RAR Password Recovery with GPU: Step-by-Step Guide

Updated 6 November 2026 · Standard formula, shown below

This guide explains how to recover a lost or forgotten password for a protected RAR archive using your graphics card (GPU) to accelerate the process. You’ll learn the essential steps, from preparing your files to running the recovery tool, along with common mistakes and troubleshooting tips. This approach can dramatically speed up dictionary and brute-force attacks compared to CPU-only methods.

What You’ll Need

A Windows PC (most GPU-accelerated tools are Windows-native; some work on Linux via Wine).
A compatible NVIDIA or AMD GPU with recent drivers installed. NVIDIA cards are generally best supported.
The protected RAR file itself.
Optional: a wordlist file (e.g., rockyou.txt) if you plan a dictionary attack.
Administrator rights on your PC (needed to install some tools and drivers).

Step-by-Step

Identify the encryption type. RAR archives can use different encryption methods (RAR3, RAR5, AES-128, AES-256). Knowing this helps choose the right tool and settings. You can often see the RAR version in the archive properties, or simply test with the tool.
Download a GPU-accelerated recovery tool. Popular options include Hashcat (free, open-source, supports GPU) and RAR Password Recovery by 7-Zip (free, but CPU-only). For GPU, Hashcat is the most powerful. Download the latest version from the official Hashcat website.
Extract the hash. Hashcat does not work directly on the .rar file; it needs the password hash. Use a tool like rar2john (part of John the Ripper) to extract the hash. Open a command prompt and run: rar2john yourfile.rar > hash.txt. This creates a file containing the hash in a format Hashcat understands.
Check your GPU is detected. Run hashcat -I in the command prompt. This lists all available devices. Ensure your GPU appears and note its number (e.g., 0, 1). If not, update your GPU drivers.
Choose an attack mode. The most common are:
- Dictionary attack (mode 0): Tries every word in a wordlist. Use if you suspect the password is a common word or phrase.
- Brute-force attack (mode 3): Tries all combinations of characters. Use if you know the length and character set (e.g., 8 lowercase letters).
- Mask attack (mode 3 with masks): A smarter brute-force where you define patterns (e.g., ?l?l?l?l?d?d?d?d for 4 letters + 4 digits).
Run the attack. For a dictionary attack, use: hashcat -m 13000 hash.txt wordlist.txt (13000 is the hash type for RAR5; for RAR3 it’s 125). For a brute-force, use: hashcat -m 13000 hash.txt -a 3 ?l?l?l?l?l?l (six lowercase letters). Add -d 1 (or your GPU number) to force GPU usage.
Monitor progress. Hashcat shows the current speed (hashes per second), time remaining, and any cracked passwords. You can press ‘s’ to see status, ‘q’ to quit and save progress (with –restore).
Retrieve the password. When a password is found, Hashcat displays it in the output. It is also saved in the hashcat.potfile. The password is case-sensitive; note it exactly.
Test the password. Open the RAR file with your archiver (e.g., WinRAR, 7-Zip) and enter the recovered password to confirm it works.

Common Mistakes

Wrong hash type: Using the wrong -m value (e.g., 125 instead of 13000) will cause immediate failure. Check the RAR version.
Not using GPU: Hashcat may default to CPU. Always specify the GPU device with -d.
Ignoring drivers: Outdated or missing GPU drivers cause detection issues or crashes.
Too broad brute-force: Trying all 8-character combinations with all character sets is astronomically slow. Use masks or dictionary attacks first.
Forgetting the potfile: If a password was cracked in a previous run, it’s saved. Check the .potfile before re-running.

Tips

Start with a dictionary attack. Most passwords are common words or variations. Use a large wordlist like rockyou.txt.
Use masks intelligently. If you remember the password starts with a capital letter and ends with a digit, use a mask like ?u?l?l?l?l?d.
Combine attacks: Run a dictionary attack, then a rule-based attack (e.g., adding digits to words), then a mask attack.
Save your progress: Use --restore to resume a paused session. This is crucial for long attacks.
Keep the GPU cool: High load generates heat. Ensure proper cooling to avoid throttling.

Troubleshooting

Hashcat says ‘No devices found’: Update your GPU drivers. For NVIDIA, install the latest Game Ready or Studio drivers. For AMD, install the latest Adrenalin drivers.
Hashcat crashes during the attack: Reduce the workload. Try adding --force to bypass warnings, or lower the --workload-profile (e.g., -w 1 for low load).
Very slow speed: Ensure you are using the GPU (check with -I). Also, close other GPU-heavy applications (games, rendering).
Hashcat says ‘Hashfile empty’ or ‘Token length exception’: The hash extraction failed. Re-run rar2john and ensure the .rar file is not corrupted.
Password not found after long run: The password may be too complex for the chosen attack. Expand your mask, use a bigger wordlist, or consider that the password might be very long (e.g., 20+ characters), which is infeasible to brute-force.

Frequently Asked Questions

Can I recover any RAR password with GPU?

In theory, yes, if the password is weak enough. Strong passwords (long, random) are practically impossible to crack, even with GPU acceleration.

Is this legal?

It’s legal if you own the archive or have explicit permission from the owner. Using it on someone else’s archive without permission may be illegal.

How long does it take?

It depends on the password complexity and your GPU. A 6-character lowercase password might take minutes; an 8-character mixed-case password could take days or longer.

Do I need an NVIDIA GPU?

No, AMD GPUs work too, but NVIDIA is generally better supported and faster for Hashcat.

What is a mask attack?

A mask attack lets you specify character patterns. For example, ?d?d?d?d tries all 4-digit combinations. It’s much faster than full brute-force.

Can I use my CPU as well?

Yes, but it will be much slower. Hashcat can use both CPU and GPU, but GPU is typically 10-100x faster for this task.

Method: the standard formula for this calculation, rounded as each result states. See how the calculators work or report an error.