Open DEB files in your browser
The package Debian, Ubuntu and Linux Mint install software from. Open one right here to see what it installs and the scripts it runs, without installing it. Nothing leaves your device.
Or drop it anywhere on this page
What you'll see
Your app opens like a folder, its files listed on the left, with a page beside them on what it is, who signed it and what it asks for.
- Its signature • Checked inside your browser
- SHA-256 • Compare it or look it up on VirusTotal
- Heads-ups • What it asks for and what runs
- Its files • Manifests open as text
About DEB
A DEB is an ar archive of three members: debian-binary with the format's version, control.tar with the package's details and scripts, and data.tar with the files it installs, compressed with gzip, xz or zstd.
The control file names the package, its version, its maintainer and what it depends on. preinst, postinst, prerm and postrm run as root as it installs and is removed. apt trusts a package because a signed list from its repository names its hash, so most DEBs carry no signature themselves.
Filepeek reads the control file and lists the dependencies, every file it installs with where it goes, and its scripts, which open as text. It checks each file against the package's md5sums, flags programs that run with root's rights and services it starts, and works out the SHA-256.
Debian package
.deb
Format
- MIME type
- application/vnd.debian.binary-package
- Made by
- Debian
- Released
- 1995
Inside the file
- Container
- ar
- Details
- control.tar, with the control file and scripts
- Files
- data.tar, compressed
- Checks
- md5sums of each file
Opens in every browser
No browser opens a DEB: they download it. Filepeek opens it as a folder in Chrome, Edge, Firefox and Safari.
- YouChromeOpens through Filepeek
- YouEdgeOpens through Filepeek
- YouFirefoxOpens through Filepeek
- YouSafariOpens through Filepeek
Questions
How do I see what a DEB installs without installing it?
Drop it on this page or choose Peek a DEB. A page shows the package, its dependencies and the scripts it runs as root, and every file it installs is listed like a folder.
Is a DEB signed?
Most aren't. apt checks a package against the signed list its repository publishes, which isn't in the DEB. Filepeek checks each file against the package's md5sums and works out its SHA-256 to compare with the repository's.
How do I look up a DEB on VirusTotal?
Filepeek works out its SHA-256 inside your browser. Look up on VirusTotal opens VirusTotal's page for that hash, and only the hash goes, never the file. Compare checks it against a SHA-256, SHA-1 or MD5 you paste.
Does opening a DEB install it?
No. Filepeek only reads it: nothing in it runs, nothing is installed and it never leaves your device.
Can I get files out of a DEB?
Yes. Pick any file on the left to open it. Its scripts and control file open as text. Export saves them all as a ZIP, or, in Chrome and Edge on a computer, extracts them into a folder.