Two stages, two integrity checks
The TAR stage checks entry names, header checksums, sizes and each payload byte. The GZIP stage decompresses the completed stream and compares the entire result with the verified TAR, not just the entry count. A mismatch prevents the download.
Browser requirements and limits
The tool requires the browser CompressionStream and DecompressionStream APIs. Choose up to 100 files, at most 25 MiB each and 60 MiB total. Timestamps that cannot fit the POSIX ustar field are rejected rather than corrupted.
When not to choose TAR.GZ
TAR.GZ is useful for Unix tools and source distribution, but it is not a password-protected format. For files intended for typical desktop recipients, ZIP may be easier to open. For one file only, a standalone GZIP stream may suffice.
Verify the recipient workflow
Archive verification confirms structural integrity and a byte-for-byte round trip, not antivirus safety or compatibility with every extractor. Inspect the result and confirm the target service accepts TAR.GZ.
Related archive tools
Convert an existing ZIP to TAR without losing file contents
Use the new ZIP import option to select one ZIP instead of separate files. MakeFileWork verifies the central directory, each local header, decompression size and CRC32 before creating a real TAR archive. The result is reopened and each regular-file payload is compared byte for byte. Directory paths are deliberately flattened and duplicate leaf names receive deterministic suffixes; review the evidence before using the TAR as a backup. Password-protected archives, symlinks, unsafe paths, unsupported compression and ZIP bombs are rejected. This is an archive-format conversion, not malware scanning.
On this TAR.GZ page, ZIP import produces a compressed TAR.GZ and verifies the GZIP round trip after TAR validation.
GZIP round-trip, cancellation and SHA-256
The TAR.GZ converter reopens the compressed stream and compares the recovered TAR bytes before offering the file. ZIP imports can be cancelled between verified entries. The download button independently recomputes SHA-256 to detect a changed output blob. This integrity check does not certify the contents as malware-free and does not restore ZIP folder paths, which are flattened during import.