Passware has expanded its proprietary BitLocker decryption method for TPM-protected devices to support PIN recovery. Customers (and the Passware team internally) call this method “Magic Drive,” since a single USB drive handles the entire process in minutes: reboot, discover protectors, acquire VMK, and more. Now, for PIN-protected devices, Magic Drive also brute-forces the BitLocker PIN directly on the device using built-in or custom PIN lists, prior to VMK acquisition.
Passware’s rule-based password recovery attack now supports Character Class Commands, which target or filter entire sets of characters rather than individual ones, making password variation customization more convenient.
With this release, Passware Kit supports password recovery and decryption for over 420 file types. New additions include GNOME keyrings, the latest Quicken Classic databases, and AxCrypt v1 files.
What’s New in Passware Kit 2026 v3:
- BitLocker PIN recovery for TPM-protected devices
- Password recovery for GNOME Keyring
- Password recovery for the latest Quicken Classic versions
- Password recovery for AxCrypt v.1
- Support for more hashcat rules
- Usability and activation improvements
- Beta version: native application for Apple silicon (ARM)
For your convenience, we have included a video of all the latest features of Passware Kit 2026 v3. Take a look!
BitLocker PIN recovery for TPM-protected devices
For BitLocker TPM+PIN-protected devices, Passware Kit brute-forces the PIN directly on the device using built-in or custom PIN lists. Once the PIN is recovered, Passware Kit extracts the Volume Master Key and Recovery Key to decrypt the disk image immediately.
To use this feature, the target computer must boot to the BitLocker PIN prompt, and its PCR Validation Profile must not include the value 4. Additional requirements apply.
Password recovery for GNOME Keyring
Passware Kit 2026 v3 recovers master passwords for GNOME Keyring, the Linux security storage, at speeds of over 1,900,000 passwords per second on an AMD Radeon RX 6900 XT. The recovered master password grants access to all passwords, credentials, and keys stored in Keyring.
Password recovery for the latest Quicken Classic versions
Passware Kit expands support for Quicken databases, adding Quicken Classic versions 2010 through 2026.
Recovery speeds can reach 230,000 passwords per second on an AMD Ryzen 9 CPU.
Password recovery for AxCrypt v.1
AxCrypt-encrypted files are a common recovery target. Passware Kit already supports AxCrypt v2 (both account password and Private Key), and now extends support to the legacy AxCrypt v1 format, still widely used in corporate environments.
Recovery speed reaches 2,500 passwords per second on an AMD Ryzen 9 CPU.
Support for more hashcat rules
Passware’s rule-based password recovery attack now supports Character Class Commands, which target or filter entire sets of characters rather than individual ones, making password variation customization more convenient.
A limited set of character classes is supported: ?l, ?u, ?d, ?h, ?H, and ?s.
Usability and activation improvements
The License Manager now displays license activation details, including the number of available activations and the names of computers on which Passware Kit has been activated. It also lets you copy the activation ID to request support for a specific license.
This simplifies activating and managing licenses across multiple computers.
Beta version: native application for Apple silicon (ARM)
Passware Kit Forensic now runs natively on Apple silicon, leveraging ARM for password recovery. This feature is currently in Beta and has some limitations. It’s available by request to Passware Kit Forensic and Ultimate customers with active licenses.
