Icon Menu
Icon Search

Passware Kit Forensic

Passware Kit Forensic discovers all password-protected items on a computer and decrypts them. The software recognizes 280+ file types and works in batch mode to recover their passwords. Many types of files are decrypted instantly, while other passwords are recovered through Dictionary and Brute-force methods using GPU acceleration and distributed computing (for Windows, Linux, and Amazon EC2). Available for Windows & Mac.

What's New

  • Support for TrueCrypt/VeraCrypt containers with keyfiles

  • Instant decryption of Bitlocker with a known Recovery Key

  • Support for the latest Opera, Chrome, and Edge browsers

  • Support for Dash Core, Dogecoin, and Litecoin crypto wallets

  • Automatic updates of Passware Kit Agents for Linux

Live memory analysis
Analyzes live memory images and hibernation files and extracts encryption keys for hard disks, logins for Windows & Mac accounts, and passwords for files and websites, all in a single streamlined process.

Cloud data acquisition
Acquires backups and data from cloud services (Apple iCloud, MS OneDrive, and Dropbox). Extracts passwords from iCloud keychains.

Cross-platform Passware Kit Agents
Supports distributed password recovery with Agents for Windows, Linux, and Amazon EC2.

64-bit version
Improved performance, including the capacity to process thousands of files simultaneously and to handle larger dictionary files.

Automatic updates
Includes automatic software updates with one year of Software Maintenance and Support (SMS) subscription.

Hardware acceleration
Accelerated password recovery with multiple computers, NVIDIA and AMD GPUs, Decryptum, and Rainbow Tables.

Mobile forensics
Recovers passwords for Apple iPhone/iPad and Android backups as
well as Android images and extracts data from images on Windows
phones. Integrated with Oxygen Forensic Suite.

Password recovery for 280+ file types
MS Office, PDF, Zip and RAR, QuickBooks, FileMaker, Lotus Notes, Bitcoin wallets, password managers, and many other applications.

Encryption detection and analysis
Detects all encrypted files and hard disk images and reports the type of encryption and the complexity of the decryption.

Batch processing
Runs password recovery for groups of files without manual intervention.

Decryption of FDE
Decrypts or recovers passwords for BitLocker, FileVault2, TrueCrypt, VeraCrypt, LUKS, McAfee, APFS, Apple DMG, Symantec, and PGP disk images.

Password Exchange
Password Exchange provides access to the list of passwords found by Passware Kit users worldwide, offering it as an advanced dictionary to improve chances of finding strong passwords.

Network Distributed Password Recovery

Passware Kit Agent Passware Kit Agent is a network distributed password recovery worker for Passware Kit Forensic. It runs on Windows and Linux, 64- and 32-bit, has linear performance scalability. Each computer running Passware Kit Agent supports multiple CPUs, GPUs, and TPR accelerators simultaneously. Passware Kit Forensic comes with 5 agents included with ability to purchase more separately as needed.

Hardware Acceleration of Password Recovery Attacks

Passware Kit Forensic can increase password recovery speed up to 400 times by using a single GPU (Graphics Processing Unit) card, and up to 12,000 times by using a single Decryptum PR 2080TI-S/12 4U unit. Distribute password recovery tasks over a network of Windows or Linux computers, as well as Amazon EC2, for linear scalability. For even higher performance use Decryptum, our ultra-compact liquid-cooled GPU accelerated devices - world's fastest scalable turn-key decryption solution for password recovery.