Passware Blog

Passware Kit Mobile 2026 v2 Now Available

Passware — Wed, 25 Feb 2026 07:00:00 +0000

What’s new:

Samsung decryption has become one of the most in-demand capabilities in modern computer forensics. To meet this need, Passware introduces a proprietary method that enables investigators to unlock and decrypt data from Samsung Galaxy S20, S21, and other recent models powered by the Exynos 990 (S5E9830) and 2100 (S5E9840) chipsets.

Additional features include support for Unisoc-based devices with Full-Disk encryption, hardware acceleration for passcode recovery via Intel Arc GPUs, enhancement of the rule-based attack and other usability improvements.

Passware Kit Mobile and Ultimate customers only.
Contact Support to get an update for other Passware products.

Decryption of Exynos-based Samsung S20/S21 series devices

Passware introduces a proprietary method that enables investigators to unlock and decrypt data from Samsung Galaxy S20, S21, and other recent models powered by the Exynos 990 (S5E9830) and 2100 (S5E9840) chipsets. The method supports devices with a Security Patch Level (SPL) dated April 2025 and earlier and is compatible with at least nine widely used Samsung models.

More information about this method and supported devices is available upon request.

Support for Unisoc-based devices with FDE

In addition to File-Based encryption, Passware Kit Mobile now fully supports Unisoc devices with Full-Disk encryption.

Benchmarking on the Meizu C9 Pro demonstrates recovery speeds of more than 13,000 passwords per second using an NVIDIA GeForce RTX 4070 Ti.

Acceleration of password recovery with Intel Arc GPU

Passware Kit Mobile 2026v2 adds support for Intel Arc GPUs, including both discrete and integrated units. Password recovery can now be accelerated on systems utilizing GPUs from all three major manufacturers: Intel, NVIDIA, and AMD.

The acceleration is supported by both the built-in Passware Kit Agent and the distributed Agents, which are supported by Passware Kit Mobile Annual and Ultimate editions.

Usability improvements

During password recovery setup, users can now export the list of passwords that would be generated by a specified attack or a group of attacks. The list of passwords can be saved as a TXT file and used as a dictionary or exported for other tools.

For its rule-based password recovery attack, Passware Kit Mobile now validates rule files created for third-party tools such as hashcat and John the Ripper. It identifies and highlights any errors and provides an option to remove invalid rules and save a cleaned-up rule file.

Support for iOS 15.8.5 on A8/A9 devices

Passware Kit Mobile extends iOS compatibility by adding support for iOS version 15.8.5. The update covers iPhone 6S and other Apple devices with A8/A8X/A9/A9X processors.

Support for new Android devices

The list of supported devices has been expanded with three new Xiaomi models based on Qualcomm MSM8937 (Snapdragon 430) chipset: Redmi 3s, 3x, and 4.

See the full list of supported models.

See the full list of features and bugfixes on our website.

Product suggestion: Passware Kit Ultimate

For computer forensics, you might want to try our all-in-one decryption solution to access data from computers, disks, files, and mobile devices – Passware Kit Ultimate.

Passware Kit Ultimate includes:

Passware Kit Forensic and Device Decryption Add-on
Passware Kit Mobile with 300 extractions
10 Passware Kit Agents for PKF and PKM
Passware Certified Examiner Training

Air-Gapped Edition is available for workplaces without Internet access.

Learn More

Leave Feedback

Share your feedback about this release or suggest new features for Passware products.

Request a Feature

Digital Investigations Conference Zürich 2026

admin35 — Fri, 13 Feb 2026 07:00:00 +0000

Since 2016, the Conference is held annually at the beautiful Hotel Belvoir in Rüschlikon with its unique view over the lake of Zurich. Following topic tracks are covered: Digital Forensics, Mobile Forensics, eDiscovery, and OSINT. A total of 4 keynotes and 35 workshop sessions are planned around those topics. An estimated 150 international participants from key industries are expected to attend the 2026 edition, the biggest networking platform for digital investigations in Switzerland.

Join us there for an exclusive session on device decryption. Explore innovative techniques revealed for the very first time at this event!

Learn more about the event.

Passware Kit 2026 v1 Now Available

Passware — Tue, 16 Dec 2025 07:00:00 +0000

What’s new in Passware Kit 2026 v1:

What’s New Video

For your convenience, we have included a video of all the latest features of Passware Kit 2026 v1. Take a look!

Decrypting BitLocker-protected devices remains one of the most frequent challenges in the computer forensics community. Passware continues to research new methods to unlock such devices and reduce decryption times. In its final release of the year, Passware introduces a new solution for AMD Zen-based desktops protected with BitLocker and firmware TPM (fTPM), even when a PIN is set.

Other highlights of the 2026 v1 release include support for Intel Arc GPU, removal of invalid rules from hashcat rule files, support for ZIP hashes, and a new built-in dictionary of more than 550,000 frequently used passwords.

Passware Kit Ultimate, Forensic, and Business customers only.
Contact Support to get an update for other Passware products.

BitLocker decryption for computers with AMD Zen CPU

Passware introduces a decryption solution for AMD Zen/Zen+ desktop computers protected with BitLocker and firmware TPM (fTPM), even when a PIN is set. The tool recovers a BitLocker VMK, allowing forensic professionals to decrypt the disk within minutes.

If a BitLocker PIN is present (i.e., protector “TPM and PIN” is used), Passware Kit first attempts to recover the PIN before proceeding. The PIN recovery can be accelerated with GPU and distributed computing.

The solution supports the following AMD processor families: Summit Ridge, Whitehaven, Colfax, and Pinnacle Ridge. It works regardless of the Windows version, the user login state, or the PCR validation profile. In some cases, the solution even allows to get access to computers stuck in the BitLocker recovery screen.

Exporting password list for any attack

During the password recovery setup, it is now possible to export the list of passwords that would be generated by the specified attack or a group of attacks. The list of passwords can be saved as a TXT file and used as a dictionary or exported for other tools.

Cleanup option for hashcat rules

For its rule-based password recovery attack, Passware Kit now validates rule files created for third-party tools such as hashcat and John the Ripper. It identifies and highlights any errors and provides an option to remove invalid rules, saving a cleaned-up rule file.

Password recovery for ZIP hashes

Passware Kit 2026 v1 now supports recovering ZIP passwords from hash files extracted with the Zip2John tool (John the Ripper). The recovery speed for Zip 2.1 archives exceeds 21 million passwords per second on an NVIDIA GeForce RTX 5090.

Acceleration of password recovery with Intel Arc GPU

The new Passware Kit adds support for Intel Arc GPUs, including both discrete and integrated units. Password recovery can now be accelerated on systems using GPUs from all three major manufacturers: Intel, NVIDIA, and AMD.

For full performance details, see the hardware benchmark on our website.

All editions

Improved support for PGP Private Keyring files

Passware improves PGP decryption by adding compatibility with the ECDH and EdDSALegacy encryption types.

Extended built-in dictionary set

The default set of built-in dictionaries has been expanded with Passware’s proprietary list of more than 550,000 commonly used passwords. In testing with a leaked password list of over 6 million entries, this added dictionary proved to be 2.6 times more effective than the standard English built-in dictionary.

All editions

See changelog for the complete list of features

Product suggestion: Passware Kit Ultimate

For computer forensics, you might want to try our all-in-one decryption solution to access data from computers, disks, files, and mobile devices – Passware Kit Ultimate.

Passware Kit Ultimate includes:

Passware Kit Forensic and Device Decryption Add-on
Passware Kit Mobile with 300 extractions
10 Passware Kit Agents for PKF and PKM
Passware Certified Examiner Training

Air-Gapped Edition is available for workplaces without Internet access.

Learn More

Leave Feedback

Share your feedback about this release or suggest new features for Passware products.

Request a Feature

Passware Kit Mobile 2026 v1 Now Available

Passware — Thu, 04 Dec 2025 07:00:00 +0000

What’s new:

Passware continues to expand its capabilities for unlocking the most popular mobile phones, now adding support for the Samsung Galaxy S10 and other devices powered by the Exynos Octa 9820/9825 chipset. The passcode recovery feature supports GPU acceleration and is compatible with devices running the latest firmware.

Additional improvements include broader support for Qualcomm-based devices and enhanced usability of the License Manager.

Passware Kit Mobile and Ultimate customers only.
Contact Support to get an update for other Passware products.

Password recovery for Samsung Galaxy S10 and other Exynos 9820/9825 devices

Passware Kit Mobile now supports Samsung devices powered by the Exynos Octa 9820/9825 chipset, including popular models such as the Galaxy S10, Note 10, M62, and others. Support for other Exynos-based Samsung devices is coming soon.

The passcode recovery feature leverages GPU acceleration and is fully compatible with the latest device firmware. Using an NVIDIA GeForce RTX 4070 Ti, recovery speeds can reach up to 15,500 passwords per second.

Password recovery for devices based on Qualcomm Snapdragon 430/435

The latest release adds support for more than 18 devices based on Qualcomm Snapdragon 430 (MSM8937) and 435 (MSM8940) chipsets. The list of models includes Xiaomi Redmi 4, Redmi Y1, Huawei Honor 6C, Enjoy 7, Enjoy 8, Y7, and more.

Benchmarking on the Huawei Y7 Prime 2018 demonstrates recovery speeds of more than 1,050,000 passwords per second using an NVIDIA GeForce RTX 4070 Ti.

Extended support for Qualcomm devices

When decrypting Qualcomm-based devices, Passware Kit Mobile is now compatible with both bootloader states: locked and unlocked. This compatibility makes the PKM decryption solution more versatile.

Redesigned License Manager

The License Manager in the new Passware Kit Mobile has been redesigned to clearly display license type and expiration date and simplify software activation, renewing, and downloading additional products from your Passware Account.

Support for new Android devices

The list of supported devices has been expanded with five new models reported by our users: Samsung Galaxy A05, Cubot Nova, OnePlus 8 Pro, and others. We always appreciate your feedback!

See the full list of supported models.

See the full list of features and bugfixes on our website.

Product suggestion: Passware Kit Ultimate

For computer forensics, you might want to try our all-in-one decryption solution to access data from computers, disks, files, and mobile devices – Passware Kit Ultimate.

Passware Kit Ultimate includes:

Passware Kit Forensic and Device Decryption Add-on
Passware Kit Mobile with 300 extractions
10 Passware Kit Agents for PKF and PKM
Passware Certified Examiner Training

Air-Gapped Edition is available for workplaces without Internet access.

Now is the perfect time to purchase or upgrade to Passware Kit Ultimate and take advantage of our Cyber Monday offer – 20% off until the 8th of December with coupon BF2025!

Learn More

Leave Feedback

Share your feedback about this release or suggest new features for Passware products.

Request a Feature

Passware Kit 2025 v4 Now Available

Passware — Wed, 15 Oct 2025 06:00:00 +0000

What’s new in Passware Kit 2025 v4:

What’s New Video

For your convenience, we have included a video of all the latest features of Passware Kit 2025 v4. Take a look!

As the number of hardware manufacturers increases, forensic professionals must ensure their decryption solution remains current and supports an expanding range of disk models. Passware Kit 2025 v4 introduces password recovery and unlocking for Transcend Portable 2022–2025 SSDs. It now also supports Enpass, expanding its decryption capabilities to even more password managers.

To optimize password recovery for multi-file jobs, Passware Kit now offers an option that automatically checks the previously recovered passwords for other files in the session, thereby increasing the overall decryption success rate.

Passware Kit 2025 v4 is fully compatible with the latest macOS 26 Tahoe, offering T2 unlock, APFS decryption, as well as password recovery for Apple Notes, iWork files, Keychain, and user hashes of this OS.

The user interface has also been enhanced to facilitate license management, highlight Passware Kit’s new features, and make it easier to submit feedback.

Passware Kit Ultimate, Forensic, and Business customers only.
Contact Support to get an update for other Passware products.

Password recovery and unlock of Transcend Portable SSD

Passware Kit 2025 v4 introduces password recovery and unlocking for Transcend Portable SSDs (2022–2025 models) with SM2320 controller. For disks that are not currently password-protected, Passware Kit can recover previously set passwords.

GPU-accelerated password recovery for Enpass manager

Passware expands the range of password managers supported for decryption with the release of a GPU-accelerated password recovery feature for Enpass v6, for both primary and secondary vaults. This feature works for databases created on Windows, Linux, and macOS.

The recovery speed reaches 4,700 passwords per second on an NVIDIA RTX 4070 Ti.

Checking previously found passwords for other items in Batch mode

To optimize password recovery for multi-file jobs, Passware Kit introduces an option that automatically checks the previously recovered passwords for other files in the session, even skipped ones, thereby increasing the overall decryption success rate. This feature is enabled by default for all batch processes and can be disabled in Tools | Options.

macOS 26 Tahoe support

All editions

Redesigned License Manager

The License Manager in the new Passware Kit has been redesigned to clearly display license type and expiration date and simplify software activation, renewing, and downloading additional products from your Passware Account.

All editions

Improved performance for Mozilla databases

Passware Kit accelerates password recovery for Mozilla v.58+ databases by more than 60 times, achieving speeds of up to 1,800,000 passwords per second on an NVIDIA GeForce RTX 4070 Ti.

All editions

Usability enhancements

The user interface has been enhanced to highlight Passware Kit’s new features and simplify feedback submission. A link to the latest feature descriptions is now conveniently displayed on the start screen and can be hidden if no longer needed.

All editions

See changelog for the complete list of features

Passware Kit Ultimate – Air-Gapped Edition

Passware Kit Ultimate – Air‐Gapped Edition allows investigators to access data from locked mobile devices, computers, encrypted disks, and files – all with a single license, even in environments without Internet access!*

Passware Kit Ultimate includes Passware Kit Forensic, Passware Kit Mobile, Device Decryption Add-on, 10 Agents for distributed computing, and Passware Certified Examiner Online Training.

Key capabilities include:

Password recovery for over 390 file types
Recovery of passcodes for over 1000 mobile devices
Full disk decryption
Decryption of BitLocker-encrypted devices with TPM and PXE
Decryption of Macs with Apple T2 Security Chip
Password recovery for Transcend, Seagate, LaCie, and WD disks
Decryption of Lenovo ThinkPad with BitLocker TPM
Live memory analysis
Hardware acceleration on GPU
Distributed password recovery with 10 Agents for Windows, Linux, Amazon Cloud, and Microsoft Azure

Learn More

* Additional information about the Air-Gapped Edition is available upon request.

Leave Feedback

Share your feedback about this release or suggest new features for Passware products.

Request a Feature

Passware Kit Mobile 2025 v4 Now Available

Passware — Wed, 08 Oct 2025 06:00:00 +0000

What’s new:

Passware Kit Mobile 2025 v4 is here, now supporting over 1,000 device models!

This release introduces GPU-accelerated password recovery for Unisoc-based devices powered by SC9832E, SC7731E, and T310 chipsets – covering popular models from Acer, Alcatel, ZTE, and more. The update also extends the support of MediaTek-based devices, adding compatibility for 20+ new Android models with Dimensity 900, 920, and 1080 chipsets.

Samsung decryption has been updated with newly added support for the Keymaster TEEGRIS 5 encryption scheme.

And finally, we’ve made password recovery and logging more convenient with a new rule-based attack and save results option.

Passware Kit Mobile and Ultimate customers only.
Contact Support to get an update for other Passware products.

Password recovery for Unisoc SC9832E, SC7731E, and T310 devices

This release introduces GPU-accelerated password recovery for over 70 Unisoc-based devices powered by SC9832E, SC7731E, and T310 chipsets. This covers popular models from Acer, Alcatel, ZTE, and over vendors.

Benchmarking on the ZTE Blade A31 and DEXP A555 devices demonstrates recovery speeds of up to 19,000 passwords per second using an AMD Radeon RX 6900 XT.

Password recovery for MediaTek Dimensity 900/920/1080 devices

PKM extends support of MediaTek-based devices, adding compatibility for 20+ new Android models with Dimensity 900/920/1080 (MT6877) chipsets. For example, the recovery speed for the Samsung Galaxy A34 can reach 19,000 passwords per second using an AMD Radeon RX 6900 XT.

Support for additional Keymaster scheme for Samsung devices

In addition to the previously supported Keymaster encryption schemes, PKM 2025 v4 now supports Keymaster TEEGRIS 5, enabling seamless decryption of select Samsung MediaTek-based devices.

Support for Unisoc devices encrypted with Adiantum

PKM 2025 v4 now works with popular budget Unisoc-based devices encrypted with Adiantum scheme, such as ZTE Blade L9, BQ 5533G, Alcatel A5003D, and more.

Password recovery attacks and usability improvements

The latest version of PKM features multiple usability improvements to the password recovery and logging processes. It now includes a new rule-based attack compatible with hashcat and a “Save passwords” option on the results screen.

See the full list of supported models.

See the full list of features and bugfixes on our website.

Upgrade to Passware Kit Ultimate

Upgrade to the all-in-one forensic decryption solution to access data from computers, disks, files, and mobile devices – all with a single Passware Kit Ultimate license!

Passware Kit Ultimate includes:

Passware Kit Forensic and Device Decryption Add-on
Passware Kit Mobile with 300 extractions
10 Passware Kit Agents for PKF and PKM
Passware Certified Examiner Training

Current Passware Kit Mobile (Annual License) users can upgrade to Passware Kit Ultimate or Passware Kit Ultimate – Air-Gapped Edition at a special price.

Get Your Upgrade Offer

Leave Feedback

Share your feedback about this release or suggest new features for Passware products.

Request a Feature

All About PDF Decryption

admin35 — Mon, 06 Oct 2025 06:00:00 +0000

The Portable Document Format (PDF) was developed by Adobe in 1992 and has since become an open standard maintained by the International Organization for Standardization (ISO). While Adobe Acrobat remains one of the most widely used tools for creating and managing PDFs, numerous other applications are available, each offering unique features and enhanced security options.

With PDFs being so widely used across industries and everyday tasks, the demand for password recovery and document unlocking solutions remains significant.

Understanding PDF encryption

PDF files feature two security options that can be used separately or in combination:

PDF User Password
(also called Document Open Password): This password prevents others from opening or viewing a PDF document. Once the User Password is set, it must be entered to open the file. If the entered password is incorrect, the document will not open.
PDF Owner Password
(also called Permissions or Primary Password): This password restricts actions such as printing, copying content, editing, extracting pages, or commenting. Once the Owner Password is set, it is required to make changes to the PDF document or its permissions. The Owner Password can also be used to open the document.

Over the years, as PDF security improved, encryption types evolved from a weak RC4 40 and 128-bit keys to AES-128 and AES-256. Security measures were also revised several times through updates to the security handler. The higher the revision number, the stronger the file encryption and, consequently, the slower the password recovery speed.

The changes in PDF security are summarized in the following table:

Acrobat version	PDF version	Security handler revision	Encryption type	Password recovery speed	GPU acceleration possible
Acrobat 3.0	PDF 1.2	Revision 2	RC4 40-bit	Brute-force Fast	NO
Acrobat 4.0	PDF 1.3	Revision 3	RC4 128-bit	Brute-force Medium	YES
Acrobat 5.0	PDF 1.4	Revision 4	RC4 128-bit	Brute-force Medium	YES
Acrobat 6.0	PDF 1.5	Revision 4	RC4 128-bit	Brute-force Medium	YES
Acrobat 7.0	PDF 1.6	Revision 5	AES 128-bit	Brute-force Medium	NO
Acrobat 8.0	PDF 1.7	Revision 6	AES 128-bit	Brute-force Slow	NO
Acrobat 9.0	PDF 1.7	Revision 6	AES 256-bit	Brute-force Slow	NO
Acrobat X	PDF 1.7	Revision 6	AES 256-bit	Brute-force Slow	NO
Acrobat XI	PDF 1.7	Revision 6	AES 256-bit	Brute-force Slow	NO

NOTE: Slight variations are possible. For example, Acrobat 5.0 (PDF 1.4) may use security handler revision 3 instead of 4.

Passware Tip: The “Hardware acceleration possible” flag is displayed by Passware Kit if GPU can be used for password recovery:

Using Passware Kit for PDF decryption

PDF password recovery is supported for files created with Acrobat versions 3-11 by PDF Key, Passware Kit Standard and higher editions.

Passware Tip: PDF files created using third-party tools may not be supported. Use the free Passware Kit Demo to check compatibility.

Passware Kit instantly removes permission restrictions if no User Password is set, or once the User Password is recovered. It then creates an unprotected copy of the PDF file without any restrictions, leaving the original file unchanged.

Password recovery for Owner Password is supported in Passware Kit Business, Forensic, and Ultimate. This can be enabled in: Tools | Options | Batch Mode Settings | Acrobat PDF Settings.

In batch mode, if the “Recover Owner password” option is enabled, Passware Kit will create two targets for the same PDF file: one for recovering the User Password and another for the Owner Password.

Passware Tip: In some cases, User and Owner passwords are identical. If the Owner Password is known, the User Password is not required to access the document or modify its permissions.

When using Passware Kit for PDF decryption, there are a few important nuances to keep in mind. For troubleshooting guidance, refer to the Knowledge Base article.

Forensic Technology Day 2025

admin35 — Wed, 17 Sep 2025 06:00:00 +0000

Meet us at the 17th Forensic Technology Days – the largest and most important conference for the IT forensics industry in Germany for many years.

Every year, leading international software manufacturers and IT forensics experts are represented with their products and expertise. The main goal of the FT-Day is to support forensic professionals with practical knowledge for their daily work, as well as networking with colleagues, software vendors, and hardware experts.

Participation is free of charge, but only possible for participants from public authorities and selected companies from the private sector.

Our presentation is there on September 24th at 12:20. We will showcase the latest unique features of Passware Kit Ultimate and provide an exclusive preview of upcoming decryption capabilities.

Learn more about the event.

2025 BCFE Training by IACIS

admin35 — Wed, 13 Aug 2025 06:00:00 +0000

The BCFE – Basic Computer Forensic Examiner – is a 76-hour course of instruction that is offered over 2 consecutive weeks and is designed to provide students with a foundational knowledge of digital computer forensics to be able to enter into the IACIS Certified Forensic Computer Examiner (CFCE) certification process.

Taught by experienced professionals, these hands-on sessions cover everything from foundational skills to advanced investigative methods. Whether you’re new to the field or a seasoned expert, you’ll gain practical knowledge that directly applies to your work.

We will be there at the Exhibit area on October 7–9. Stop by our booth to discover what’s new in evidence acquisition from locked hardware and mobile devices.

Learn more about the event.

Passware Kit 2025 v3 Now Available

Passware — Tue, 22 Jul 2025 06:00:00 +0000

What’s new in Passware Kit 2025 v3:

What’s New Video

For your convenience, we have included a video of all the latest features of Passware Kit 2025 v3. Take a look!

BitLocker encryption has long presented a significant challenge in forensic investigations. With the release of Passware Kit 2025 v3, a streamlined solution is now available. This update allows forensic experts to decrypt BitLocker-protected devices with TPM chip in minutes. The process is supported on Windows x64 devices that use the Preboot Execution Environment (PXE).

Passware introduces a new “Apply Rules” attack, compatible with rule files from third-party tools, such as hashcat and John the Ripper. This advanced option allows the user to modify, extend, and filter passwords generated by basic password-recovery attacks, including Dictionary and Brute-force.

Passware Kit now supports digest extraction from password-protected files, allowing users to transfer the password recovery process to another machine without moving large files or disk images.

Additional enhancements in this release include support for the latest bcrypt hash algorithm; GPU acceleration for Steganos Safe; and updated password recovery and decryption for Apple Notes, FileMaker, and Windows domain users.

Passware Kit Ultimate, Forensic, and Business customers only.
Contact Support to get an update for other Passware products.

Decryption of BitLocker-encrypted devices with TPM and Preboot Execution Environment

Passware enables forensic investigators to decrypt BitLocker-protected devices with TPM security chip in minutes. The process works on target Windows x64 devices that use the Preboot Execution Environment (PXE). The requirements are: enabled PXE boot, two USB flash drives, an Ethernet cable (with a compatible adapter if needed), and a Windows computer running the latest version of Passware Kit Ultimate or Passware Kit Forensic with Device Decryption Add-on.

As a result, Passware Kit extracts the BitLocker VMK and Recovery key, enabling the user to decrypt the disk image.

New rule-based attack compatible with hashcat

Passware Kit introduces a new rule-based password-recovery attack that modifies password candidates using rule files compatible with third-party tools like hashcat and John the Ripper. This enables flexible and precise customization of password variations, significantly enhancing recovery efficiency.

The new “Apply Rules” attack is available as an Advanced option and can be combined with standard attacks, such as Dictionary, Brute-force, and others.

Password recovery using digests instead of disk images and large files

Passware Kit now supports digest extraction from password-protected files, allowing users to transfer the password recovery process to another computer without moving large files or disk images. Digests are small files containing only the information necessary for decryption: they include no user data and can be safely moved to a more powerful system for efficient password recovery.

Password recovery for bcrypt SHA-256 hashes

Passware Kit 2025v3 supports the new bcrypt hash algorithm: Blowfish-based SHA-256 crypt. The average recovery speed is 60 passwords per second on AMD Ryzen 9 5900X CPU.

GPU-accelerated password recovery for Steganos containers

Passware adds GPU acceleration to password recovery for Steganos Safe containers. The recovery speed now reaches 646,000 passwords per second on NVIDIA RTX 4070 Ti.

Password recovery for Apple Notes from macOS Sequoia

Passware Kit 2025 v3 is now fully compatible with macOS Sequoia, featuring support for Apple Notes created on this operating system. The update enables password recovery for individual notes protected with custom passwords, achieving speeds of up to 184,000 passwords per second on an NVIDIA RTX 4070 Ti.

Instant decryption of FileMaker 2024 databases

Passware Kit instantly decrypts FileMaker databases protected with the latest 2024 version on both Windows and Mac.

Instant Windows user and domain password removal on Windows Server 2025

Passware Kit is now fully compatible with the Windows Server 2025. It can be installed and launched on this system, and it instantly resets Windows user and domain passwords.

All editions

See changelog for the complete list of features

Passware Kit Ultimate – Air-Gapped Edition

Passware Kit Ultimate includes Passware Kit Forensic, Passware Kit Mobile, Device Decryption Add-on, 10 Agents for distributed computing, and Passware Certified Examiner Online Training.

Key capabilities include:

Password recovery for over 380 file types
Recovery of passcodes for over 950 mobile devices
Full disk decryption
Decryption of BitLocker-encrypted devices with TPM and PXE
Decryption of Macs with Apple T2 Security Chip
Password recovery for Seagate, LaCie, and WD HDD
Decryption of Lenovo ThinkPad with BitLocker TPM
Live memory analysis
Hardware acceleration on GPU
Distributed password recovery with 10 Agents for Windows, Linux, Amazon Cloud, and Microsoft Azure

Learn More

* Additional information about the Air-Gapped Edition is available upon request.

Passware Kit Mobile 2025 v3 Now Available

Passware — Tue, 08 Jul 2025 06:00:00 +0000

What’s new:

Passware Kit Mobile 2025 v3 introduces instant data decryption for select Huawei Kirin devices, enabling forensic professionals to extract critical information even without requiring the device password. This decryption option supports Kirin 710 and 970 chipsets with UFS storage and covers popular models such as the Huawei P20 Pro, Y9s, and Honor 10.

Additionally, PKM now supports the latest hybrid encryption scheme used in Huawei devices powered by Kirin 659 and Kirin 960 chipsets, ensuring full compatibility with models such as the Huawei Mate 9 and P20 Lite.

The latest version of PKM further expands device support by adding 22 new models powered by the Qualcomm Snapdragon 425 and MediaTek Dimensity 800 (MT6873) chipsets.

Passware Kit Mobile and Ultimate customers only.
Contact Support to get an update for other Passware products.

Instant decryption of Kirin 710/970 data, regardless of the password

Passware Kit Mobile 2025 v3 introduces instant partial data decryption for select Huawei Kirin devices, allowing forensic professionals to access critical user data without the device password. The tool automatically detects various file types, such as images, archives, audio and video files, databases, and more. It decrypts their contents, though original file names are not recovered.

Once the user data is extracted, decryption can continue on a computer with the device disconnected, leveraging CPU, GPU, and distributed computing for optimal performance.

This feature supports Kirin 710 and Kirin 970 chipsets with UFS storage and is compatible with popular models including the Huawei P20 Pro, Y9s, and Honor 10. The decryption works even for devices protected with hybrid encryption scheme, also known as blob 341 encryption, which currently does not allow password recovery.

Support for the latest hybrid encryption scheme on Kirin 659/960 devices

Passware Kit Mobile now supports the latest hybrid encryption scheme used in Huawei devices powered by Kirin 659 and Kirin 960 chipsets. This ensures full compatibility with models such as the Huawei Mate 9 and P20 Lite.

Password recovery for Qualcomm Snapdragon 425 devices

The latest PKM version supports 13 new devices powered by the Qualcomm Snapdragon 425 chipset (MSM8917). For example, the recovery speed for the Xiaomi Redmi Go (with Secure Startup enabled) reaches up to 130 passwords per second using an NVIDIA GeForce RTX 4070 Ti.

Password recovery for MediaTek Dimensity 800 devices

PKM now supports password recovery for devices powered by the MediaTek Dimensity 800 (MT6873) chipset, including nine models, such as the Honor 30 Youth and ZTE Axon 11 SE. The recovery speed for the Ulefone Armor 11 reaches up to 18,000 passwords per second using an AMD Radeon RX 6900 XT.

See the full list of supported models.

See the full list of features and bugfixes on our website.

Upgrade to Passware Kit Ultimate

Upgrade to the all-in-one forensic decryption solution to access data from computers, disks, files, and mobile devices – all with a single Passware Kit Ultimate license!

Passware Kit Ultimate includes:

Passware Kit Forensic and Device Decryption Add-on
Passware Kit Mobile with 300 extractions
10 Passware Kit Agents for PKF and PKM
Passware Certified Examiner Training

Current Passware Kit Mobile (Annual License) users can upgrade to Passware Kit Ultimate or Passware Kit Ultimate – Air-Gapped Edition at a special price.

Get Your Upgrade Offer

Techno Security & Digital Forensics Conference 2025

admin35 — Wed, 07 May 2025 06:00:00 +0000

The Techno Security & Digital Forensics Conference brand has grown into one of the most important resources for corporate network security professionals, federal, state and local law enforcement digital forensic specialists, and cybersecurity industry leaders from around the world. The purpose is to raise international awareness of developments, teaching, training, responsibilities, and ethics in the field of cybersecurity, digital forensics, and eDiscovery.

Come and meet us at booth #616 to discover the future of encrypted evidence discovery and win a Passware Kit Ultimate license!

You are welcome to use our promo code PASS25 to get 10% off the registration price.

Learn more about the event.