What the TAR writer checks
The browser builds POSIX ustar records, rejects unsafe or ambiguous filenames, verifies header checksums and reopens the archive. It compares each output filename, size and content byte with the selected source. Invalid or out-of-range file timestamps are rejected rather than silently shortened.
Limits and formatting
Choose up to 100 files, with at most 25 MiB per file and 60 MiB in total. Filenames must fit 100 UTF-8 bytes after normalization. Folder paths from your device are not preserved; files with equivalent names receive unique suffixes. Links and extended PAX metadata are not written.
TAR, TAR.GZ or ZIP?
Use TAR when a system needs an uncompressed POSIX archive. Use TAR.GZ for a compressed TAR stream. Use ZIP for broad desktop compatibility. None of these formats encrypts your files or scans them for malware.
After downloading
Inspect the archive before distributing it, especially if the receiving system has stricter naming rules. A successful local structural check does not prove that the original files are trustworthy.
Related archive tools
Convert an existing ZIP to TAR without losing file contents
Use the new ZIP import option to select one ZIP instead of separate files. MakeFileWork verifies the central directory, each local header, decompression size and CRC32 before creating a real TAR archive. The result is reopened and each regular-file payload is compared byte for byte. Directory paths are deliberately flattened and duplicate leaf names receive deterministic suffixes; review the evidence before using the TAR as a backup. Password-protected archives, symlinks, unsafe paths, unsupported compression and ZIP bombs are rejected. This is an archive-format conversion, not malware scanning.
Cancel a large archive job and verify its download
When a ZIP is imported, MakeFileWork checks each entry before conversion and allows cancellation between entries instead of waiting for the whole archive. After the TAR is assembled, a SHA-256 fingerprint of the output is stored locally and checked again when you press Download. A matching fingerprint confirms that the downloaded bytes have not changed since the completed conversion; it does not prove that the source files are harmless or that their folder structure was preserved.