macOS .pkg (flat) file format

.pkg · package (xar wrapped) · introduced 2007 by Apple

What is a macOS .pkg (flat) file?

Modern macOS installer packages are XAR archives containing a Distribution XML, optional pre/post-install scripts, and a Payload that is itself a gzip-compressed cpio archive. pkgutil --expand pulls everything apart for inspection. This is what a Microsoft Office or Google Chrome .pkg installer actually is under the hood.

Most readers reach this page after double-clicking a .pkg file and finding their operating system unsure what to do with it. The good news: macOS .pkg (flat) is a well-understood format with mature tooling on every major platform. It is supported in one click by mainstream archivers on Windows, macOS, and Linux.

How to extract a macOS .pkg (flat) file

Opening a .pkg file is straightforward on every modern operating system. The exact steps depend on which platform you are on:

On Windows

Locate the .pkg file in File Explorer.
Right-click the file. If you have 7-Zip installed, choose 7-Zip → Extract Here. On Windows 11 the built-in extractor handles ZIP, 7z, RAR and several other formats directly through Extract All…
If prompted, pick a destination folder and click Extract.
The extracted files appear in a folder next to the original archive.

On macOS

Find the .pkg file in Finder.
Install The Unarchiver from the Mac App Store, or Keka for both creating and extracting.
Right-click the file → Open With → The Unarchiver (or just double-click after Unarchiver is set as the default).
The extracted folder appears next to the archive.

On Linux

Use your file manager: right-click the archive → Extract Here (file-roller on GNOME, Ark on KDE).

On the command line, run one of:

7z x archive.pkg    # works for almost any format

The files appear in the current directory.

How to create a macOS .pkg (flat) file

To pack files into a .pkg archive, you typically need an archiver that supports writing this format. Not every tool can create every format — for example, only WinRAR can create real RAR files. The sidebar lists the software known to read and write macOS .pkg (flat).

On the command line, the canonical create command is:

# Use 7-Zip, PeaZip, or the format's reference tool to create .pkg files.

If you regularly create archives at scale, a dedicated archive automation suite can wrap this command in scheduled jobs, integrity checks, and offsite replication.

Strengths

Signed and notarized
Inspectable with xar
Standard Apple installer

Weaknesses and limitations

Multiple nested archive layers
Apple-specific

Typical use cases

macOS software installers
Enterprise software deployment

Technical details

macOS .pkg (flat) uses the XAR + bzip2 / gzip + cpio.gz algorithm and is identified on disk by the magic byte sequence 78 61 72 21. The standard MIME type is application/x-newton-compatible-pkg. The format is an open specification and is free for any use.

Frequently asked questions

Is macOS .pkg (flat) safe to open?

Archive files are containers — they are only as safe as what they contain. A .pkg from a trusted source is fine; one received from a stranger can hold malicious executables, scripts, or files engineered to exploit bugs in your archiver. Always keep your archiver updated, and never run unknown executables that come out of an archive. A safe workflow is to extract into a sandbox and scan the contents before opening anything.

What is the maximum file size?

Modern implementations support archives in the multi-terabyte range. The practical limit is your filesystem (FAT32 caps at 4 GB; ext4, NTFS, APFS, and exFAT all comfortably handle multi-TB files).

Can I password-protect a macOS .pkg (flat)?

Some archivers can wrap macOS .pkg (flat) files in an encrypted container, but the format itself does not always include built-in encryption. Check your archiver's documentation.

How does macOS .pkg (flat) compare to other formats?

See our format comparison pages such as ZIP vs 7z, ZIP vs RAR, and tar.gz vs tar.xz for side-by-side feature tables.