Passware Kit Forensic

The complete encrypted electronic evidence discovery solution.

Download Product Sheet
Passware Kit Forensic

Passware Kit Forensic supports 300+ file types

Protected ItemFile typeGPU SupportRecovery Option
1Password for MacSQLite-Instant Recovery/ Brute-force - Slow
1Password for Windows (incl. OPVault, Online)JS, SQLiteYesBrute-force - Slow
Acrobat 3.0PDF- Instant Recovery / Brute-force - Fast
Acrobat 4.0PDF-Instant Recovery / Brute-force - Fast/Medium
Acrobat 5.0 PDF-Instant Recovery / Brute-force - Medium
Acrobat 6.0PDF-Instant Recovery / Brute-force - Medium
Acrobat 7.0PDF-Instant Recovery / Brute-force - Medium
Acrobat 8.0PDF-Instant Recovery / Brute-force - Medium
Acrobat 9.0PDF-Instant Recovery / Brute-force - Fast/Medium
Acrobat 10.0PDF-Instant Recovery / Brute-force - Slow
Acrobat 11.0PDF-Instant Recovery / Brute-force - Slow
Acrobat Revisions 3-4PDFYesInstant Recovery / Brute-force - Medium/Fast
Android 4.3-4.4BINYesBrute-force - Slow
Apple iTunes Backup / iOS 10.xPLISTYesBrute-force - Slow
Apple File System (APFS)DMG, DD, IMG, BIN, E01, EX01, AFF4YesInstant Removal (Memory Analysis) / Brute-force - Slow
Symantec ACT! 2.0BLB-Instant Recovery
Symantec ACT! 3.0BLB-Instant Recovery
Symantec ACT! 4.0BLB-Instant Recovery
Symantec ACT! 2000BLB-Instant Recovery
Symantec Endpoint EncryptionDD, IMG, BIN, E01, EX01, AFF4YesInstant Removal (Memory Analysis) / Brute-force - Slow
ACT! by Sage 2005ADF-Instant Recovery
ACT! by Sage 2006ADF-Instant Recovery
ACT! by Sage 2007ADF-Instant Recovery
ACT! by Sage 2008ADF-Instant Recovery
ACT! by Sage 2009ADF-Instant Recovery
BestCrypt 6.0JBC-Brute-force - Slow
BestCrypt 7.0JBC-Brute-force - Slow
BestCrypt 8.0JBC-Brute-force - Slow
Bitcoin Wallet: Blockchain.info, Blockchain.comJSONYesBrute-force - Slow
Bitcoin Wallet: Bitcoin CoreDATYesBrute-force - Slow
Bitcoin Wallet: ElectrumELECTRUMYesBrute-force - Slow
Dashcoin Wallet: Dash CoreDATYesBrute-force - Slow
Dashlane AESYesBrute-force - Slow
Dell Encryption/Data Protection Recovery fileBINYesBrute-force - Slow
Dogecoin WalletDATYesBrute-force - Slow
DriveCryptDVC, DRC-Brute-force - Slow
FileMaker Pro 3.xFP3-Instant Recovery
FileMaker Pro 4.xFP3-Instant Recovery
FileMaker Pro 5.xFP5-Instant Recovery
FileMaker Pro 6.xFP5-Instant Recovery
FileMaker Pro 7.xFP7-Instant Removal
FileMaker Pro 8.xFP7-Instant Removal
FileMaker Pro 9.xFP7-Instant Removal
FileMaker Pro 10.xFP7-Instant Removal
FileMaker Pro 11.xFP7-Instant Removal
FileMaker Pro 12.xFP7, FMP12-Instant Removal
FileMaker Pro 13.xFMP12-Instant Removal
FileMaker Pro 14.xFMP12-Instant Removal
FileMaker Pro 15.xFMP12-Instant Removal
FileMaker Pro 16.xFMP12-Instant Removal
FileMaker Pro 17.xFMP12-Instant Removal
FileMaker Pro 18.xFMP12-Instant Removal
FileMaker Pro 19.xFMP12-Instant Removal
Google Chrome Website-Instant Recovery
ICQ 2000 - 2003DAT-Instant Recovery
ICQ 99aDAT-Instant Recovery
ICQ LiteFB-Instant Recovery
iWork 2009PAGES, PAGES.ZIP, NUMBERS, NUMBERS.ZIP, KEY, KEY.ZIPYesBrute-force - Slow
iWork 2013PAGES, PAGES.ZIP, NUMBERS, NUMBERS.ZIP, KEY, KEY.ZIPYesBrute-force - Slow
iWork 2020PAGES, PAGES.ZIP, NUMBERS, NUMBERS.ZIP, KEY, KEY.ZIPYesBrute-force - Slow
KeePassKDB, KDBXYesBrute-force - Slow
LastPassSQLiteYesBrute-force - Slow
Litecoin WalletDATYesBrute-force - Slow
Lotus 1-2-3 1.1+WK!, WK1, WK4, WRC, WR1, WR9, 123-Instant Recovery
Lotus Notes 4.xID-Brute-force - Medium
Lotus Notes 6.xID-Brute-force - Medium
Lotus Notes 7.x ID-Brute-force - Medium
Lotus Notes 8.x (RC2, AES encryption)IDYesBrute-force - Medium/Slow
Lotus Organizer 1.0ORG-Instant Recovery
Lotus Organizer 2.0OR2-Instant Recovery
Lotus Organizer 3.0OR3-Instant Recovery
Lotus Organizer 4.0OR4-Instant Recovery
Lotus Organizer 5.0OR5-Instant Recovery
Lotus Organizer 6.0OR6-Instant Recovery
Lotus Word Pro 96 - 99LWP-Instant Recovery
LUKS Disk ImageDD, IMG, BIN, E01, EX01, AFF4YesInstant Removal (Memory Analysis) / Brute-force - Slow
LUKS2 Disk ImageDD, IMG, BIN, E01, EX01, AFF4YesBrute-force - Slow
Mac OS / FileVault2DD, IMG, BIN, E01, EX01, AFF4YesInstant Removal (Memory Analysis) / Brute-force - Slow
Mac OS X KeychainYesBrute-force - Slow
Apple iTunes Backup / iOS 4.x - 9.xPLISTYesBrute-force - Slow
Mac OS X User / HashPLIST- Brute-force - Fast
Mac OS X 10.8 - 10.10 User / HashPLISTYesBrute-force - Slow
McAfee Drive EncryptionDD, IMG, BIN, E01, EX01, AFF4YesInstant Removal / Brute-force - Slow
Microsoft Edge Website-Instant Recovery
Mozilla Firefox Website-Instant Recovery
MS Access 2.0MDB-Instant Recovery
MS Access 95MDB-Instant Recovery
MS Access 97MDB-Instant Recovery
MS Access 2000MDB-Instant Recovery
MS Access 2002MDB-Instant Recovery
MS Access 2003MDB-Instant Recovery
MS Access 2007ACCDBYesBrute-force - Slow
MS Access 2010ACCDBYesBrute-force - Slow
MS Access 2013ACCDBYesBrute-force - Slow
MS Access 2019ACCDBYesBrute-force - Slow
MS Access 2.0 System DatabaseMDA-Instant Recovery
MS Access 97 System DatabaseMDW-Instant Recovery
MS Access 2000 System DatabaseMDW-Instant Recovery
MS Access VBAMDA-Instant Recovery or Reset
MS BackupQIC-Instant Recovery
MS Excel 4.0XLS-Instant Recovery or Reset
MS Excel 5.0XLS-Instant Recovery or Reset
MS Excel 95XLS-Instant Recovery or Reset
MS Excel 97XLS-Instant Recovery or Removal / Brute-force - Fast
MS Excel 2000XLS-Instant Recovery or Removal / Brute-force - Fast
MS Excel 2002XLS-Instant Recovery or Removal / Brute-force - Fast
MS Excel 2003XLS-Instant Recovery or Removal / Brute-force - Fast
MS Excel 2007XLSX, XLSMYesInstant Recovery or Removal (Memory Analysis) / Brute-force - Slow
MS Excel 2010XLSX, XLSMYesInstant Recovery or Removal (Memory Analysis) / Brute-force - Slow
MS Excel 2013XLSX, XLSMYesInstant Recovery or Removal (Memory Analysis) / Brute-force - Slow
MS Excel 2016XLSX, XLSMYesInstant Recovery or Removal (Memory Analysis) / Brute-force - Slow
MS Excel 2019XLSX, XLSMYesInstant Recovery or Removal (Memory Analysis) / Brute-force - Slow
MS Pocket ExcelPXL-Instant Recovery
MS Excel VBAXLA, XLSM-Instant Recovery or Reset
MS Internet Explorer Website-Instant Recovery
MS Internet Explorer Webform-Instant Recovery
MS Internet Explorer Content Advisor-Instant Recovery
MS MailMMF-Instant Recovery
MS Money 99 or earlierMNY-Instant Recovery
MS Money 2000 - 2001MMF-Instant Recovery
MS Money 2002MMF-Brute-force - Medium
MS Money 2003 - 2004MMF-Brute-force - Medium
MS Money 2005 - 2007MMF-Brute-force - Medium
MS OneNote 2003 SectionONE-Brute-force - Medium
MS OneNote 2007 SectionONEYesBrute-force - Slow
MS OneNote 2010 SectionONEYesBrute-force - Slow
MS OneNote 2013 SectionONEYesBrute-force - Slow
MS OneNote 2019 SectionONEYesBrute-force - Slow
MS Outlook 2000/2003/2007/2010/2013/2016/2019 Email Account-Instant Recovery
MS Outlook 2000/2003/2007/2010/2013/2016/2019 Form TemplateOFT-Instant Recovery
MS Outlook 2000/2003/2007/2010/2013/2016/2019 Personal StoragePST-Instant Recovery
MS Outlook Express Account-Instant Recovery
MS Outlook Express Identity-Instant Recovery
MS PowerPoint 2002PPTYesInstant Recovery or Removal / Brute-force - Medium
MS PowerPoint 2003PPTYesInstant Recovery or Removal / Brute-force - Medium
MS PowerPoint 2007PPTX, PPTMYesInstant Recovery or Removal / Brute-force - Slow
MS PowerPoint 2010PPTX, PPTMYesInstant Recovery or Removal / Brute-force - Slow
MS PowerPoint 2013PPTX, PPTMYesInstant Recovery or Removal / Brute-force - Slow
MS PowerPoint 2019PPTX, PPTMYesInstant Recovery or Removal / Brute-force - Slow
MS PowerPoint VBAPPTYesInstant Recovery or Reset
MS Project 95MPP-Instant Recovery
MS Project 98MPP-Instant Recovery
MS Project 2000MPP-Instant Recovery
MS Project 2002MPP-Instant Recovery
MS Project 2003MPP-Instant Recovery
MS SQL 2000MDF-Instant Reset / Brute-force - Slow
MS SQL 2005MDF-Instant Reset / Brute-force - Slow
MS SQL 2008MDF-Instant Reset / Brute-force - Slow
MS SQL 2012MDF-Instant Reset / Brute-force - Slow
MS SQL 2014MDF-Instant Reset / Brute-force - Slow
MS SQL 2016MDF-Instant Reset / Brute-force - Slow
MS SQL 2017MDF-Instant Reset / Brute-force - Slow
MS SQL 2019MDF-Instant Reset / Brute-force - Slow
MS Windows NT Administrator / Secure Boot Option-Instant Removal
MS Windows 2000 Administrator / Secure Boot Option-Instant Removal
MS Windows XP Administrator / Secure Boot Option-Instant Removal
MS Windows Vista Administrator / Secure Boot Option-Instant Removal
MS Windows 7 Administrator / Secure Boot Option-Instant Removal
MS Windows 8 - 8.1 Administrator / Secure Boot Option-Instant Removal
MS Windows 10 Administrator / Secure Boot Option-Instant Removal
MS Windows NT User / Secure Boot Option-Instant Recovery (Memory Analysis) or Removal
MS Windows 2000 User / Secure Boot Option -Instant Recovery (Memory Analysis) or Removal
MS Windows 2000 Server User / Secure Boot Option-Instant Recovery (Memory Analysis) or Removal
MS Windows 2000 Server Active Directory Administrator-Instant Recovery (Memory Analysis) or Removal
MS Windows XP User / Secure Boot Option-Instant Recovery (Memory Analysis) or Removal
MS Windows 2002 Server User / Secure Boot Option-Instant Recovery (Memory Analysis) or Removal
MS Windows 2003 Server User / Secure Boot Option-Instant Recovery (Memory Analysis) or Removal
MS Windows 2003 Server Active Directory Administrator-Instant Recovery (Memory Analysis) or Removal
MS Windows 2003 SBS User / Secure Boot Option-Instant Recovery (Memory Analysis) or Removal
MS Windows 2003 SBS Active Directory Administrator-Instant Recovery (Memory Analysis) or Removal
MS Windows Vista User / Secure Boot Option-Instant Recovery (Memory Analysis) or Removal
MS Windows Vista / BitLockerDD, IMG, BIN, VHD, E01, EX01, AFF4YesInstant Removal (Memory Analysis) / Brute-force – Slow
MS Windows 2008 Server User / Secure Boot Option-Instant Recovery (Memory Analysis) or Removal
MS Windows 2008 Server Active Directory Administrator-Instant Recovery (Memory Analysis) or Removal
MS Windows 2008 Server / BitLockerDD, IMG, BIN, VHD, E01, EX01, AFF4YesInstant Removal (Memory Analysis) / Brute-force – Slow
MS Windows 7 User / Secure Boot Option-Instant Recovery (Memory Analysis) or Removal
MS Windows 7 / BitLockerDD, IMG, BIN, VHD, E01, EX01, AFF4YesInstant Removal (Memory Analysis) / Brute-force – Slow
MS Windows 2012 Server User / Secure Boot Option-Instant Recovery (Memory Analysis) or Removal
MS Windows 2012 Server Active Directory Administrator-Instant Recovery (Memory Analysis) or Removal
MS Windows 2012 Server / BitLockerDD, IMG, BIN, VHD, E01, EX01, AFF4YesInstant Removal (Memory Analysis) / Brute-force – Slow
MS Windows 2013 Server User / Secure Boot OptionYesInstant Removal (Memory Analysis) / Brute-force – Slow
MS Windows 8 - 8.1 User / Secure Boot Option-Instant Recovery (Memory Analysis) or Removal
MS Windows 8 - 8.1 User / BitLockerDD, IMG, BIN, VHD, E01, EX01, AFF4-Instant Recovery (Memory Analysis) or Removal
MS Windows 10 User / Secure Boot Option-Instant Recovery (Memory Analysis) or Removal
MS Windows 10 / BitLockerDD, IMG, BIN, VHD, E01, EX01, AFF4YesInstant Removal (Memory Analysis) / Brute-force – Slow
MS Windows 2016 Server / BitLockerDD, IMG, BIN, VHD, E01, EX01, AFF4YesInstant Removal (Memory Analysis) / Brute-force – Slow
MS Windows 2016 Server Active Directory Administrator-Instant Removal
MS Windows 2016 Server User-Instant Removal
MS Windows Live ID Account- Instant Reset
MS Windows NTLM/LANMAN HashYesInstant Recovery / Brute-force – Fast
MS Windows User / UPEK-Instant Recovery
MS Windows 2019 Server Active Directory Administrator-Instant Removal
MS Windows 2019 Server User-Instant Removal
MS Word 1.0DOC, DOT-Instant Recovery
MS Word 2.0DOC, DOT-Instant Recovery
MS Word 3.0DOC, DOT-Instant Recovery
MS Word 4.0DOC, DOT-Instant Recovery
MS Word 5.0DOC, DOT-Instant Recovery
MS Word 6.0DOC, DOT-Instant Recovery
MS Word 95DOC, DOT-Instant Recovery
MS Word 97DOC, DOT-Instant Recovery or Removal / Brute-force - Fast
MS Word 2000DOC, DOT-Instant Recovery or Removal / Brute-force - Fast
MS Word 2002DOC, DOT-Instant Recovery or Removal / Brute-force - Fast
MS Word 2003DOC, DOT-Instant Recovery or Removal / Brute-force - Fast
MS Word 2007DOCX, DOTX, DOCMYesInstant Recovery or Removal (Memory Analysis) / Brute-force - Slow
MS Word 2010DOCX, DOTX, DOCMYesInstant Recovery or Removal (Memory Analysis) / Brute-force - Slow
MS Word 2013DOCX, DOTX, DOCMYesInstant Recovery or Removal (Memory Analysis) / Brute-force - Slow
MS Word 2016DOCX, DOTX, DOCMYesInstant Recovery or Removal (Memory Analysis) / Brute-force - Slow
MS Word 2019DOCX, DOTX, DOCMYesInstant Recovery or Removal (Memory Analysis) / Brute-force - Slow
MS Word VBADOC, DOT, DOCM, DOTM-Instant Recovery or Reset
MYOB earlier than 2004PLS, PRM-Instant Recovery
MYOB 2004DAT-Instant Reset
MYOB 2005MYO-Instant Reset
MYOB 2006MYO-Instant Reset
MYOB 2007MYO-Instant Reset
MYOB 2008MYO-Instant Reset
MYOB 2009MYO-Instant Reset
MYOB 2010MYO-Instant Reset
Network Connection-Instant Recovery
Norton BackupSET-Instant Recovery
OpenDocumentODT, ODS, ODP, ODBYesBrute-force - Slow
Opera Website-Instant Recovery
Paradox DatabaseDB-Instant Recovery
Peachtree 2002 - 2006DAT-Instant Recovery
Peachtree 2007DAT-Instant Recovery
Peachtree 2008DAT-Instant Recovery
Peachtree 2010DAT-Instant Recovery
Peachtree 2013DAT-Instant Reset
PGP Desktop 9.x - 10.x ZipPGPYesBrute-force - Slow
PGP Desktop 9.x - 10.x Private KeyringSKRYesBrute-force - Slow/Medium
PGP Desktop 9.x - 10.x Virtual DiskPGD-Brute-force - Slow
PGP Desktop 9.x - 10.x Self-Decrypting ArchiveEXEYesBrute-force - Slow
PGP WDEDD, IMG, BIN, E01, EX01, AFF4YesInstant Removal (Memory Analysis) / Brute-force - Slow
GnuPG Private KeyringGPGYesBrute-force - Slow
Quattro Pro 5 - 6QPW, WB1, WB2, WB3-Instant Recovery
Quattro Pro 7 - 8QPW, WB1, WB2, WB3-Instant Recovery
Quattro Pro 9 - 12, X3, X4QPW-Instant Recovery
QuickBooks 3.x - 4.xQBW, QBA-Instant Recovery
QuickBooks 5.xQBW, QBA-Instant Recovery
QuickBooks 6.x - 8.xQBW, QBA-Instant Recovery
QuickBooks 99QBW, QBA-Instant Recovery
QuickBooks 2000QBW, QBA-Instant Recovery
QuickBooks 2001QBW, QBA-Instant Recovery
QuickBooks 2002QBW, QBA-Instant Recovery
QuickBooks 2003QBW, QBA-Instant Removal
QuickBooks 2004QBW, QBA-Instant Removal
QuickBooks 2005QBW, QBA-Instant Removal
QuickBooks 2006QBW, QBA-Instant Removal / Brute-force - Fast
QuickBooks 2007QBW, QBA-Instant Removal / Brute-force - Fast
QuickBooks 2008QBW, QBA-Instant Removal / Brute-force - Fast
QuickBooks 2009QBW, QBA-Instant Removal / Brute-force - Fast
QuickBooks 2010QBW, QBA-Instant Removal / Brute-force - Fast
QuickBooks 2011QBW, QBA-Instant Removal / Brute-force - Fast
QuickBooks 2012QBW, QBA-Instant Removal / Brute-force - Fast
QuickBooks 2013QBW, QBA-Instant Removal / Brute-force - Fast
QuickBooks 2014QBW, QBA-Instant Removal / Brute-force - Fast
QuickBooks 2015QBW, QBA-Instant Removal / Brute-force - Fast
QuickBooks 2016QBW, QBA-Instant Removal / Brute-force - Fast
QuickBooks 2017QBW, QBA-Instant Removal / Brute-force - Fast
QuickBooks 2018QBW, QBAYesInstant Removal / Brute-force - Slow
QuickBooks 2019QBW, QBAYesInstant Removal / Brute-force - Slow
QuickBooks 2020QBW, QBAYesInstant Removal / Brute-force - Slow
QuickBooks 2021QBW, QBAYesInstant Removal / Brute-force - Slow
QuickBooks for Mac 2012QB2012-Instant Removal
QuickBooks for Mac 2013QB2013-Instant Removal
QuickBooks for Mac 2014QB2014-Instant Removal
QuickBooks for Mac 2015QB2015-Instant Removal
QuickBooks for Mac 2016QB2016-Instant Removal
QuickBooks BackupQBBYesInstant Removal / Brute-force - Slow
Quicken 95/6.0QDF-Instant Recovery
Quicken 98QDF-Instant Recovery
Quicken 99QDF-Instant Recovery
Quicken 2000QDF-Instant Recovery
Quicken 2001QDF-Instant Recovery
Quicken 2002QDF-Instant Recovery
Quicken 2003QDF-Instant Removal
Quicken 2004QDF-Instant Removal
Quicken 2005QDF-Instant Removal
Quicken 2006QDF-Instant Removal
Quicken 2007QDF-Instant Removal
Quicken 2008QDF-Brute-force - Slow
Quicken 2009QDF-Brute-force - Slow
Quicken 2010QDF-Brute-force - Slow
Quicken 2011QDF-Brute-force - Slow
Quicken 2012QDF-Brute-force - Slow
Quicken 2013QDF-Brute-force - Slow
Quicken 2014QDF-Brute-force - Slow
RAR 2.0 ArchiveRAR-Brute-force - Slow
RAR 2.9 - 4.x (AES Encryption) ArchiveRARYesBrute-force - Slow
RAR 5.x ArchiveRARYesBrute-force - Slow
Remote Desktop ConnectionRDP-Instant Recovery
Safari Website-Instant Recovery
Schedule+ 1.0CAL-Instant Recovery
Schedule+ 7.xSCD-Instant Recovery
Tally.ERP 9COMPANY.900-Brute-force - Fast
TrueCrypt Non-System Partition/Volume 5.0 or laterDD, IMG, BIN, TC, E01, EX01, AFF4YesInstant Removal (Memory Analysis) / Brute-force - Slow
TrueCrypt System Partition/Volume 5.0 or laterDD, IMG, BIN, TC, E01, EX01, AFF4YesInstant Removal (Memory Analysis) / Brute-force - Slow
TrueCrypt Whole Disk 5.0 or laterDD, IMG, BIN, TC, E01, EX01, AFF4YesInstant Removal (Memory Analysis) / Brute-force - Slow
TrueCrypt Hidden Partition 6.0 or laterDD, IMG, BIN, TC, E01, EX01, AFF4YesInstant Removal (Memory Analysis) / Brute-force - Slow
TrueCrypt Hidden OS 6.0 or laterDD, IMG, BIN, TC, E01, EX01, AFF4YesBrute-force - Slow
Unix OS User Hash-Brute-force - Fast/Slow
VeraCryptDD, IMG, BIN, HC, E01, EX01, AFF4YesInstant Removal (Memory Analysis) / Brute-force - Slow
VeraCrypt for LinuxDD, IMG, BIN, HC, E01, EX01, AFF4YesInstant Removal (Memory Analysis) / Brute-force - Slow
VeraCrypt System Partition / GPTDD, IMG, BIN, HC, E01, EX01, AFF4YesInstant Removal (Memory Analysis) / Brute-force - Slow
WordPerfect 5.xWPD-Instant Recovery
WordPerfect 6.0WPD-Instant Recovery
WordPerfect 6.1WPD-Instant Recovery
WordPerfect 7 - 12, X3, X4WPD-Instant Recovery
WPA/WPA2CAPYesBrute-force - Medium
WinZip 8.0 or earlierZIP-Instant Removal / Brute-force - Fast
Yandex Browser Website-Instant Recovery
Zip ArchiveZIPYesBrute-force - Fast/Slow
7-Zip Archive7ZYesBrute-force - Slow