Elcomsoft - Desktop, mobile and cloud forensics

Since 1997, ElcomSoft has been providing solutions for companies, law enforcement agencies, the military and intelligence services. ElcomSoft develops a comprehensive range of tools for accessing protected data, extracting information from mobile devices and cloud services.

With 100% in-house research and development, ElcomSoft has driven many innovations, including GPU-accelerated password recovery, and holds six US patents.

Thanks to our cutting-edge technology, our tools deliver unrivaled performance that is ahead of the competition. We are a Microsoft Certified Partner, an Intel Software Partner (Premier Elite) and a trusted developer for AMD and NVIDIA. Our solutions are fully traceable and forensically sound, easy to understand and require no special training or certifications to use.

Our tools support law enforcement agencies in capturing evidence in the most efficient way.

Password recovery and data decryption

Elcomsoft password recovery solutions provide access to password-protected, locked and encrypted information created in a variety of applications. Our unique technologies and deep knowledge of IT security enable investigators to recover even the most complex passwords faster or even instantly.

Wide compatibility

  • Office applications and archives: Microsoft Office, OpenOffice, Hangul Office, Zip, RAR
  • Encrypted containers: PGP, BitLocker (To Go), TrueCrypt, McAffee, FileVault
  • System passwords: Microsoft Windows, Unix, macOS
  • Password manager: 1Password, KeePass, LastPass, Dashlane
  • Wi-Fi passwords, e-mail clients, backups and much more

Industry-recognized patented technologies

Our tools support more than 200 file formats, document types and accounts and rely on patented GPU acceleration technologies.

Our technology enables the simultaneous use of different types of acceleration hardware from one or different vendors thanks to asynchronous and heterogeneous processing on multi-GPU, multi-core and multi-processor systems.

Our solutions are virtually infinitely scalable thanks to cloud and distributed computing and require no additional load. Our tools are highly acclaimed and industry-certified; they are used by government and private customers around the world.

Mobile forensics

Elcomsoft's mobile forensics technology enables access to valuable information in a variety of popular mobile devices and smartphones. Our mobile forensic tools can be used for full or targeted data collection from mobile devices in real time, using physical, logical or cloud collection methods.

By combining these methods, experts can collect a greater amount of evidence compared to using a single method alone. ElcomSoft's mobile forensic tools provide support for physical, logical and cloud collection from Apple, Android, Windows and BlackBerry devices.

Our tools support the latest generations of hardware and operating systems. With our tools, you can map the file system, extract media files and synchronized data, decrypt encrypted backups and use tokens to unlock locked devices.

Unique and powerful functions

Forensically sound extraction of Apple, BlackBerry and Windows devices

  • File system mapping through physical extraction for 64-bit iOS devices
  • More evidence from password-protected backups and cloud accounts
  • Live data extraction from multiple cloud services with or without a password
  • Unique Google account capture method that extracts calls, contacts, passwords, search queries and several years of location history

Supported devices & operating systems

Our mobile forensics solutions support a variety of device models and operating system versions from different manufacturers. Whether you are investigating an older BlackBerry device or the latest iPhone X, we have you covered. The list of supported devices includes: iPhone and iPad devices (from the first iPhone to iPhone X), all versions of iOS, BlackBerry OS and BlackBerry 10, Windows Phone and Windows Mobile, Android.

Comprehensive tools for the forensic capture of mobile data

The Elcomsoft Mobile Forensic Bundle contains the most important tools for fast, secure and forensically sound collection, decryption and analysis of evidence from a variety of mobile platforms and cloud services.

Forensic analysis of Apple devices

The latest jailbreak-free low-level access to data provides direct, secure and forensically sound extraction for Apple devices running all versions from iOS 11 to iOS 17.
The new agent-based acquisition enables full file system extraction and keychain decryption with no jailbreak and virtually no traces. Full forensic capture using jailbreak is also available.

Get iCloud backups, download photos and synced data, access iCloud passwords

Try iCloud's most comprehensive data collection on the market, providing forensic access to evidence stored in the cloud with and without the Apple ID password.

Access cloud backups, call logs, messages, passwords (iCloud Keychain), contacts, iCloud Photo Library, iCloud files, Apple Health and Screen Time, geodata and much more. Crack passwords for iOS system backups Brute-force passwords that protect encrypted iOS backups with a high-end tool.

GPU acceleration:

GPU acceleration with AMD or NVIDIA boards enables unrivaled performance, while access to stored passwords enables targeted attacks with custom dictionaries.

The company's patented GPU acceleration, which is used to crack passwords for iOS backups, is unmatched by the competition.

ElcomSoft has developed asynchronous GPU acceleration, which enables the simultaneous use of multiple graphics cards of different brands, models and architectures (AMD and NVIDIA) in a single PC for faster and more cost-effective attacks. Dictionary attack Using prepared dictionaries based on leaked password databases or word lists with highly customizable mutations targeting the human factor and common password patterns.

The tool supports a variety of mutations and tries hundreds of variants for each dictionary word to ensure the best possible chance of password recovery.

Complete over-the-air collection of Google accounts Google collects massive amounts of information from registered customers. The mobile bundle includes the powerful and lightweight forensic tool to extract information from the many sources available, analyze the data and present it in human-readable form.

Extract and analyze the user's detailed location history, search queries, Chrome passwords and browsing history, Gmail messages, contacts, photos and much more.

Support for popular instant messengers: WhatsApp, Skype, Signal, etc. Extract, decrypt and view WhatsApp, Skype, Signal and Telegram communication histories, attachments and contact lists from a variety of devices or cloud services.

Downloading the call histories, if available, only takes a few minutes! Fast download, search and analysis

With Elcomsoft's mobile forensic tools, investigators can save time by reviewing essential information in just moments. With fast downloading of selective information, instant filtering and quick search capabilities, investigators can obtain essential information in minutes.

Reporting and export

A variety of HTML reports are available. HTML reports can be easily printed or displayed in any web browser. In addition, data can be exported to an Excel-compatible XLSX file for further processing and analysis.

Source & more information at: