Passware Kit Forensic

The complete encrypted electronic evidence discovery solution.

Passware Kit Forensic

The world leader in encrypted electronic evidence discovery and decryption

Passware Kit Forensic is the complete encrypted electronic evidence discovery solution that reports and decrypts all password-protected items on a computer. The software recognizes 350+ file types and works in batch mode recovering passwords.

Password recovery for over 350 file types

MS Office, PDF, Zip and RAR, QuickBooks, FileMaker, Lotus Notes, Bitcoin wallets, Apple iTunes Backup, Mac OS X Keychain, password managers, and many other popular applications.

View all supported file types

Full disk decryption

Decrypts or recovers passwords for APFS, Apple DMG, BitLocker, Dell, FileVault2, LUKS and LUKS2, McAfee, PGP, Steganos, Symantec, TrueCrypt, and VeraCrypt disk images. Supports batch processing.

Optional Device Decryption Add-on unlocks, decrypts, and recovers passwords for Western Digital My Passport drives and disks for Macs with Apple T2 Security Chips, including ones protected with EFI firmware password. Available for law enforcement and other types of government organizations. Contact sales for additional information.

Live memory analysis

Analyzes live memory images and hibernation files and extracts encryption keys for hard disks and passwords for Windows & Mac accounts. Passware Bootable Memory Imager acquires memory of Windows, Linux, and Mac computers.

The complete encrypted electronic evidence discovery solution

Password recovery for over 350 file types

MS Office, PDF, Zip and RAR, QuickBooks, FileMaker, Lotus Notes, Bitcoin wallets, Apple iTunes Backup, Mac OS X Keychain, password managers, and many other popular applications.

Hardware
acceleration

Accelerated password recovery with multiple computers, NVIDIA and AMD GPUs, and Rainbow Tables.

Live memory
analysis

Analyzes memory images and hibernation files and extracts encryption keys for hard disks and files and passwords for Windows/Mac accounts and websites. Acquires memory of Windows, Linux, and Mac computers.

Batch
mode

Runs password recovery tasks for multiple files and FDE images, one-by-one without user interaction.

Mac
version

In addition to all the key features of a Windows version, Passware Kit Forensic for Mac provides access to APFS disks from Mac computers with Apple T2 chip.

Intelligent
detection

Detects all encrypted files and hard disk images and reports the type of encryption and the complexity of the decryption.

Passware Kit
Agents

Support for distributed password recovery for Windows, Linux, Amazon EC2, and Microsoft Azure. The Linux version runs a portable Passware Kit Agent from a bootable Linux USB drive. Remote control over the network Agents directly from the PKF.

Decryption
of FDE

Decrypts or recovers passwords for APFS, Apple DMG, BitLocker, Dell, FileVault2, LUKS/LUKS2, McAfee, PGP, Steganos, Symantec, and TrueCrypt/VeraCrypt containers and disk images. Optional Device Decryption Add-on recovers passwords for Macs with T2 chip and WD My Passport drives.

Hardware acceleration of password recovery attacks

Accelerated password recovery with multiple computers, NVIDIA and AMD GPUs, and Rainbow Tables.

File TypeEncryptionCPU Speed
i7-9700F
p/sec
NVIDIA Speed
GeForce RTX 4070 Ti
p/sec
AMD Speed
Radeon RX 6900 XT
p/sec
MS Office 2013+AES-2567828,55723,883
RAR 5.xAES-25698114,597117,867
macOS / FileVault2 / APFSAES-2565365,58865,392
Apple iTunes Backup / iOS 10.x+AES-256<1372361
MS Windows / BitLockerBitLocker73,9473,623
MS Windows NTLMv2 Hash1,203,0001,273,000,000927,000,000

Passware Kit AgentNetwork Distributed Password Recovery

Passware Kit Agent is a network distributed password recovery worker for Passware Kit Forensic.

It runs on Windows and Linux 64-bit and has linear performance scalability. Each computer running Passware Kit Agent supports multiple CPUs and GPUs simultaneously. Passware Kit Forensic comes with 5 agents included with ability to purchase more separately as needed. All the Agents can be managed remotely directly from the PKF.

Passware Kit Agent

Passware Kit Editions

Kit Basic
$49
Kit Standard
$79
Kit Standard Plus
$195
Kit Business
$945
Kit Forensic
$1,195
Kit Ultimate
$3,995
File types70+110+190+340+350+350+
MS Office & OpenOffice documentsSupportedSupportedSupportedSupportedSupportedSupported
Other common file typesPartially supportedPartially supportedPartially supportedSupportedSupportedSupported
Windows passwords resetPartially supportedPartially supportedPartially supportedSupportedSupportedSupported
FDE decryptionNot supportedNot supportedNot supportedPartially supportedSupportedSupported
Password managersNot supportedNot supportedPartially supportedSupportedSupportedSupported
Crypto walletsNot supportedNot supportedNot supportedNot supportedSupportedSupported
Mac versionSupportedSupportedSupportedSupportedSupportedSupported
Live memory analysisNot supportedNot supportedNot supportedSupportedSupportedSupported
GPU accelerationSupportedSupportedSupportedSupportedSupportedSupported
Distributed password recoveryNot supportedNot supportedNot supportedPartially supportedSupportedSupported
Mobile device decryption (Passware Kit Mobile)Not supportedNot supportedNot supportedNot supportedfrom $295Supported
Device Decryption: WD, Macs w/T2, EFI (Add-on)Not supportedNot supportedNot supportedNot supportedadd-on: $1,990Supported
Online Certified Examiner TrainingNot supportedNot supportedNot supportedNot supportedoptional: $395Supported
SMS subscription with automatic updatesSoftware Maintenance and SupportNot supportedNot supportedNot supported1 year included, optional subscription1 year included, optional subscription1-year or 3-year termed license, updates included

Passware Kit Forensic is used worldwide by corporations and law enforcement agencies like the FBI, the UK Metro police and Europol.

Watch Passware Intro

Have more questions?

If you have more questions about Passware Kit Forensic and its benefits, please contact our sales representative.