Decrypt WD My Passport Disks and Macs with T2 Chip With the New Passware Device Decryption Add-on

Securing digital content through built-in hardware encryption in hard drives has become increasingly popular. This convenience, however, creates a unique challenge for forensic examiners.

To address this, Passware introduces Device Decryption Add-on — a specialized solution designed for decrypting Western Digital My Passport HDD and Macs equipped with Apple T2 Security Chips. This tool is compatible with My Passport Series 2018-2022 disks with built-in 256-bit AES hardware encryption, providing the capability to unlock or decrypt them, and recover original protection passwords.

The Device Decryption Add-on is integrated into Passware Kit Ultimate 2023 v4 and is available as an option for Passware Kit Forensic.

The new version of Passware Kit also features instant recovery of Wi-Fi passwords and extraction of network credentials from the standalone Windows “Users” and “Config” folders.

Passware Kit 2023 v4 now detects and analyzes Mozilla key4.db database files, which allow for the recovery of the Mozilla Master password. As a result of the GPU-accelerated recovery, Passware Kit immediately extracts website and email passwords saved in the latest versions of Firefox and Thunderbird.


Get The Latest DFIR News

Join the Forensic Focus newsletter for the best DFIR articles in your inbox every month.


Unsubscribe any time. We respect your privacy - read our privacy policy.

Password recovery for NTLMv2 hashes can now be accelerated on NVIDIA and AMD GPU. And finally, Passware Kit 2023 v4 adds full support for the newly released macOS Sonoma.

What’s new in Passware Kit 2023 v4:

  • GPU-accelerated password recovery and decryption of Western Digital drives
  • Decryption of Windows network credentials for standalone systems
  • Master password recovery for the latest Mozilla Firefox and Thunderbird
  • GPU acceleration for NTLMv2 hashes
  • Optional recovery of PDF owner passwords
  • Support for macOS 14 Sonoma

GPU-accelerated password recovery and decryption of Western Digital drives

Passware introduces Device Decryption Add-on — a specialized solution designed for decrypting Western Digital My Passport drives and Macs equipped with Apple T2 Security Chips. This tool is compatible with My Passport Series 2018-2022 HDD with built-in 256- bit AES hardware encryption, providing the capability to unlock or decrypt them, and recover original protection passwords.

The Device Decryption Add-on is integrated into Passware Kit Ultimate 2023 v4 and is available as an option for Passware Kit Forensic. All T2 Add-on users with a valid license will get a complimentary upgrade to the Passware Device Decryption Add-on.

Decryption of Windows network credentials for standalone systems

Passware Kit 2023 v4 features instant recovery of Wi-Fi passwords, GPU-accelerated recovery of Windows user passwords, and subsequent instant extraction of network credentials from the standalone Windows “Users” and “Config” folders. These credentials include passwords for network connections and Internet Explorer 11 websites.

As Wi-Fi passwords can be recovered instantly, they are first checked for Windows users. If any match, the corresponding Windows credentials for these users are extracted instantly.

Master password recovery for the latest Mozilla Firefox and Thunderbird

Passware Kit now detects and analyzes key4.db database files from Mozilla version 58 and higher. This database file allows for the recovery of the Mozilla Master (also known as Primary) password and the immediate extraction of website passwords and email credentials saved in the latest versions of Firefox and Thunderbird. The master password recovery can be accelerated on GPU, reaching 400,000 passwords per second on NVIDIA GeForce RTX 4070 Ti.

GPU acceleration for NTLMv2 hashes

The latest version of Passware Kit accelerates password recovery for NTLMv2 hashes, which normally store network credentials, on NVIDIA and AMD GPUs. The recovery speed is now up to 1,3 bn passwords per second on NVIDIA GeForce RTX 4070 Ti.

Optional recovery of PDF owner passwords

For PDF files, Passware Kit can now be set to recover user passwords only, skipping the recovery of owner passwords and thus reducing the overall number of tasks in batch mode. This option can be enabled and disabled at Tools|Options.

Support for macOS 14 Sonoma

Passware Kit 2023 v4 fully supports the newly-released macOS 14 Sonoma, including APFS decryption and password recovery for Keychain files.

Learn more about this release on the Passware blog.

Leave a Comment

Latest Videos

Si and Desi interview Emi Polito from Amped about their new certification called Amped Five Certified Examiner (AFCE). They discuss the exam requirements, format, timeline for certification, and Amped’s future plans. Emi explains that the certification is aimed at demonstrating competency with the Amped FIVE video analysis software after completing training. The exam consists of multiple choice questions on theory and practical exercises using the software. Emi talks about the online exam format and process for passing or failing.

Emi also discusses the broader challenges many organizations face with validation and accreditation. He emphasizes Amped's commitment to developing tools that facilitate that process. The hosts reflect on the confusing accreditation landscape and Amped’s passion for improving training and certification in forensics. This episode provides an overview of Amped's new certification and perspective on challenges in the field of video forensics.

Show Notes:

Introducing The AFCE Certification (Amped FIVE Certified Examiner) - https://www.forensicfocus.com/news/introducing-the-afce-certification-amped-five-certified-examiner/

Video Evidence Principles With Amped Software - https://www.forensicfocus.com/podcast/video-evidence-principles-with-amped-software/

Digital Image Authenticity And Integrity With Amped Authenticate - https://www.forensicfocus.com/podcast/digital-image-authenticity-and-integrity-with-amped-authenticate/

File Analysis And DVR Conversion Training From Amped Software - https://www.forensicfocus.com/reviews/file-analysis-and-dvr-conversion-training-from-amped-software/

Amped FIVE Speed Estimation 2d Filter And Training From Amped Software - https://www.forensicfocus.com/reviews/amped-five-speed-estimation-2d-filter-and-training-from-amped-software/

Amped Software’s Martino Jerian on Key Challenges and Opportunities for Video Evidence - https://www.forensicfocus.com/podcast/amped-softwares-martino-jerian-on-key-challenges-and-opportunities-for-video-evidence/

LEVA 2023 Training Symposium - https://www.leva.org/

Forensic Collision Investigation & Reconstruction Ltd - https://www.fcir.co.uk/

Amped FIVE Certified Examiner - https://ampedsoftware.com/afce-certification 

Introducing the Amped FIVE Certification Program - https://blog.ampedsoftware.com/2023/10/04/introducing-the-amped-five-certification-program

Amped Software YouTube - https://www.youtube.com/ampedsoftware
How to Use the Validation Tool in Amped FIVE - https://blog.ampedsoftware.com/2023/03/29/how-to-use-the-validation-tool-in-amped-five

Si and Desi interview Emi Polito from Amped about their new certification called Amped Five Certified Examiner (AFCE). They discuss the exam requirements, format, timeline for certification, and Amped’s future plans. Emi explains that the certification is aimed at demonstrating competency with the Amped FIVE video analysis software after completing training. The exam consists of multiple choice questions on theory and practical exercises using the software. Emi talks about the online exam format and process for passing or failing.

Emi also discusses the broader challenges many organizations face with validation and accreditation. He emphasizes Amped's commitment to developing tools that facilitate that process. The hosts reflect on the confusing accreditation landscape and Amped’s passion for improving training and certification in forensics. This episode provides an overview of Amped's new certification and perspective on challenges in the field of video forensics.

Show Notes:

Introducing The AFCE Certification (Amped FIVE Certified Examiner) - https://www.forensicfocus.com/news/introducing-the-afce-certification-amped-five-certified-examiner/

Video Evidence Principles With Amped Software - https://www.forensicfocus.com/podcast/video-evidence-principles-with-amped-software/

Digital Image Authenticity And Integrity With Amped Authenticate - https://www.forensicfocus.com/podcast/digital-image-authenticity-and-integrity-with-amped-authenticate/

File Analysis And DVR Conversion Training From Amped Software - https://www.forensicfocus.com/reviews/file-analysis-and-dvr-conversion-training-from-amped-software/

Amped FIVE Speed Estimation 2d Filter And Training From Amped Software - https://www.forensicfocus.com/reviews/amped-five-speed-estimation-2d-filter-and-training-from-amped-software/

Amped Software’s Martino Jerian on Key Challenges and Opportunities for Video Evidence - https://www.forensicfocus.com/podcast/amped-softwares-martino-jerian-on-key-challenges-and-opportunities-for-video-evidence/

LEVA 2023 Training Symposium - https://www.leva.org/

Forensic Collision Investigation & Reconstruction Ltd - https://www.fcir.co.uk/

Amped FIVE Certified Examiner - https://ampedsoftware.com/afce-certification

Introducing the Amped FIVE Certification Program - https://blog.ampedsoftware.com/2023/10/04/introducing-the-amped-five-certification-program

Amped Software YouTube - https://www.youtube.com/ampedsoftware
How to Use the Validation Tool in Amped FIVE - https://blog.ampedsoftware.com/2023/03/29/how-to-use-the-validation-tool-in-amped-five

YouTube Video UCQajlJPesqmyWJDN52AZI4Q_atEaNas9xnE

The Amped FIVE Certified Examiner (AFCE)

Forensic Focus 5 hours ago

Data Extraction From UNISOC-Based Devices In Oxygen Forensic® Detective

Forensic Focus 16th November 2023 3:08 pm

This error message is only visible to WordPress admins

Important: No API Key Entered.

Many features are not available without adding an API Key. Please go to the YouTube Feed settings page to add an API key after following these instructions.

Latest Articles