Get Forensic Access to Protected Data

ElcomSoft offers a comprehensive range of tools for unlocking access to many types of data, recovering passwords, and decrypting encrypted files and volumes.

Get Started with ElcomSoft

OVERVIEW

ElcomSoft is a Microsoft Certified Partner and a member of the Intel® Software Partner Program, a member of the Russian Cryptology Association (RCA), Computer Security Institute, and a lifetime member of the Association of Shareware Professionals (ASP).

Product Categories

Bundles
Deeply discounted value packs combining multiple ElcomSoft tools — Premium Forensic Bundle, Desktop Forensic Bundle, and Mobile Forensic Bundle.

Mobile Forensics
Forensically sound extraction from iOS, Android, and other mobile devices — iOS Forensic Toolkit, Phone Breaker, Explorer for WhatsApp, Phone Viewer, Quick Triage, and BlackBerry Backup Explorer.

Cloud Forensics
Over-the-air acquisition from Google and Apple cloud services — Cloud eXplorer and Phone Breaker (iCloud).

Password Recovery
GPU-accelerated password recovery for documents, archives, databases, and wireless networks — Distributed Password Recovery, Advanced Office/PDF/Archive/SQL/Intuit/Sage Password Recovery, and Wireless Security Auditor.

Forensic Utilities
Disk decryption, system recovery, EFS recovery, and password analysis — Forensic Disk Decryptor, System Recovery, EFS Data Recovery, Password Digger, and Mailbox Password Recovery.

Ideal For

Digital forensics and incident response teams
Law enforcement and government agencies
Corporate security and eDiscovery teams
IT professionals recovering access to encrypted data
Forensic examiners analyzing mobile devices and cloud services

BUNDLES

Elcomsoft Premium Forensic Bundle

Every tool we make in a deeply discounted value pack. The complete suite of ElcomSoft password recovery tools allows corporate and government customers to extract data from mobile devices, unlock documents, decrypt archives, break into encrypted containers, and view and analyze evidence. The password recovery suite features the latest and most advanced cryptanalysis algorithms developed by ElcomSoft Research department, while the mobile forensic tools enable access to critical evidence stored in physical devices, local backups, and cloud services.

Elcomsoft Desktop Forensic Bundle

A complete suite of ElcomSoft password recovery tools allows corporate and government customers to unprotect disks and systems and decrypt files and documents protected with popular applications. The password recovery suite features the latest and most advanced cryptanalysis algorithms developed by ElcomSoft Research Department.

Elcomsoft Mobile Forensic Bundle

The complete mobile forensic kit enables law enforcement, corporate, and government customers to perform physical, logical, and over-the-air acquisition of smartphones and tablets, break mobile backup passwords and decrypt encrypted backups, and view and analyze information stored in mobile devices. The bundle consists of all currently available mobile forensic tools offering the best value on the market.

MOBILE FORENSICS

Elcomsoft iOS Forensic Toolkit

Extract critical evidence from Apple iOS devices in real time. Gain access to phone secrets including passwords and encryption keys, and decrypt the file system image with or without the original passcode. Physical and logical acquisition options for all 64-bit devices running all versions of iOS .

Elcomsoft Phone Breaker

Gain full access to information stored in FileVault 2 containers and on iPhone, iPad, and Mac devices! Download device data from Apple servers. Use an Apple ID and password or extract binary authentication tokens from computers, hard drives, and forensic disk images to download cloud data without a password. Decrypt local backups with GPU-accelerated password recovery.

Elcomsoft Quick Triage

Elcomsoft Quick Triage is a tool designed to rapidly extract and analyze the most important evidence from a target computer or disk. It is equally effective during on-site operations and in laboratory environments, helping investigators make informed decisions at the earliest stages of an investigation .

Elcomsoft Phone Viewer

Elcomsoft Phone Viewer is a fast, lightweight forensic viewer for quickly accessing information extracted from mobile backups. Supporting a variety of platforms and data formats, the tool can display information extracted from local and cloud iOS backups and Microsoft Accounts. Password-protected iTunes backups can be automatically decrypted and analyzed without using third-party tools .

Elcomsoft Explorer for WhatsApp

Elcomsoft Explorer for WhatsApp is a tool to download, decrypt, and display WhatsApp communication histories. The tool automatically acquires WhatsApp databases from one or multiple sources, processes information, and displays contacts, messages, call history, and pictures sent and received. The built-in viewer offers convenient searching and filtering, and allows viewing multiple WhatsApp databases extracted from various sources .

Elcomsoft Blackberry Backup Explorer

Analyze BlackBerry backups with ease. Elcomsoft Blackberry Backup Explorer grants forensic access to information stored in backups produced with PC and Mac versions of BlackBerry Desktop Software. Review call logs, get access to email, SMS and MMS messages, and view organizer information stored in BlackBerry devices .

CLOUD FORENSICS

Elcomsoft Cloud eXplorer

Learn what Google knows about you! Download information directly from the Google Account with or without a password. Elcomsoft Cloud Explorer enables over-the-air acquisition for a wide range of Google services including Contacts, Hangouts Messages, Google Keep, Chrome browsing history, search history and page transitions, Calendars, images, location, and a lot more.

Elcomsoft Phone Breaker (Cloud)

PASSWORD RECOVERY

Elcomsoft Distributed Password Recovery

Build high-performance clusters for breaking passwords faster. Elcomsoft Distributed Password Recovery offers zero-overhead scalability and supports GPU acceleration for faster recovery. Serving forensic experts and government agencies, data recovery services, and corporations, Elcomsoft Distributed Password Recovery is here to break the most complex passwords and strong encryption keys within realistic timeframes.

Advanced Office Password Recovery

GPU-accelerated Advanced Office Password Recovery can use powerful processing units of your AMD and NVIDIA video cards to remove, replace, or recover passwords protecting Microsoft Office documents faster. Supporting all versions of Microsoft Office from version 2.0 to 2019, the tool allows specifying a variety of masks and attacks. Its highly-optimized low-level code ensures the quickest recovery of the most complex passwords .

Advanced PDF Password Recovery

Unlock PDF documents and remove editing, printing, and copying restrictions instantly. Open encrypted and password-protected PDF documents quickly and efficiently. The unique, patented Thunder Tables® technology guarantees the recovery of 40-bit keys in under a minute! The multi-threaded low-level code is optimized for modern multi-core PCs, ensuring the best performance and the quickest recovery of the most complex passwords.

Advanced Archive Password Recovery

Advanced Archive Password Recovery recovers passwords and removes protection from ZIP, 7Zip, and RAR archives created with all versions of PKZip, 7Zip, WinZip, RAR, and WinRAR in their GUI and command-line incarnations. Being a flexible, customizable, and highly-optimized password recovery tool, it offers best-in-class performance for recovering the most complex passwords. Guaranteed recovery is often possible for many ZIP archives in less than one hour .

Advanced SQL Password Recovery

Get instant access to password-protected SQL Server databases — guaranteed! Advanced SQL Password Recovery can change any user or administrative password protecting databases in Microsoft SQL Server 2000, 2005 up to 2019 formats. Advanced SQL Password Recovery works with or without SQL Server installed. The password recovery tool accesses the master.mdf file directly, whether or not SQL Server is running or installed .

Advanced Intuit Password Recovery

Access Intuit Quicken documents by recovering the original password via a GPU-accelerated attack and instantly unlock QuickBooks files by resetting the password. Advanced Intuit Password Recovery recovers passwords protecting Intuit files in many localized and international variants versions .

Advanced Sage Password Recovery

View user and Admin passwords in Sage 50 (Peachtree) Accounting and get instant access to password-protected ACT! documents — guaranteed! Recover or replace passwords protecting BLB, MUD, and ADF/PAD files created with ACT! software suite locally or remotely. Advanced Sage Password Recovery instantly reveals passwords protecting documents saved by all versions of ACT!, and lists user and administrator passwords in Sage 50 (Peachtree) Accounting .

Elcomsoft Wireless Security Auditor

Audit security of your wireless networks and recover WPA/WPA2 passwords with Elcomsoft Wireless Security Auditor. In addition to the CPU-only mode, the new wireless password recovery tool features a patented GPU acceleration technology to speed up password recovery. Elcomsoft Wireless Security Auditor targets the human factor with smart attacks, combining dictionary attacks with an advanced variation facility. The tool accepts standard tcpdump logs supported by any Wi-Fi sniffer .

FORENSIC UTILITIES

Elcomsoft Forensic Disk Decryptor

Elcomsoft Forensic Disk Decryptor offers forensic specialists an easy way to obtain complete real-time access to information stored in popular crypto containers. Supporting desktop and portable versions of BitLocker, FileVault 2, PGP Disk, TrueCrypt, and VeraCrypt protection, the tool can decrypt all files and folders stored in crypto containers or mount encrypted volumes as new drive letters for instant, real-time access.

Elcomsoft System Recovery

In order to preserve digital evidence, the chain of custody begins at the first point of data collection. Elcomsoft System Recovery employs a forensically sound workflow to ensure that digital evidence collected during the investigation remains court-admissible. The workflow implements read-only, write-blocking access to the target computer and saves collected evidence in the form of digitally signed, verifiable disk images, making Elcomsoft System Recovery a viable alternative to hardware-based write-blocking disk imaging devices while offering real-time access to crucial evidence.

Advanced EFS Data Recovery

Decrypt files protected with the Encrypting File System (EFS). Advanced EFS Data Recovery decrypts files protected with EFS in Windows 2000, XP, Server 2003/2012, Vista, and Windows 7/8. Recovery is possible even when you transfer a protected disk to a different PC, reformat the system partition, or when some encryption keys are tampered with.

Elcomsoft Password Digger

Elcomsoft Password Digger is a Windows tool to decrypt information stored in the Mac OS X keychain. The tool dumps the content of an encrypted keychain into a plain XML file for easy viewing and analysis. One-click dictionary building dumps all passwords from the keychain into a plain text file, producing a custom dictionary for password recovery tools. The custom dictionary helps break passwords to encrypted documents or backups faster.

Advanced Mailbox Password Recovery

Instantly recover passwords to email, POP3, and IMAP accounts with Advanced Mailbox Password Recovery. The locally stored login and password information is recovered instantly and automatically from many popular email clients. The included POP3/IMAP Server Emulator recovers POP3 and IMAP passwords from any email client ever developed, including remote computers and mobile platforms .