Passware Kit Forensic

Detect encryption before time is lost

Passware Kit Forensic independently searches the data for encrypted objects, assesses their protection strength, and suggests the most promising approach. This makes it clear early on which evidence can realistically be opened – and which cannot.

Keys instead of guesswork

Live memory analysis extracts key material directly from memory dumps. If a dump of the running system is available, password cracking can often be completely avoided – saving days or weeks of computing time.

From Office files to fully encrypted drives

Over 420 file and object types, plus BitLocker, FileVault2 and APFS, VeraCrypt, TrueCrypt, LUKS and LUKS2, as well as PGP. New in 2026 v3 are BitLocker PIN recovery for TPM-protected devices, GNOME Keyring, AxCrypt v.1, and Quicken Classic 2010 to 2026.

Compution Time You Can Plan

GPU acceleration with NVIDIA, AMD, and Intel Arc cards and distributed computing via Passware Kit Agents significantly reduce runtime. The manufacturer states that a single GPU can achieve up to 400x acceleration and eight GPUs in one computer can achieve up to 3,200x acceleration compared to CPU-only computation. Batch processing handles entire evidence inventories unattended.