7zip Password in terminal isn't masked

[ACR-Jeff]

My system: Void Linux, 7zip version 24.09
Very serious security risk
When creating a 7z a -p filename.tar.7z "dirname" archive the users input isn't masked with *** or nothing visible at all while typing the password.
This only happens with 7zip while creating a password protected archive, No other observations of this within the Terminal or within the system other than 7zip.

After posting I did some research and there is an existing outdated report on 7-zip's sourceforge https://sourceforge.net/p/sevenzip/bugs/2450/

[donaastor]

I can confirm that this happens on my system too. I installed arch and 7zip today so everything is up to date (date when I write this comment, it is "7zip 24.09-3"). It also happens when decompressing (decrypting) archives and the user doesn't have to repeat the password, it is only entered once. I understand that this is a bug since the changelog mentions not echoing passwords from 2010.

Btw, this isn't password encryption, I suggest the title: "Password is echoed in terminal" or something like that.

[ACR-Jeff]

Btw, this isn't password encryption, I suggest the title: "Password is echoed in terminal" or something like that.

Correct, I was sleeping when typing lol. It's more like masking the password with *** or nothing at all visible when typing a password as standard practice. I will correct my title. Thank you for your confirmation.

[arbitrary-dev]

Same issue on Linux.

[caminashell]

@ip7z Just wanted to point out that as of v26 (2026-03), this is still an issue. Echoing out passphrases to screen just isn't good.

There are some PRs #33 + #112 still open to address this and could use some reviewing. I am curious why it has not been merged, even after such a long time they were submitted, assuming they resolve the issue.

[silentarcher]

I am also affected by this issue on Arch Linux.