Decrypt WD My Passport Disks and Macs with T2 Chip With the New Passware Device Decryption Add-on

Securing digital content through built-in hardware encryption in hard drives has become increasingly popular. This convenience, however, creates a unique challenge for forensic examiners.

To address this, Passware introduces Device Decryption Add-on — a specialized solution designed for decrypting Western Digital My Passport HDD and Macs equipped with Apple T2 Security Chips. This tool is compatible with My Passport Series 2018-2022 disks with built-in 256-bit AES hardware encryption, providing the capability to unlock or decrypt them, and recover original protection passwords.

The Device Decryption Add-on is integrated into Passware Kit Ultimate 2023 v4 and is available as an option for Passware Kit Forensic.

The new version of Passware Kit also features instant recovery of Wi-Fi passwords and extraction of network credentials from the standalone Windows “Users” and “Config” folders.

Passware Kit 2023 v4 now detects and analyzes Mozilla key4.db database files, which allow for the recovery of the Mozilla Master password. As a result of the GPU-accelerated recovery, Passware Kit immediately extracts website and email passwords saved in the latest versions of Firefox and Thunderbird.


Get The Latest DFIR News

Join the Forensic Focus newsletter for the best DFIR articles in your inbox every month.

Unsubscribe any time. We respect your privacy - read our privacy policy.


Password recovery for NTLMv2 hashes can now be accelerated on NVIDIA and AMD GPU. And finally, Passware Kit 2023 v4 adds full support for the newly released macOS Sonoma.

What’s new in Passware Kit 2023 v4:

  • GPU-accelerated password recovery and decryption of Western Digital drives
  • Decryption of Windows network credentials for standalone systems
  • Master password recovery for the latest Mozilla Firefox and Thunderbird
  • GPU acceleration for NTLMv2 hashes
  • Optional recovery of PDF owner passwords
  • Support for macOS 14 Sonoma

GPU-accelerated password recovery and decryption of Western Digital drives

Passware introduces Device Decryption Add-on — a specialized solution designed for decrypting Western Digital My Passport drives and Macs equipped with Apple T2 Security Chips. This tool is compatible with My Passport Series 2018-2022 HDD with built-in 256- bit AES hardware encryption, providing the capability to unlock or decrypt them, and recover original protection passwords.

The Device Decryption Add-on is integrated into Passware Kit Ultimate 2023 v4 and is available as an option for Passware Kit Forensic. All T2 Add-on users with a valid license will get a complimentary upgrade to the Passware Device Decryption Add-on.

Decryption of Windows network credentials for standalone systems

Passware Kit 2023 v4 features instant recovery of Wi-Fi passwords, GPU-accelerated recovery of Windows user passwords, and subsequent instant extraction of network credentials from the standalone Windows “Users” and “Config” folders. These credentials include passwords for network connections and Internet Explorer 11 websites.

As Wi-Fi passwords can be recovered instantly, they are first checked for Windows users. If any match, the corresponding Windows credentials for these users are extracted instantly.

Master password recovery for the latest Mozilla Firefox and Thunderbird

Passware Kit now detects and analyzes key4.db database files from Mozilla version 58 and higher. This database file allows for the recovery of the Mozilla Master (also known as Primary) password and the immediate extraction of website passwords and email credentials saved in the latest versions of Firefox and Thunderbird. The master password recovery can be accelerated on GPU, reaching 400,000 passwords per second on NVIDIA GeForce RTX 4070 Ti.

GPU acceleration for NTLMv2 hashes

The latest version of Passware Kit accelerates password recovery for NTLMv2 hashes, which normally store network credentials, on NVIDIA and AMD GPUs. The recovery speed is now up to 1,3 bn passwords per second on NVIDIA GeForce RTX 4070 Ti.

Optional recovery of PDF owner passwords

For PDF files, Passware Kit can now be set to recover user passwords only, skipping the recovery of owner passwords and thus reducing the overall number of tasks in batch mode. This option can be enabled and disabled at Tools|Options.

Support for macOS 14 Sonoma

Passware Kit 2023 v4 fully supports the newly-released macOS 14 Sonoma, including APFS decryption and password recovery for Keychain files.

Learn more about this release on the Passware blog.

Leave a Comment

Latest Articles