GZ / TAR.XZ / TAR.BZ2.
- v0.6.0
The safety benchmark grows to 34 cases and ships a script that runs the same samples through 7-Zip, Bandizip, WinRAR and NanaZip on your own PC.
- v0.5.0
Every download is now Microsoft code-signed (PROJECTTEAMFORYOU) and served straight from pullzip.download.
- v0.5.0
The desktop app opens straight into the tool; the installer is slimmed to about 3 MB.
- v0.5.0
Added per-client setup guides and a self-hosted HTTP API (see “Connect to AI”).
- v0.5.0
Hardened engine: passwords via stdin only, overlap / zip-bomb and nested-archive checks, cancel & progress.