Passware Kit 2026 v2 introduces several important updates designed to help investigators address modern encryption challenges, streamline workflows, and expand support for emerging applications and file formats.

As encryption continues to evolve, investigators need solutions capable of keeping pace. With significant improvements to BitLocker access, password manager recovery, encrypted vault support, and database decryption, Passware Kit 2026 v2 delivers practical capabilities that help forensic examiners spend less time overcoming encryption obstacles and more time analyzing evidence.

1. New TPM-Based BitLocker Decryption Method:

  • A new workflow allows investigators to decrypt TPM-protected BitLocker devices in minutes using a single USB drive, significantly simplifying the acquisition process.

2. Faster BitLocker Acquisition and Access

  • The new approach reduces preparation time and hardware requirements, making it easier to access encrypted systems in the field.

3. Broader BitLocker Compatibility

  • Expanded support allows investigators to work with a wider range of TPM-protected Windows devices than previous methods.

4. Support for Steganos Data Safe 22.5

  • Password recovery capabilities have been extended to support the latest versions of Steganos Data Safe.

5. Recovery from Two-Factor Protected Steganos Vaults

  • Investigators can now recover passwords from Steganos vaults protected by two-factor authentication and advanced security settings.

6. Support for New .SHEADER Steganos Format

  • Passware now supports the latest Steganos vault structures and encryption formats.

7. Expanded Steganos File Encryption Support

  • Additional support has been added for Steganos encrypted file containers and related formats.

8. Enhanced LastPass Recovery

  • Recovery capabilities have been expanded for LastPass data stored within Chromium-based browsers.

9. IndexedDB Support for LastPass Artifacts

  • Passware can now recover and process LastPass information stored within IndexedDB databases, which are increasingly used by modern browser extensions.

10. Multiple LastPass Account Support

  • Examiners can process and recover data from multiple LastPass accounts within the same browser environment.

11. Password Cache Optimization

  • A new password caching feature reduces duplicate testing and improves password recovery efficiency.

12. Instant Decryption of FileMaker 2025 Databases

  • Support for FileMaker 2025 allows investigators to instantly decrypt and access protected databases.

Learn more about Passware Kit Forensics