Passware Kit Forensic is the complete encrypted electronic evidence discovery solution that reports and decrypts all password-protected items on a computer. The software recognizes 300+ file types and works in batch mode recovering passwords.

Password recovery for over 300 file types

MS Office, PDF, Zip and RAR, QuickBooks, FileMaker, Lotus Notes, Bitcoin wallets, Apple iTunes Backup, Mac OS X Keychain, password managers, and many other popular applications.

Full disk decryption

Decrypts or recovers passwords for APFS, Apple DMG, BitLocker, Dell, FileVault2, LUKS and LUKS2, McAfee, PGP, Symantec, TrueCrypt, and VeraCrypt disk images. Supports batch processing.

Optional Passware Kit Forensic T2 Add-on recovers passwords for Macs equipped with Apple T2 Security Chip. Available for law enforcement and other types of government organizations.

Live memory analysis

Analyzes live memory images and hibernation files and extracts encryption keys for hard disks and logins for Windows & Mac accounts. Passware Bootable Memory Imager acquires memory of Windows, Linux, and Mac computers.

Passware Kit Agent is a network distributed password recovery worker for Passware Kit Forensic.

It runs on Windows and Linux 64-bit and has linear performance scalability. Each computer running Passware Kit Agent supports multiple CPUs and GPUs simultaneously. Passware Kit Forensic comes with 5 agents included with ability to purchase more separately as needed.