If you’ve been working with Debian 12, chances are you’ve already used tar or zip for packaging files. They work fine, but when you need smaller archives and stronger protection, nothing beats 7-Zip. The .7z format not only compresses better, it also supports AES-256 encryption and can even hide file names.

This guide will walk you through installing and using 7-Zip on Debian 12, show how recursive compression works, and explain why .7z is safer than .zip.

1. Installing 7-Zip on Debian 12

Update your package list and install the full package:

• p7zip-full provides the 7z command with full archive support
• p7zip-rar is optional, adds .rar support

Verify the installation:

You should see /usr/bin/7z.

2. The Basics: Compress, Extract, List

The 7z tool is straightforward:

• Compress files or folders (recursive by default): 7z a archive.7z /path/to/folder
• Extract an archive: 7z x archive.7z
• List archive contents: 7z l archive.7z
• Test archive integrity: 7z t archive.7z

When you compress a folder, 7-Zip automatically goes through all subfolders recursively. No extra flag is needed.

3. Why .7z Is Safer and Stronger Than .zip

Most people are familiar with .zip, but .7z offers significant security and efficiency advantages:

• Encryption strength: .7z uses AES-256, a modern, industry-standard encryption method. By contrast, .zip often defaults to ZipCrypto, which is weak and can be brute-forced quickly. Even when .zip uses AES, support across platforms is inconsistent.
• Hidden file names: With .7z, the -mhe option encrypts archive headers. This means even the file and folder names are hidden until the correct password is entered. .zip cannot do this — file names are always visible.
• Compression ratio: .7z generally produces smaller files than .zip, saving space and bandwidth.
• Cross-platform reality: .zip is universally supported (Windows and macOS can open without extra tools). .7z may require installing 7-Zip or PeaZip, but the tradeoff is much better security.

In short: use .7z when security and efficiency matter, and .zip only when compatibility is critical.

4. Safest Way to Archive a Folder

To compress a folder securely, recursively, and with verbose output:

What this does:

• -t7z explicitly uses the 7-Zip format
• -p prompts for a password (not stored in shell history)
• -mhe=on encrypts file headers so names and folders are hidden
• -bb3 gives maximum verbosity, showing full progress
• archive.7z is the output file
• /path/to/folder is the folder you want to compress (all subfolders included automatically)

You’ll be prompted for a password and confirmation before the process starts.

5. Extracting a Secure Archive

To restore the archive:

You’ll be asked for the password before extraction begins.

6. Example in Action

Archiving /var/app/local/data into backup.7z:

Extracting later:

7. Quick 7-Zip Cheat Sheet

A handy reference for common commands:

8. Wrapping Up

On Debian 12, 7-Zip is the safest way to compress and protect your data. It compresses recursively by default, encrypts contents with AES-256, and with -mhe even hides file and folder names.

• Use .7z when you care about security and compression.
• Fall back to .zip only when you need universal compatibility.

With just a few commands, you can ensure your data is safe, private, and portable.