The world leader in encrypted electronic evidence discovery and decryption. Passware Kit Forensic is the complete encrypted electronic evidence discovery solution that reports and decrypts all password-protected items on a computer. The software recognizes 300+ file types and works in batch mode recovering passwords.
Password recovery for over 300 file types
MS Office, PDF, Zip and RAR, QuickBooks, FileMaker, Lotus Notes, Bitcoin wallets, Apple iTunes Backup, Mac OS X Keychain, password managers, and many other popular applications.

Full disk decryption
Decrypts or recovers passwords for APFS, Apple DMG, BitLocker, Dell, FileVault2, LUKS, McAfee, PGP, Symantec, TrueCrypt, and VeraCrypt disk images.

Live memory analysis
Analyzes live memory images and hibernation files and extracts encryption keys for hard disks and logins for Windows & Mac accounts. Passware Bootable Memory Imager acquires memory of Windows, Linux, and Mac computers.

Hardware acceleration
Accelerated password recovery with multiple computers, NVIDIA and AMD GPUs, Decryptum, and Rainbow Tables.

Live memory analysis
Analyzes memory images and hibernation files and extracts encryption keys for hard disks and files and passwords for Windows/Mac accounts and websites. Acquires memory of Windows, Linux, and Mac computers.

Mobile forensics
Recovers passwords for Apple iPhone/iPad and Android backups as well as Android images and extracts data from images on Windows phones.

Intelligent detection
Detects all encrypted files and hard disk images and reports the type of encryption and the complexity of the decryption.

Passware Kit Agents
Support for distributed password recovery for Windows, Linux, and Amazon EC2. The Linux version runs a portable Passware Kit Agent from a bootable Linux USB drive.

Decryption of FDE
Decrypts or recovers passwords for APFS, Apple DMG, BitLocker, Dell, FileVault2, LUKS, McAfee, PGP, Symantec, TrueCrypt, and VeraCrypt disk images.

What’s New in Passware Kit 2021 v1:
- Passware Bootable Memory Imager
- Preview of generated passwords
- Instant FileVault/APFS decryption with a keychain
- Password recovery for Tally.ERP 9
- GPU-accelerated recovery of PDF owner password
- PDF password recovery improvements
- Password recovery for MS SQL
- Import of dictionaries preserving the order of passwords
RELEASE NOTES
System Requirements:
- Microsoft Windows Vista, Server 2003/2008/2012/2016/2019, or Windows 7/8/10 (64-bit)
- 1 GHz processor (2.4 GHz recommended)
- 1 GB of RAM (4 GB recommended)
- 1 GB of free hard disk space for installation (more if you use custom dictionaries) For hardware acceleration on some strong file types, it is recommended to have 2 x (RAM + GPUs RAM) of free disk space for paging file