Passware Kit Forensic Lab is an advanced encrypted evidence discovery and password recovery solution tailored for forensic laboratories.

• Extensive File Type Support: Recovers passwords for over 370 file types, including MS Office, PDF, Zip, RAR, QuickBooks, FileMaker, Lotus Notes, Bitcoin wallets, Apple iTunes Backup, Mac OS X Keychain, and various password managers, ensuring broad compatibility across numerous applications.
• Full Disk Decryption: Decrypts or recovers passwords for full disk encryption methods such as APFS, Apple DMG, BitLocker, Dell, FileVault2, LUKS/LUKS2, McAfee, PGP, SanDisk, Steganos, Symantec, TrueCrypt, and VeraCrypt containers, disk images, and vaults, facilitating comprehensive access to encrypted data.
• Live Memory Analysis: Analyzes memory images and hibernation files to extract encryption keys for hard disks and files, as well as passwords for Windows and Mac accounts and websites, enhancing the ability to retrieve critical information from volatile memory.
• GPU Acceleration and Distributed Computing: Utilizes multiple computers, NVIDIA and AMD GPUs, and Rainbow Tables to accelerate password recovery processes, with the built-in Resource Manager enabling efficient setup and monitoring of hardware clusters for optimal performance.
• Batch Processing: Executes password recovery tasks for multiple files and full disk encryption images sequentially without user intervention, streamlining the decryption workflow.
• Cross-Platform Support: In addition to Windows, Passware Kit Forensic Lab provides a Mac version that offers access to APFS disks from Mac computers equipped with the Apple T2 chip, ensuring versatility across different operating systems.
• Intelligent Detection: Identifies all encrypted files and hard disk images, reporting the type of encryption and the complexity of decryption, aiding in the assessment and prioritization of decryption tasks.
• Automatic Updates: Offers optional automatic software and agent updates with a Software Maintenance and Support (SMS) subscription, ensuring access to the latest features and improvements.
• Passware Kit Agents: Supports distributed password recovery across Windows, Linux, Amazon EC2, and Microsoft Azure platforms, with the Linux version capable of running a portable Passware Kit Agent from a bootable Linux USB drive, and remote management of network agents directly from the Passware Kit Forensic interface.
• Device Decryption Add-on: An optional add-on that unlocks, decrypts, and recovers passwords for devices such as Western Digital My Passport and My Book drives, Lenovo ThinkPads, and disks for Macs with Apple T2 Security Chips, including those protected with EFI firmware passwords, expanding the range of decryptable devices.