Protect package files

This page offers different security features for your packages and their contents. You may for instance wish to protect your files against bad downloads, illegal use...

Protect my files with this key

If you enter a key, Paquet Builder will use it to encrypt your files. This is not the best security for your files, but it is more better than a simple password. Zip, Cabinet and 7-Zip archives can be encrypted, so end users are not able to extract files (using some external decompression tools) without running your package. The package will have to ask end users for this key before extracting files. If they provide a bad key, the files won't be extracted and the package consequently will close.

About Cabinet protection: Cabinet archives can be specifically encrypted with Paquet Builder; end users are able to see the package contents, extract files BUT they cannot get the original file without the password. Warning: if they provide a bad key, the package files will still be extracted but they won't be correctly restored.

IMPORTANT: encryption used in Cabinet archives highly decrease the compression ratio!

Note: if you use an external archive file, this feature will not encrypt files contained inside this archive file. Encryption is done only when compressing files.

Store the key inside the package

Sometimes you need to password protect your files but you do not want to ask end users for the required key. This option may help you: if you enable it, Paquet Builder will store it within the package and when extracting your files, the package will use it without prompting end users. This option is automatically enabled for Cabinet and 7-Zip based packages (if you decide to encrypt the files). If you still want to ask end users for a password, please continue reading...

Ask end users for the following password

End users are required to provide the package with the password you entered in that box. If the password is wrong, then the package will exit. This feature does not encrypt files, but is useful for 7-Zip and Cabinet-based packages as explained above.

Encrypt file names with the key above

Only with 7-Zip compression selected.

Paquet Builder can even encrypt file names with the key used to protect your files; it is then impossible to view the list of files that were compressed in the package, using a hexadecimal editor for instance. Users will not be asked for the key: the package automatically restores the names when decompressing files.

Set an expiration date

If you would like to set a trial date for the package (after this date, the package has expired and cannot extract its files), then just select the expiration date. After that date, packages will show an error message ("Package Expired!") and exit.

Just note that this expiration date feature is not really secure as it does not perform safe date checking. This feature is indeed more to indicate end users that they need to obtain a newer version of the package.

Enable package size check

This option causes the package to check its size at startup: if the package's size is different (due to bad downloads and truncated packages), it will display an error message and exit.

This option is not compatible if you want to digitally sign your package (see below).

Verify package integrity (CRC32) before extracting

If this option if turned on, the package will verify its integrity by computing the checksum (CRC32) of the internal archive. Another checksum of the latter was already computed by Paquet Builder when compressing files and was stored in the package. Before extracting files, the package will compare the the two checksums; if they are different, then the package was externally modified or corrupted; thus an error message is displayed and the package exits.

This operation may take some time depending on the size of your package; that's why this operation is only done before the file extraction. Note that if a progress monitor is enabled, it will display the verification's percent and a message like "Checking package integrity" (that you can customize with resource strings).

We recommend you to turn on the two previous options if you want to distribute your packages over the Internet, by E-Mail or with FTP.

Note that these features are superseded by package digital signing: if you own the necessary certificates (PVK and SPC, or PFX files), Paquet Builder can sign the package to ensure your customers that the latter they got was not altered and is identical to the original one.


  Paquet Builder Help - Copyright © G.D.G. Software. All rights reserved.