Passware Kit 2023 v1 – AxCrypt and Instant VeraCrypt Decryption

Configuring the decryption of multiple disk images has long been a headache for computer forensics. In the past, they needed to specify the settings for each image, depending on the FDE vendor, in order to set up the password recovery or decryption process in Passware Kit. The new 2023 v1 simplifies this configuration by introducing group settings for decrypting multiple disk images in Batch Mode.

The new version of Passware Kit also supports AxCrypt files and instantly decrypts the latest versions of VeraCrypt using the improved memory analysis option.

What’s new in Passware Kit 2023 v1:

  • Simplified setup of decryption for multiple disk images
  • Password recovery for AxCrypt
  • Instant decryption of the latest VeraCrypt versions via memory analysis
  • Updated Bootable Memory Imager
  • GPU acceleration improvements
  • Improved Rainbow Tables attack

For your convenience, we have included a video of all the newest features of Passware Kit 2023 v1. Take a look!

Simplified setup of decryption for multiple disk images

The decryption of multiple disk images has become easier to configure! Passware Kit 2023 v1 features group settings for decrypting multiple disk images.

The software groups the disk images by encryption type and allows users to apply the same password recovery or decryption settings to all the images within the same group.


Get The Latest DFIR News

Join the Forensic Focus newsletter for the best DFIR articles in your inbox every month.


Unsubscribe any time. We respect your privacy - read our privacy policy.

This option is available for BitLocker, LUKS, and Symantec/PGP WDE. Passware Kit is also capable of setting up the batch password recovery for the specified accounts in multiple disk images where applicable.

Password recovery for AxCrypt

Passware Kit now recovers passwords for files encrypted with AxCrypt v2, for both Free and Premium accounts.

AxCrypt encrypts all the files with a single account password. This means that the password recovery feature for any encrypted file provides access to all the files of the same account, assuming that the account password was not changed by the user.

Instant decryption of the latest VeraCrypt versions via memory analysis

Passware has updated its Windows memory analysis option such that it is now capable of extracting expanded encryption keys required for decrypting the latest versions of VeraCrypt.

Additionally, beginning with version 1.24, VeraCrypt introduces a mechanism to encrypt master keys and cached passwords in RAM. Passware Kit 2023 v1 now supports this feature and decrypts the keys, providing instant access to the VeraCrypt volumes.

Updated Bootable Memory Imager

Passware Bootable Memory Imager now saves memory images in a new format that preserves the RAM layout. This provides additional metadata for the advanced Windows memory image analysis and allows users to instantly decrypt volumes created by the latest versions of VeraCrypt.

GPU acceleration improvements

In some cases, time-consuming password recovery processes lead GPUs to overheat and might even result in hardware damage. High GPU loading provides maximum password recovery speed, but may cause system problems including overheating, system restart, application errors, or stability and usability issues.

Passware Kit now allows users to establish a GPU utilization level and a temperature threshold that disables the GPU automatically if and when it reaches the specified temperature.

Improved Rainbow Tables attack

Rainbow Tables for Office were updated to increase the success decryption rate for MS Excel and Word files to 99.8%.

The Rainbow Tables attack of Passware Kit Forensic and Business editions now features an improved integrity check for the imported tables.

More information about Passware Kit Forensic 2023 v1.

Leave a Comment

Latest Videos

Digital Forensics News Round-Up, February 21 2024 #digitalforensics #dfir

Forensic Focus 21st February 2024 6:19 pm

Alan Platt, Professional Services Consultant at MSAB, discusses his experience as a former UK police officer working in digital forensics. He talks about the different levels of digital forensics capabilities within police forces and how MSAB products like XAMN and XEC Director are used by frontline officers versus lab analysts. 

The discussion covers how MSAB partners with law enforcement to develop custom workflows for mobile device acquisitions that facilitate ISO compliance. Alan explains MSAB's managed service offering, where approved MSAB staff can remotely access a customer's XEC Director server to assist with software updates and troubleshooting. He emphasizes the strict data segregation policies enforced by customers to prevent MSAB from accessing any sensitive case data.

Looking ahead, Alan mentions MSAB's new CEO and hints at some exciting developments coming down the pipeline. He spotlights recent enhancements to XEC Director's speed and database functionality for managing large estates of networked Kiosks. Alan also plugs the new XEC Director training he created to help users fully leverage the platform's capabilities.

00:00 – Introduction to Alan Platt
07:00 – Training
12:00 – Workflows
17:20 – Ensuring a secure environment
19:45 – Customer training
20:35 – Helping customers comply with ISO accreditation
25:00 – Validation and verification
27:30 – ISO standards
30:00 – MSAB’s pipeline plans
32:40 – XEC Director 
43:45 – Privacy of user data

Alan Platt, Professional Services Consultant at MSAB, discusses his experience as a former UK police officer working in digital forensics. He talks about the different levels of digital forensics capabilities within police forces and how MSAB products like XAMN and XEC Director are used by frontline officers versus lab analysts.

The discussion covers how MSAB partners with law enforcement to develop custom workflows for mobile device acquisitions that facilitate ISO compliance. Alan explains MSAB's managed service offering, where approved MSAB staff can remotely access a customer's XEC Director server to assist with software updates and troubleshooting. He emphasizes the strict data segregation policies enforced by customers to prevent MSAB from accessing any sensitive case data.

Looking ahead, Alan mentions MSAB's new CEO and hints at some exciting developments coming down the pipeline. He spotlights recent enhancements to XEC Director's speed and database functionality for managing large estates of networked Kiosks. Alan also plugs the new XEC Director training he created to help users fully leverage the platform's capabilities.

00:00 – Introduction to Alan Platt
07:00 – Training
12:00 – Workflows
17:20 – Ensuring a secure environment
19:45 – Customer training
20:35 – Helping customers comply with ISO accreditation
25:00 – Validation and verification
27:30 – ISO standards
30:00 – MSAB’s pipeline plans
32:40 – XEC Director
43:45 – Privacy of user data

YouTube Video UCQajlJPesqmyWJDN52AZI4Q_ifoHVkjJtRc

How MSAB Is Managing The Digital Forensics Challenges Of Frontline Policing

Forensic Focus 21st February 2024 3:07 pm

Podcast Ep. 80 Recap: Empowering Law Enforcement With Nick Harvey From Cellebrite

Forensic Focus 20th February 2024 11:49 am

This error message is only visible to WordPress admins

Important: No API Key Entered.

Many features are not available without adding an API Key. Please go to the YouTube Feed settings page to add an API key after following these instructions.

Latest Articles