Passware Kit Forensic

Password recovery for encrypted files and documents: Passware Kit Forensic recovers or removes passwords protecting a very wide range of file types (documents, archives, spreadsheets, databases, and more), enabling investigators to access protected evidence that would otherwise be unreadable.

Decryption of full-disk encryption: The tool decrypts and recovers passwords for major full-disk encryption systems including BitLocker, TrueCrypt, VeraCrypt, FileVault, and others, unlocking entire encrypted volumes for examination.

Recovery of passwords for 300+ file types: Passware supports password recovery across hundreds of distinct file and application formats, making it a broad, general-purpose decryption tool for forensic workflows.

Memory analysis for encryption key extraction: The product can analyze a computer's memory image to extract encryption keys and passwords that reside in RAM, allowing instant decryption of volumes such as BitLocker and TrueCrypt when a live memory capture is available.

GPU-accelerated password recovery: Passware leverages graphics-processing-unit acceleration to speed brute-force and dictionary attacks dramatically, performing far more password guesses per second than CPU-only recovery.