Passware Kit 2022 v1: Full Support for Windows 11, macOS Monterey, and Acronis Backup Passwords

Passware Kit 2022 v1 fully supports the latest OS releases: Windows 11 and macOS Monterey, including BitLocker and APFS decryption, extraction of SAM passwords, and password recovery for Keychain files.

We are continually expanding the range of file types and applications that Passware Kit supports. The new version introduces GPU-accelerated password recovery for Acronis backups and support for LUKS2 disks protected with AES-CBC encryption.

We have also redesigned the “Known Passwords” attack to support multiple passwords without the need to create a custom dictionary.

New versions of Passware dictionaries are available that have been updated with passwords from the recent password leaks and Password Exchange database.

In addition, we improved the usability of batch mode for files and disks and made the Hardware benchmark tool available in the free Demo version of Passware Kit Forensic.


Get The Latest DFIR News

Join the Forensic Focus newsletter for the best DFIR articles in your inbox every month.


Unsubscribe any time. We respect your privacy - read our privacy policy.

What’s new in Passware Kit 2022 v1

  • Support for Windows 11
  • Support for macOS Monterey
  • GPU-accelerated password recovery for Acronis backups
  • List of passwords supported by the Known Password attack
  • Instant LUKS2 decryption via memory analysis
  • Batch mode improvements
  • New Passware dictionaries
  • Hardware Benchmark added to the Demo version
  • Shutdown and Reboot options in the Bootable Memory Imager

Support for Windows 11

Passware Kit 2022 v1 supports the decryption and password recovery options for the Windows 11 systems: BitLocker XTS-AES volumes, Windows users, SAM database, Windows hashes, and websites.

Support for macOS Monterey

All of the features of the Mac version of the Passware Kit are now fully supported for macOS Monterey, including but not limited to Keychain data extraction, password recovery for FileVault2/APFS and Apple DMG, user password extraction from a memory image, and APFS unlock for Macs with Apple T2.

GPU-accelerated password recovery for Acronis backup

The new Passware Kit recovers passwords for Acronis backups – *.TIB files. The recovery can be accelerated on NVIDIA and AMD GPUs, reaching speeds greater than 14,200 passwords per second on an AMD 6900 XT.

List of passwords supported by the Known Passwords attack

Passware Kit now allows users to leverage the Known Passwords attack by specifying multiple passwords but without creating a custom dictionary.

These passwords can also be modified with the regular Passware Kit modifiers, such as “Change casing,” “Change chars order,” and “Substitute chars.”

Instant LUKS2 decryption via memory analysis

LUKS2 volumes can now be instantly decrypted whenever the corresponding memory image containing an encryption key is available.

We have also added support for LUKS2 disks protected with the AES-CBC encryption algorithm.

Batch mode improvements

In batch mode, files can now be added to specific groups by clicking the [+] sign of the group.

When working with disks with multiple partitions in batch mode, Passware Kit now allows users to specify one or more partitions for processing. The software can apply specific password recovery and decryption methods to different partitions within the same disk. The partition selection in batch mode is supported for TrueCrypt, VeraCrypt, Bitlocker, FileVault, and LUKS images.

With the new resizable columns, the process of setting up the batch password recovery has become even easier to complete and customize.

New Passware dictionaries

New versions of our proprietary dictionaries, updated with passwords from the recent password leaks and Password Exchange database, are now available: Passware Dictionary 2022 Large (10 bn passwords) and Passware Dictionary 2022 Small (550,000+ passwords).

The dictionaries are available for download to Passware Kit Forensic and Business customers from their Passware Account.

Hardware Benchmark added to the Demo version

The “Hardware Benchmark” option is now available in the “Tools” menu of the free Demo versions of Passware Kit Business and Forensic.

With this option, users can assess their hardware performance on typical password recovery tasks and receive the reports for free!

Shutdown and Reboot options in the Bootable Memory Imager

After completing the memory acquisition process, Passware Bootable Memory Imager now offers to shut down or reboot the target computer. This feature works on Windows, macOS, and Linux systems.

What’s New Video

For your convenience, we have put together a video of all the recent features of Passware Kit 2022 v1. Take a look!

Leave a Comment

Latest Videos

Si and Desi interview Emi Polito from Amped about how to become an Amped FIVE Certified Examiner (AFCE). They discuss the exam requirements, format, timeline for certification, and Amped’s future plans. Emi explains that the certification is aimed at demonstrating competency with the Amped FIVE video analysis software after completing training. The exam consists of multiple choice questions on theory and practical exercises using the software. Emi talks about the online exam format and process for passing or failing.

Emi also discusses the broader challenges many organizations face with validation and accreditation. He emphasizes Amped's commitment to developing tools that facilitate that process. The hosts reflect on the confusing accreditation landscape and Amped’s passion for improving training and certification in forensics. This episode provides an overview of Amped's new certification and perspective on challenges in the field of video forensics.

Show Notes:

Introducing The AFCE Certification (Amped FIVE Certified Examiner) - https://www.forensicfocus.com/news/introducing-the-afce-certification-amped-five-certified-examiner/

Video Evidence Principles With Amped Software - https://www.forensicfocus.com/podcast/video-evidence-principles-with-amped-software/

Digital Image Authenticity And Integrity With Amped Authenticate - https://www.forensicfocus.com/podcast/digital-image-authenticity-and-integrity-with-amped-authenticate/

File Analysis And DVR Conversion Training From Amped Software - https://www.forensicfocus.com/reviews/file-analysis-and-dvr-conversion-training-from-amped-software/

Amped FIVE Speed Estimation 2d Filter And Training From Amped Software - https://www.forensicfocus.com/reviews/amped-five-speed-estimation-2d-filter-and-training-from-amped-software/

Amped Software’s Martino Jerian on Key Challenges and Opportunities for Video Evidence - https://www.forensicfocus.com/podcast/amped-softwares-martino-jerian-on-key-challenges-and-opportunities-for-video-evidence/

LEVA 2023 Training Symposium - https://www.leva.org/

Forensic Collision Investigation & Reconstruction Ltd - https://www.fcir.co.uk/

Amped FIVE Certified Examiner - https://ampedsoftware.com/afce-certification 

Introducing the Amped FIVE Certification Program - https://blog.ampedsoftware.com/2023/10/04/introducing-the-amped-five-certification-program

Amped Software YouTube - https://www.youtube.com/ampedsoftware
How to Use the Validation Tool in Amped FIVE - https://blog.ampedsoftware.com/2023/03/29/how-to-use-the-validation-tool-in-amped-five

Si and Desi interview Emi Polito from Amped about how to become an Amped FIVE Certified Examiner (AFCE). They discuss the exam requirements, format, timeline for certification, and Amped’s future plans. Emi explains that the certification is aimed at demonstrating competency with the Amped FIVE video analysis software after completing training. The exam consists of multiple choice questions on theory and practical exercises using the software. Emi talks about the online exam format and process for passing or failing.

Emi also discusses the broader challenges many organizations face with validation and accreditation. He emphasizes Amped's commitment to developing tools that facilitate that process. The hosts reflect on the confusing accreditation landscape and Amped’s passion for improving training and certification in forensics. This episode provides an overview of Amped's new certification and perspective on challenges in the field of video forensics.

Show Notes:

Introducing The AFCE Certification (Amped FIVE Certified Examiner) - https://www.forensicfocus.com/news/introducing-the-afce-certification-amped-five-certified-examiner/

Video Evidence Principles With Amped Software - https://www.forensicfocus.com/podcast/video-evidence-principles-with-amped-software/

Digital Image Authenticity And Integrity With Amped Authenticate - https://www.forensicfocus.com/podcast/digital-image-authenticity-and-integrity-with-amped-authenticate/

File Analysis And DVR Conversion Training From Amped Software - https://www.forensicfocus.com/reviews/file-analysis-and-dvr-conversion-training-from-amped-software/

Amped FIVE Speed Estimation 2d Filter And Training From Amped Software - https://www.forensicfocus.com/reviews/amped-five-speed-estimation-2d-filter-and-training-from-amped-software/

Amped Software’s Martino Jerian on Key Challenges and Opportunities for Video Evidence - https://www.forensicfocus.com/podcast/amped-softwares-martino-jerian-on-key-challenges-and-opportunities-for-video-evidence/

LEVA 2023 Training Symposium - https://www.leva.org/

Forensic Collision Investigation & Reconstruction Ltd - https://www.fcir.co.uk/

Amped FIVE Certified Examiner - https://ampedsoftware.com/afce-certification

Introducing the Amped FIVE Certification Program - https://blog.ampedsoftware.com/2023/10/04/introducing-the-amped-five-certification-program

Amped Software YouTube - https://www.youtube.com/ampedsoftware
How to Use the Validation Tool in Amped FIVE - https://blog.ampedsoftware.com/2023/03/29/how-to-use-the-validation-tool-in-amped-five

YouTube Video UCQajlJPesqmyWJDN52AZI4Q_VKk-mhlae1c

Becoming An Amped FIVE Certified Examiner (AFCE)

Forensic Focus 1st December 2023 4:25 pm

Subscribe to the Forensic Focus Podcast: https://www.forensicfocus.com/podcast/

Si and Desi are joined by Brittany and Ailsa from digital forensics software company ADF Solutions. They discuss how ADF is addressing key challenges for digital forensics practitioners, including handling the massive volumes of data from mobile devices and the cloud.

The guests outline ADF's focus on developing their software as an easy-to-use onsite triage tool that can help quickly identify pertinent evidence. Key features include advanced handling of video files, AI-assisted classification of images, and new screen recording capabilities for mobile devices that allow suspects to safely share relevant data. 

The hosts and guests also explore ADF's ongoing research into areas like facial recognition, handling new device types like games consoles and smart watches, and identifying deepfake media.

00:00 – Introduction to Ailsa and Brittany
03:00 – The challenge of vast amounts of data
05:50 – Recovering data from Chromebooks
08:50 – Triaging using ADF tools
12:30 – Benefits of using ADF Solutions’ tools
15:50 – Limitations in types of apps
17:20 – Keeping up with technological advancements
19:15 – ADF customer base
21:00 - Artificial intelligence in classifying images
30:00 – ADF Solutions’ triaging kit
37:00 – Training with ADF
40:00 – Target user
44:50 – Roadmap of future devices to examine
51:30 – Main focus for ADF Solutions going forwards

Show Notes:
AI-generated CSAM article on Sky News - https://news.sky.com/story/thousands-of-ai-generated-child-abuse-images-being-shared-online-research-finds-12991727

Subscribe to the Forensic Focus Podcast: https://www.forensicfocus.com/podcast/

Si and Desi are joined by Brittany and Ailsa from digital forensics software company ADF Solutions. They discuss how ADF is addressing key challenges for digital forensics practitioners, including handling the massive volumes of data from mobile devices and the cloud.

The guests outline ADF's focus on developing their software as an easy-to-use onsite triage tool that can help quickly identify pertinent evidence. Key features include advanced handling of video files, AI-assisted classification of images, and new screen recording capabilities for mobile devices that allow suspects to safely share relevant data.

The hosts and guests also explore ADF's ongoing research into areas like facial recognition, handling new device types like games consoles and smart watches, and identifying deepfake media.

00:00 – Introduction to Ailsa and Brittany
03:00 – The challenge of vast amounts of data
05:50 – Recovering data from Chromebooks
08:50 – Triaging using ADF tools
12:30 – Benefits of using ADF Solutions’ tools
15:50 – Limitations in types of apps
17:20 – Keeping up with technological advancements
19:15 – ADF customer base
21:00 - Artificial intelligence in classifying images
30:00 – ADF Solutions’ triaging kit
37:00 – Training with ADF
40:00 – Target user
44:50 – Roadmap of future devices to examine
51:30 – Main focus for ADF Solutions going forwards

Show Notes:
AI-generated CSAM article on Sky News - https://news.sky.com/story/thousands-of-ai-generated-child-abuse-images-being-shared-online-research-finds-12991727

YouTube Video UCQajlJPesqmyWJDN52AZI4Q_4z-EgH54KZk

The Power Of Digital Forensics: How ADF Solutions Is Revolutionizing The Digital Forensics Industry

Forensic Focus 30th November 2023 2:57 pm

This error message is only visible to WordPress admins

Important: No API Key Entered.

Many features are not available without adding an API Key. Please go to the YouTube Feed settings page to add an API key after following these instructions.

Latest Articles