How to show file extensions, view file extensions on Windows

Windows File Explorer offers a lot of options to change how you view files. What you might not know is that one important option is disabled by default, even though it's crucial to the security of your system.

File extensions are important

File extensions are three- or four-letter suffixes that appear after the final period of a file name, such as .txt, .exe, or .pdf. These extensions act as identifiers so that the operating system (and you) can instantly recognize what type of file they are.

Windows uses file extensions to determine which application to launch when you double-click a file. For example, an .exe file will launch an application, while a .docx file will open a Word file in Microsoft Word . Many programs save files with a specific file extension, which can then only be opened in that program (or a compatible third-party tool).

How to show file extensions, view file extensions on Windows — Executable file in Windows

One important advantage of being able to see file extensions is the ability to detect potentially dangerous files. Certain extensions such as .exe, .bat, .cmd, .vbs, and .scr (among others) can be malicious files designed to run malicious code on your system. These files often use file extensions used by legitimate Windows tools and programs, so detecting them can be quite difficult.

Despite their importance, file extensions are hidden by default in all modern versions of Windows. This is done to create a cleaner user interface in File Explorer. However, malware creators often use hidden extensions to disguise malicious executables as harmless-looking documents to trick users into running malware on their PCs, so it’s best to leave them visible.

Show file extensions on Windows

Luckily, showing file extensions on Windows only takes a few clicks. On Windows 11, just open File Explorer with the Windows key + E shortcut , click View in the top bar, hover over Show , and select File name extensions . You’ll see the file extensions for all the files saved on your computer.

If you don't see the top bar in File Explorer, you can also show file extensions from Windows settings. Follow these steps:

Press Windows key + I to open Windows Settings . Go to the System tab and select For developers .
Expand the File Explorer section by clicking on it, then make sure the Show file extensions slider is turned on.

Especially if you're using an older version of Windows, Control Panel is also useful for displaying file extensions:

Open the Start menu and search for Control Panel . Click the corresponding option.
Change Category to Small icons if needed, then select File Explorer options .
In the View tab , make sure that the Hide extensions for known file types option is unchecked.

You can also show file extensions by making a small change to the Windows Registry, but you should avoid doing this. The three methods above will work on any version of Windows you’re using in 2025 and are much less error-prone. However, if you want to quickly show file extensions, just run this command in Windows Terminal or PowerShell :

reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced /v HideFileExt /t REG_DWORD /d 0 /f

This command will add the necessary entries to the Windows Registry to tell File Explorer to start displaying file extensions. Remember to refresh File Explorer with the F5 key to see the changes.

How attackers exploit hidden file extensions

As mentioned, hackers often exploit hidden file extensions on Windows to disguise malicious files as harmless files. For example, a file named image.png.exe will appear as a PNG image file in File Explorer with a hidden file extension, when in fact it is an executable file that can run malicious code or malware when launched.

This technique is called a “double extension attack,” and it’s the most common type of file extension attack you’ll see. Fortunately, as long as the file extension is enabled, these malicious EXE files are fairly easy to spot and avoid. However, this isn’t the only technique that tries to use hidden extensions to trick you. Some other common methods include:

Technique	For example	Describe
Right-to-Left Override (RTLO)	image[RTLO]gpj.exe appears as image.exe.jpg	The attacker used the Unicode character U+202E to reverse the file name.
Whitespace Padding	document.pdf[insert 100 spaces].exe	You can put more whitespace between the fake and real file extensions, so the real file extension will be pushed off the screen even if the file extension is displayed.
Icon Manipulation	The document.exe file with a PDF icon	This is a simple technique where criminals will change the malicious file's icon to a more familiar icon, such as a PDF or JPG icon.
PIF file	document.pif	The PIF file extension is automatically hidden by Windows, even if file extensions are enabled. However, PIF files are rarely used in modern versions of Windows.

As you can see, there are a number of tricks an attacker can use to trick you into running a malicious executable file that you might think is an image. However, by spending just a few seconds displaying file extensions on Windows, you can fall for this trick before you accidentally launch any malware on your PC.

File extensions help identify the type of file you're dealing with, but Microsoft's default practice of hiding them in File Explorer leaves an opening for malicious files to disguise as malicious. Don't fall for these tricks! Show file extensions and always double-check a file before opening it, especially if it's from the Internet or you didn't ask for it.

Tags: #System

5 Free Tools to Find Spyware and Adware on Your PC

With the right tools, you can scan your system and remove spyware, adware, and other malicious programs that may be lurking on your system.

Heres How to Delete the Recovery Partition and the 450 MB Recovery Partition on Windows 10

The Recovery partition is a separate partition on your computer's hard drive or SSD and is used to restore or reinstall the operating system in case of system failure.

How to hide icons on Windows 11 desktop?

There are many ways to hide all the icons on the Windows desktop to get a clean, distraction-free interface. Here is a guide to hide icons on the Windows 11 desktop.

How to turn off password sharing security in Windows 11

Microsoft enables password-protected sharing. If you find this setting unnecessary, you can disable password-protected sharing in Windows 11.

How to change default language shortcuts Windows 11

The default language change shortcut is Windows + Space which cannot be turned off by default, but you can also change the language shortcut according to the article below.

How to turn off automatic app updates in Microsoft Store

The Store has removed the persistent toggle and now only lets you pause app updates for 1–5 weeks. If you want to block forced app updates, you can try some of the settings below.

Instructions for reinstalling Windows Settings

In case the settings you have changed affect the content on your computer, or there is a problem, you can reset Windows Settings, following the instructions below.

How to close all open applications at once on Windows 11?

Windows 11 doesn't have a specific close all apps button but there are some methods to close all open apps at once on Windows 11.

Instructions to fix the error “not recognized as an internal or external command” when using CMD in Windows

One day, you turn on your computer, go to CMD and get the error is not recognized as an internal or external command, operable program or batch file. What should you do?

Fix Copy Paste command not working on Word, Excel (2007, 2010)

There are many reasons why the Copy Paste command does not work on a Windows computer, such as your computer is attacked by a virus, the clipboard does not work, and therefore the copy command (Ctrl + C) and the paste command (Ctrl + V) do not work. So how to fix this error, please refer to the article below of WebTech360.

Fix function keys not working in Windows 10

The Fn function keys give you a quicker and easier way to control some hardware features.

How to remove yellow triangle warning on Windows C drive

This out-of-place indicator usually means that BitLocker encryption has been disabled, an update requires a reboot, or a firmware upgrade is pending.

Instructions to change Google DNS 8.8.8.8 and 8.8.4.4

Google DNS 8.8.8.8 8.8.4.4 is one of the DNS chosen by many users, especially to increase network access speed or access blocked Facebook.

How to use TickTick desktop widget instead of to-do apps

Once you put your to-do lists on Windows 11's widget panel, they start appearing in front of you every morning—and suddenly, it's not so easy to ignore them anymore.