The complete electronic evidence decryption solution

Passware Kit Forensic is the complete electronic evidence discovery solution that reports all password-protected items on a computer and decrypts them.

Key Product Features

Highest Speed

Reports all password-protected items on a computer and gains access to these items using the fastest decryption and password recovery algorithms.

Over 250 file types

Instant decryption of BitLocker, TrueCrypt, FileVault2, and PGP hard disks, MS Office 2013 documents, instant recovery of passwords for websites, Windows and Mac users.

Portable version

Runs from a USB drive so you can perform a complete encrypted evidence discovery process without installing Passware Kit on a target PC.

  • Passware Kit Agent for Linux

    Linux version allows running a portable Passware Kit Agent from a bootable Linux USB drive on any system without installation

  • iCloud backup acquisition

    Passware Kit now acquires full iOS backups from iCloud. All versions of iOS, including the latest 8.0.2, are supported.

  • 64-bit version

    Improved performace while processing thousands of files simultaniously and larger dictionary files

  • Batch processing

    Detects all the encrypted files & hard disc images, reports encryption type and decryption complexity

  • BitLocker, TrueCrypt, FileVault2, PGP

    Instantly decrypts hard disk images with live memory analysis or recovers their passwords with accelerated brute-force attacks

  • Integrated with Guidance EnCase v7

    One-click password recovery directly from EnCase

View More Features
  • Instantly decrypts Ms Word and Excel files up to version 2003

  • Extracts passwords from encrypted Mac keychain files and KeePass databases.

  • Retrieves electronic evidence in a matter of minutes from a Windows Desktop Search Database

  • Resets passwords for Local and Domain Windows Administrators instantly

  • Standalone registry analysis: instantly recovers Windows login passwords, including UPEK, passwords for email, websites, and network connections

  • Recovers passwords from Windows/Unix/Mac hashess

  • Provides 9 different password recovery attacks with an easy-to-use wizard and drag & drop editor

  • Supports custom dictionaries and compiles wordlists from memory images

  • Provides detailed reports with MD5 hash values, exports to HTML or CSV

  • Automatic software updates: 1 year included


  • Microsoft Windows Vista, Server 2003/2008/2012, or Windows 7/8.x/10 (32-bit or 64-bit) installed and configured on your system
  • 1 GHz processor (2.4 GHz recommended)
  • 512 MB of RAM (1 GB recommended)
  • 150 MB of free hard disk space (more if you use custom dictionaries)


Passware software supports PC platforms only. However, it can recover passwords for some files created on Macintosh such as FileMaker. You can run Passware products on a Virtual PC or Parallels Desktop to unprotect your files.

For Windows Key, a Windows Setup CD (32-bit or 64-bit) is required, as well as a burning CD-RW drive in order to record a password reset CD instead of the USB disk.

To acquire a physical memory image of the target computer using Passware FireWire Memory Imager (used to recover BitLocker, TrueCrypt, PGP, MS Office encryption keys, Windows and Mac user passwords, and website logins), a FireWire cable is required. Both the target computer and the computer used for acquisition should have FireWire (IEEE 1394) ports. A USB flash drive for Passware FireWire Memory Imager should be 8 GB or more.

Passware Kit
Passware Kit
Passware Kit
Standard Plus
Passware Kit
Passware Kit
File Types 50+ 80+ 130+ 250+ 280+
MS Office Documents
Microsoft Word
Microsoft Excel
Microsoft PowerPoint
OpenOffice Documents
Windows Passwords Reset -/ -/ -/
Local Administrator on workstation
Other local accounts - -
Server accounts - -
Microsoft Live ID accounts - -
Domain Administrator - - -
Archives (.zip, .7z, .rar, .exe) -
Other common file types - -/
MS Outlook (PST, email accounts) -
MS Access -
VBA projects (MS Access, Word, PowerPoint, Excel) -
QuickBooks databases - -
FileMaker - -
Full Disk Encryption - - -
TrueCrypt - - -
VeraCrypt - - -
BitLocker - - -
FileVault2 - - -
PGP - - -
Apple DMG - - -
LUKS disk images - - -
Mac keychain files - - -
Windows/Unix/Mac hashes - - -
Mobile forensics - - - -
iTunes mobile backup - - - -
Android backups - - - -
Android physical images - - - -
iOS iCloud backups - - - -
iOS iCloud photostreams - - - -
MS OneDrive data - - - -
Dropbox data - - - -
Process multiple files in batches - - -
Distributed Password Recovery - - - -/
Support for distributed and Amazon cloud password recovery - - -
Passware Kit Agents included - - - 0 5
Automatic updates for the Server and the Agents - - -
160 other file types supported - - -
Live Memory Analysis - - - -/
Password recovery for OS user accounts and websites - - -
Authentication data extraction for iCloud, MS OneDrive, etc - - - -
Firewire memory imaging tool - - - -
Decryption of hard disk images - - -
Portable version - - - -
.NET API - - - - -
Automatic software updates
- - -
Price US $49 US $79 US $195 US $795 US $995
Learn More Learn More Learn More Learn More Learn More
image description

Passware Kit Forensic

Immediate delivery for online orders. You will receive download instructions in just a few seconds after placing an order, 24/7.

Buy Now $995

Passware software can be purchased worldwide through the network of authorised resellers.

View Autorized Resellers

All Passware Kit Business and Passware Kit Forensic orders come with 1 year of free Software Maintenance and Support (SMS) subscription. New features are being added to Passware Kit Forensic on a regular basis: four major releases and multiple minor updates per year. The simplest way for you to stay current is to renew the Subscription. To Renew existing subscription, please login to your account.

Login to your Account

What’s New

v 2015.03 Updates
  • Password recovery engine optimization: 2x faster on GPU
  • Windows password reset on UEFI systems
  • Support for large custom dictionaries
  • Password recovery engine optimization: 2x faster on GPU and something else for second line