
Passware Kit Forensic
SKU: S6600
Passware Kit Forensic (PKF) is the complete encrypted electronic evidence discovery solution that reports and decrypts all password-protected items on a computer. PKF recognizes over 370 file types and works in batch mode recovering passwords. Many types of files are decrypted instantly. Other passwords are recovered through dictionary and brute-force attacks using GPU-acceleration and distributed computing (for Windows, Linux, and Amazon EC2). PKF is available for Windows PCs and Macs.
NEW in PKF 2025 v2
In this release, Passware focuses on HDD decryption and optimized allocation of hardware resources.
- Password recovery for Seagate and LaCie HDD
- Password recovery for VeraCrypt volumes with BLAKE2s-256 encryption
- VeraCrypt memory analysis: support for hidden OS for latest versions and faster processing
- Smart resource allocation algorithm for distributed and batch processes
- Password recovery for individual Apple Notes
- Password recovery for Bitcoin Core wallets v20 and higher
- Password recovery for WinRAR v7 and RAR hashes
- Usability improvements
SMS (Software Maintenance and Support) is included with purchase.
Key PKF Product Features:
Live Memory Analysis
Analyzes live memory images and hibernation files and extracts encryption keys for hard disks, logins for Windows & Mac accounts, and passwords for files and websites, all in a single streamlined process.
Password Recovery for 370+ file types
MS Office, PDF, Zip and RAR, QuickBooks, FileMaker, Lotus Notes, Apple Notes, Bitcoin wallets, password managers, and many other applications.
Email Notifications
Automatically sends an email whenever a password is found or the recovery process is finished.
Encryption Detection and Analysis
Detects all encrypted files and hard disk images and reports the type of encryption as well as the complexity of the decryption.
Cross-Platform Passware Kit Agents
Supports distributed password recovery with Agents for Windows, Linux, Amazon EC2, and Microsoft Azure. Resource Manager sets up password recovery clusters and manages local and remote hardware.
Decryption of FDE
Decrypts or recovers passwords for APFS, Apple DMG, BitLocker, Dell, FileVault2, LUKS, McAfee, PGP, SanDisk, Symantec, TrueCrypt, VeraCrypt containers, disk images and vaults.
Hardware Acceleration
Accelerated password recovery with multiple computers NVIDIA and AMD GPUs, and Rainbow Tables.
Batch Processing
Runs password recovery for groups of files and FDE images without user intervention.
Automatic Updates
Optional automatic software and agents updates with one year of Software Maintenance and Support (SMS) subscription. First year of SMS included.
Passware Bootable Memory Imager
A UEFI compatible tool that acquires memory images of Windows, Linux, and Mac computers. Passware Memory Imager works with Windows computers that have Secure Boot enabled.