7-Zip is a file archiver for Windows, with console versions for Linux and macOS, written by Igor Pavlov and distributed as free software with open source.[3][4] Most of its code is under the GNU Lesser General Public License (GNU LGPL). Some parts are under the BSD 3-clause licence, and some code carries an additional unRAR licence restriction.[3] The licence file also names the BSD 2-clause licence for part of 7z.dll.[1] The licence file and the FAQ both state that 7-Zip may be used on any computer, including a computer in a commercial organisation, without registering or paying.[1][2] 7-Zip therefore has no licence metric, key, seat count or order quantity. For software asset management (SAM), obligations arise when an organisation redistributes or modifies 7-Zip, not when it installs and runs it internally. The current release is 7-Zip 26.03, dated 2026-09-03.[3]
Editions
7-Zip is not sold in editions. The download page lists the packages published for each release.[4]
| Package | Platform | Description (vendor wording) |
|---|---|---|
| 7-Zip installer (.exe) | Windows x64, x86, arm64 | 7-Zip installer for Windows |
| Alternative MSI installer (.msi) | Windows x64, x86 | 7-Zip for 64-bit or 32-bit Windows |
| 7-Zip Extra (.7z) | Windows x86 / x64 | Standalone console version, 7z DLL, Plugin for Far Manager |
| 7-Zip for Linux (.tar.xz) | x86-64, x86, arm64, arm | Console version |
| 7-Zip for macOS (.tar.xz) | arm64 / x86-64 | Console version |
| 7-Zip Source code (.7z, .tar.xz) | Any / Windows | Source code |
| LZMA SDK (.7z) | Any / Windows | C, C++, C#, Java |
| 7zr.exe | Windows x86 | 7-Zip console executable |
The same releases are published on GitHub (repository ip7z/7zip) and SourceForge. Older releases, such as 23.01, 19.00, 16.04 and 9.20, remain available for download.[4] p7zip, a command-line port for Linux and Unix, is made by an independent developer. The download page links to it and to unofficial distribution packages, but these are not 7-Zip releases.[4]
Licences
The licence file gives the licence of each component.[1] The licence map rule records it:
| Component | Licence (7-Zip wording) | SPDX identifier |
|---|---|---|
| 7z.dll, most code | GNU LGPL | LGPL-2.1-or-later |
| 7z.dll, RAR decompression code | GNU LGPL with unRAR licence restriction | LGPL-2.1-or-later plus the unRAR restriction (SPDX lists UnRAR) |
| 7z.dll, LZFSE and ZSTD decompression | BSD 3-clause License | BSD-3-Clause |
| 7z.dll, XXH64 hash | BSD 2-clause License | BSD-2-Clause |
| All other files | GNU LGPL | LGPL-2.1-or-later |
The LGPL notice grants rights under version 2.1 of the licence or, at the recipient’s option, any later version.[1] SPDX uses the identifier LGPL-2.1-or-later for this choice and LGPL-2.1-only for code limited to 2.1.[12] Version 2.1 of the LGPL was published by the Free Software Foundation in February 1999, and the 7-Zip sources include its full text.[7] The SPDX License List flags LGPL-2.1-or-later, BSD-3-Clause and BSD-2-Clause as both FSF Free/Libre and OSI Approved.[13] The Open Source Initiative publishes each of the three licences on its licence pages.[14][15][16] The unRAR licence and the LZMA SDK licence carry neither flag in the SPDX list.[13]
The source tree has its own License.txt, which maps licences to individual source files. It also states that files without licence information are under the GNU LGPL.[5] The source readme calls the RAR decompression codecs “not fully free”. Builds can leave that code out.[6]
Metrics
7-Zip has no licence metric. The project publishes no price, per-user, per-device or per-core charge, and no quantity limit.[1][3] No catalog metric rows exist for this publisher.
Commercial and internal use
The commercial-use rule applies to every installation. 7-Zip can be used on any computer, including in a commercial organisation, and does not need to be registered or paid for.[1][2] The LGPL covers only copying, distribution and modification. Running a program that uses the library is not restricted.[7] Internal deployment, including silent installation through software distribution tools, creates no copyleft obligation. The FAQ documents the silent-install switches: /S and /D= for the exe installer, and /q INSTALLDIR= for the msi installer.[2]
Redistribution and modification
Obligations arise when 7-Zip is passed to a third party or changed. The main ones are listed below; see 7-Zip redistribution and LGPL obligations for detail.
- Binary redistributions must reproduce the related licence information from the licence file.[1] (rule)
- A commercial application that uses 7-Zip EXE or DLL files must say three things in its documentation: that it uses parts of 7-Zip, that 7-Zip is licensed under the GNU LGPL, and where the source code can be found, with a link to www.7-zip.org.[[2]](https://www.7-zip.org/faq.html) (rule)
- LGPL code, including changes to it and wrappers compiled into a DLL, must stay under the LGPL or GPL. The rest of the application can be licensed as the developer wishes.[2] (rule)
- Object-code distribution of the library must come with its complete corresponding source code. Equivalent access from the same download location also satisfies this.[7] (rule)
- Code derived from unRAR may not be used to re-create the proprietary RAR compression algorithm.[1] (rule)
Trademark policy
Neither the licence file nor the FAQ has a trademark policy or grants rights in the 7-Zip name.[1][2] The only name-use condition in the published licence texts is clause 3 of the BSD 3-clause licence, which covers the LZFSE and ZSTD code. It says the names of the copyright holder and contributors may not be used to endorse or promote derived products without prior written permission.[1]
Bundled third-party components
7z.dll contains code from other authors under other licences. The RAR decompression engine was developed from unRAR source code, which is copyright Alexander Roshal. LZFSE decompression is derived from Apple Inc.’s LZFSE library. ZSTD decompression was developed using Facebook’s zstd decoder as reference code. The XXH64 code is derived from code by Yann Collet.[1] Some source files are in the public domain where the file says so.[5] The LZMA SDK, which contains a subset of the 7-Zip source code, is in the public domain.[8] See 7-Zip LZMA SDK and bundled component licences.
Programs
The catalog records one program, the 7-Zip free open-source distribution. The project publishes no paid edition, subscription, enterprise agreement or commercial support contract.[1][3] Support runs through the 7-Zip forum and ticket system on SourceForge. Possible vulnerabilities are reported as tickets marked private.[10] The LGPL code comes without any warranty, including the implied warranties of merchantability and fitness for a particular purpose.[1]
Versions and security updates
Recent 7-Zip version numbers begin with the last two digits of the release year. For example, 25.01 is dated 2025-08-03 and 26.03 is dated 2026-09-03. The release history lists fixed vulnerabilities by CVE identifier.[9] Examples include CVE-2026-14266, a heap-based buffer overflow in XZ decompression fixed in 26.02 (2026-06-25), and CVE-2026-58052, fixed in 26.03 (2026-09-03), in which the Mark-of-the-Web was not preserved when extracting a crafted archive. Versions 25.00 and 25.01 of 2025 fixed several vulnerabilities in the handling of symbolic links.[9] The support page asks users to check that they run the latest version before requesting help.[10] The project publishes no end-of-life dates or long-term support branches. Fixes ship only in new releases (rule).[9]
SAM practice
The following is commentary on applying the documents above.
- Discovery. Look for installed 7-Zip for Windows and for binaries copied without an installer, such as 7z.dll and 7za.exe from 7-Zip Extra and 7zr.exe. Look also for Linux and macOS console versions, and for copies embedded in other vendors’ products, which the FAQ expects commercial applications to name in their documentation.[2][4]
- Version tracking. Because fixes arrive only as new releases, compare installed versions with the current release on the home page and with the CVE entries in the release history.[3][9] Old downloads such as 9.20 remain published, so their presence on a download page is not evidence that they are supported.[4]
- Licence identification. Record licences from the licence file rather than from hosting metadata. The SourceForge project page lists the licence as “LGPLv2”, but the licence file grants 2.1 or later and adds BSD and unRAR terms for parts of 7z.dll.[1][11] (rule)
- Internal use and redistribution. Internal installations need no entitlement record. Products, appliances, installers or images that ship 7-Zip to third parties need the licence notices, the attribution the FAQ describes, and source availability for any modified LGPL code.[1][2][7]
Out of scope
This page does not cover p7zip or other independent ports and front ends. It also does not cover RAR or WinRAR licensing, or products from other publishers that embed 7-Zip code. Virtualization, partitioning, cloud and BYOL rules do not apply, because the licences place no limits on where or how many copies run.[1]