The complete electronic evidence decryption solution

Passware Kit Forensic is the complete electronic evidence discovery solution that reports all password-protected items on a computer and decrypts them.

Key Product Features

Highest Speed

Reports all password-protected items on a computer and gains access to these items using the fastest decryption and password recovery algorithms.

Over 280 file types

Instant decryption of BitLocker, TrueCrypt, VeraCrypt, FileVault2, and PGP hard disks, MS Office documents, instant recovery of passwords for websites, Windows and Mac users.

Portable version

Runs from a USB drive so you can perform a complete encrypted evidence discovery process without installing Passware Kit on a target PC.

  • Passware Kit Agent for Linux

    Linux version allows running a portable Passware Kit Agent from a bootable Linux USB drive on any system without installation

  • Cloud data acquisition

    Passware Kit acquires backups and data from cloud services: Apple iCloud and iCloud Drive, MS OneDrive, and Dropbox.

  • 64-bit version

    Improved performance while processing thousands of files simultaneously and larger dictionary files

  • Batch processing

    Runs password recovery for groups of files without manual intervention

  • BitLocker, TrueCrypt, VeraCrypt, FileVault2, PGP

    Instantly decrypts hard disk images with live memory analysis or recovers their passwords with accelerated brute-force attacks

  • Integrated with Guidance EnCase v8

    One-click password recovery directly from EnCase

  • Mobile Forensics

    Recovers Passwords for Apple iPhone/iPad and Android backups, as well as Android images. Extracts data from Windows Phones' images. Integrated with Oxygen Forensic Suite

  • Recovers passwords for 280+ file types

    Including MS Office, PDF, Zip & RAR, Quickbooks, FileMaker, Lotus Notes, and many other popular applications

  • Scans computers for encrypted evidence

    Detects all the encrypted files & hard disc images, reports encryption type and decryption complexity

  • Live Memory Analysis

    Extracts encryption keys for FileVault2, TrueCrypt, VeraCrypt, BitLocker, logins for Windows & Mac accounts from memory images & hibernation files.

  • GPU, TACC, Distributed Computing, and Rainbow Tables

    Accelerated password recovery with multiple computers, NVIDIA & AMD GPUs, Tableau Password Recovery and TACC, and Rainbow Tables

View More Features
  • Instantly decrypts MS Word and Excel files up to version 2003

  • Extracts passwords from encrypted Mac keychain files and KeePass databases.

  • Retrieves electronic evidence in a matter of minutes from a Windows Desktop Search Database

  • Resets passwords for Local and Domain Windows Administrators instantly

  • Standalone registry analysis: instantly recovers Windows login passwords, including UPEK, passwords for email, websites, and network connections

  • Recovers passwords from Windows/Unix/Mac hashes

  • Provides 10 different password recovery attacks with an easy-to-use wizard and drag & drop editor

  • Supports custom dictionaries and compiles wordlists from memory images

  • Provides detailed reports with MD5 hash values, exports to HTML or CSV

  • Automatic software updates: 1 year included


  • Microsoft Windows Vista, Server 2003/2008/2012, or Windows 7/8.x/10 (32-bit or 64-bit) installed and configured on your system
  • 1 GHz processor (2.4 GHz recommended)
  • 512 MB of RAM (1 GB recommended)
  • 150 MB of free hard disk space (more if you use custom dictionaries)


Passware software supports PC platforms only. However, it can recover passwords for some files created on Macintosh such as FileMaker. You can run Passware products on a Virtual PC or Parallels Desktop to unprotect your files.

For Windows Key, a Windows Setup CD (32-bit or 64-bit) is required, as well as a burning CD-RW drive in order to record a password reset CD instead of the USB disk.

To acquire a physical memory image of the target computer using Passware FireWire Memory Imager (used to recover BitLocker, TrueCrypt, PGP, MS Office encryption keys, Windows and Mac user passwords, and website logins), a FireWire cable is required. Both the target computer and the computer used for acquisition should have FireWire (IEEE 1394) ports. A USB flash drive for Passware FireWire Memory Imager should be 8 GB or more.

Passware Kit
Passware Kit
Passware Kit
Standard Plus
Passware Kit
Passware Kit
File Types 50+ 80+ 130+ 250+ 280+
MS Office Documents
Microsoft Word
Microsoft Excel
Microsoft PowerPoint
OpenOffice Documents
Windows Passwords Reset -/ -/ -/
Local Administrator on workstation
Other local accounts - -
Server accounts - -
Microsoft Live ID accounts - -
Domain Administrator - - -
Archives (.zip, .7z, .rar, .exe) -
Other common file types - -/
MS Outlook (PST, email accounts) -
MS Access -
VBA projects (MS Access, Word, PowerPoint, Excel) -
QuickBooks databases - -
FileMaker - -
Full Disk Encryption - - -
TrueCrypt - - -
VeraCrypt - - -
BitLocker - - -
FileVault2 - - -
PGP - - -
Apple DMG - - -
LUKS disk images - - -
Mac keychain files - - -
Windows/Unix/Mac hashes - - -
Mobile forensics - - - -
iTunes mobile backup - - - -
Android backups - - - -
Android physical images - - - -
iOS iCloud backups - - - -
iOS iCloud photostreams - - - -
MS OneDrive data - - - -
Dropbox data - - - -
Process multiple files in batches - - -
Distributed Password Recovery - - - -/
Support for distributed and Amazon cloud password recovery - - -
Passware Kit Agents included - - - 0 5
Automatic updates for the Server and the Agents - - -
160 other file types supported - - -
Live Memory Analysis - - - -/
Password recovery for OS user accounts and websites - - -
Authentication data extraction for iCloud, MS OneDrive, etc - - - -
Firewire memory imaging tool - - - -
Decryption of hard disk images - - -
Portable version - - - -
.NET API - - - - -
Automatic software updates
- - -
Price US $49 US $79 US $195 US $795 US $995
Learn More Learn More Learn More Learn More Learn More
image description

Passware Kit Forensic 2017 v.1

Immediate delivery for online orders. You will receive download instructions in just a few seconds after placing an order, 24/7.

Buy Now $995

Passware software can be purchased worldwide through the network of authorised resellers.

View Autorized Resellers

All Passware Kit Business and Passware Kit Forensic orders come with 1 year of free Software Maintenance and Support (SMS) subscription. New features are being added to Passware Kit on a regular basis: four major releases and multiple minor updates per year. The simplest way for you to stay current is to renew the Subscription. To Renew existing subscription, please login to your account.

Login to your Account

What’s New

2017 v.1 Updates
  • Instant FileVault2 decryption using data extracted from iOS backups
  • QuickBooks 2016 and 2017 support
  • Password recovery for 1Password for Mac Vaults
  • Dictionaries for Danish and Swedish languages