What is MIME type "application/zip"?

A MIME type is a string that tells browsers and other tools how to handle a particular kind of file.

The MIME type application/zip designates a file that bundles and compresses data. It makes files smaller and easier to transfer.
It works by packaging multiple items into a single compressed archive while keeping file structures and metadata intact.

Primary use: Consolidating files for storage or transfer.
Common in software updates and backups.
Ensures data integrity with built-in error-checking.
Operates across many operating systems and web platforms.

This MIME type is associated with various file types. For example, standard archives use ZIP. Some design programs use SH3D files. Enhanced archive formats appear as ZIPX. Additionally, specialized components like FB2K-COMPONENT and structured data files for rail systems such as RAILML and RAILMLX also use this MIME type.

Files labeled as application/zip can be managed using standard archive utilities. For more details, see this reference.

Associated file extensions

.zip, .sh3d, .zipx, .fb2k-component, .railml, .railmlx

Usage Examples

HTTP Header

When serving content with this MIME type, set the Content-Type header:


    Content-Type: application/zip

HTML

In HTML, you can specify the MIME type in various elements:


    <a href="file.dat" type="application/zip">Download file</a>

Server-side (Node.js)

Setting the Content-Type header in Node.js:


    const http = require('http');    
    
    http.createServer((req, res) => {    
      res.setHeader('Content-Type', 'application/zip');    
      res.end('Content here');    
    }).listen(3000);

Associated file extensions

.zip, .sh3d, .zipx, .fb2k-component, .railml, .railmlx

FAQs

What is the difference between application/zip and application/x-zip-compressed?

application/zip is the standard, IANA-registered MIME type for ZIP archives and should be your default choice. The type application/x-zip-compressed (and application/x-zip) is non-standard, often used by older Microsoft Windows operating systems or legacy browsers. Modern web servers and applications should always be configured to use the standard application/zip.

How do I configure my web server to serve ZIP files correctly?

You must ensure your server associates the .zip extension with application/zip.

Apache: Add AddType application/zip .zip to your .htaccess or config file.
Nginx: Ensure your mime.types file includes application/zip zip;.
IIS: Add a MIME map for .zip pointing to application/zip in the MIME Types feature.

Why are .sh3d and .railml files associated with application/zip?

Many modern file formats are actually renamed ZIP archives containing XML data and assets. For example, SH3D (Sweet Home 3D) and RAILML files use the ZIP compression standard to bundle multiple resources into one file. Consequently, systems often identify them as application/zip based on their binary signature (magic numbers), even if the extension differs.

How can I force a ZIP file to download instead of opening in the browser?

While most browsers download application/zip files automatically, you can ensure this behavior by setting the Content-Disposition header. Configure your server to send Content-Disposition: attachment; filename="archive.zip". In HTML, you can also use the download attribute: <a href="file.zip" download>Download</a>.

Are there security risks associated with application/zip?

Yes, ZIP archives are a common vector for malware because they can conceal dangerous executables like .exe or .scr files from immediate view. Additionally, "Zip bombs" (files composed of highly repetitive data) can crash systems by expanding to enormous sizes when decompressed. Always scan incoming ZIP files for viruses before opening them.

What happens if the Content-Type is set incorrectly for a ZIP file?

If a server sends a ZIP file with a text-based MIME type like text/plain or text/html, the browser may attempt to render the binary data as text. This results in a page filled with garbled characters (mojibake) starting with the characters PK. Correcting the header to application/zip fixes this issue.

Does application/zip support encryption?

The MIME type itself simply designates the container format, but the ZIP standard does support encryption. Files served as application/zip may be protected by standard ZipCrypto or stronger AES-256 encryption. The MIME type does not change based on whether the archive is encrypted or not.

General FAQ

What is a MIME type?

A MIME (Multipurpose Internet Mail Extensions) type is a standard that indicates the nature and format of a document, file, or assortment of bytes. MIME types are defined and standardized in IETF's RFC 6838.

MIME types are important because they help browsers and servers understand how to process a file. When a browser receives a file from a server, it uses the MIME type to determine how to display or handle the content, whether it's an image to display, a PDF to open in a viewer, or a video to play.

MIME types consist of a type and a subtype, separated by a slash (e.g., text/html, image/jpeg, application/pdf). Some MIME types also include optional parameters.

How do I find the MIME type for a file?

You can check the file extension or use a file identification tool such as file --mime-type on the command line. Many programming languages also provide libraries to detect MIME types.

Why are multiple MIME types listed for one extension?

Different applications and historical conventions may use alternative MIME identifiers for the same kind of file. Showing them all helps ensure compatibility across systems.