What logs does Passware Kit generate?

For audit and troubleshooting purposes, Passware Kit generates various types of logs. This article aims to provide valuable insights into their purpose.

• Log files location and description
  • Windows
  • macOS
  • Linux
• Logging levels
• UI logging process
  • Find Encrypted Files Log
  • Recovery Process Log
  • Network Log
• Troubleshooting

Log files location and description

By default, starting from version 2025.1, all Passware Kit log files are saved in the pw-logs folder (logs folder for previous PK versions).

Passware Tip: The default location of the logs can be changed in Tools | Options | Logs Folder in the Save log files to... field.

The location of the pw-logs folder depending on the Passware edition is as follows:

Windows

• Passware Kit Basic, Standard, Standard Plus, Business, Forensic, and Ultimate
  %APPDATA%\Passware\Passware Kit\Current\
• Passware Kit Mobile
  %APPDATA%\Passware\Passware Kit Mobile\
• Passware Kit Agent
  %APPDATA%\Passware\SearchAgent\Logs

NOTE: If Passware Kit is installed for “All Users”, the root folder is %PROGRAMDATA%\Passware\

macOS

• Passware Kit Basic, Standard, Standard Plus, Business, Forensic, and Ultimate
  Users/<Current User>/Library/Application Support/Passware/Current
• Passware Kit Mobile
  Users/<Current User>/Library/Application Support/Passware Kit Mobile/

Linux

• Passware Kit Agent
  The "Logs" folder is included in the provided tar.gz archive, located in the same folder as the Agent’s executable file.

The files that may be stored in the pw-logs folder are as follows:

• engine-process-<DATETIME>.log
  The engine process used to launch the Passware Kit.
• main-process-<DATETIME>.log
  The main log, which includes information about current processes, warnings and errors.
• .engine-process-logs-audit.json
  The list of all engine logs.
• .main-process-logs-audit.json
  The list of all main-process logs.
• PasswareKit.log
  Errors of the Passware Kit.
• PasswareKitMobile.log
  Errors of the Passware Kit.
• PasswareKitAttacks-<DATETIME>-(<SOME-HASH>).txt 
  The distributed password recovery process logs.

Passware Tip: The Help | Save Logs option in Passware Kit creates a ZIP archive that contains all log files.

Logging levels

There are several logging levels in the Passware Kit, which can be set in Tools | Options | Logs:

• Info (default) 
  Logs high-level events and information, including application version, launch times, recovery process data (passwords and file names are not stored), errors and warnings. Keep this level for regular troubleshooting.
• Errors 
  Collects information that refers to errors. We do not recommend using this level unless requested by the Support Team.
• Warnings
  Collects information about warnings. We do not recommend using this level unless requested by the Support Team.
• Debug
  Detailed logging, which is used for support troubleshooting purposes. May require additional space. This level should only be used by special request from our Support Team.
• Disabled
  No logs are collected by the Passware Kit. We do not recommend disabling the main-process logs.

Only one level can be selected for each module. The logs can be exported from the Help|Save Logs menu.

UI logging process

The Log tab of the Passware Kit displays a real-time log of events during file analysis and password recovery.

The Find Encrypted Files option logs events of the scan process. The results are displayed on the Log tab. You can apply filters for a precise review of potential warnings or errors. Use the “Save Log…” button to save the log as a CSV file.

NOTE: A log saved via “Save Log…” button differs from the technical logs and should only be provided as an addition to the main log files.

During the password recovery process, the Log tab displays the events and attack results, as well as warnings and errors.

The Network Log tab displays the same type of network and Agent-related events as in the Resource Manager. This functionality is available for each connected Passware Kit Agent.

Passware Tip: All logs can be cleared using the Tools | Clean and Reset… option in the Passware Kit by selecting the “Log files” and clicking “Clear”.

Troubleshooting

In the case of a Bug report, click the “Save” button to save the error details into a ZIP archive. In addition, choose “Save Logs” from the Help menu of the Passware Kit. Then send both archives as well as screenshots and description of the issue to Passware Support.

If an error is displayed on the Log tab, click the “Show Report…” link and save the Bug Report for further analysis.

Review our Passware Customer Support Policy and Troubleshooting section.