Starting with version 2026.2, Passware Kit Forensic and Ultimate include the “Cache the tried passwords for slow processes” option in the Tools | Files and Folders menu. This allows users to avoid double-checking the same passwords for a protected item if it has already been checked within a different password recovery attack. This option applies to select item types with strong encryption.
The list is as follows:
- APFS T2 images;
- VeraCrypt (Default PIM) containers;
- LUKS/LUKS2 (Argon2i, Argon2id) images;
- Ethereum Wallet files.
In Passware Kit Mobile the following devices are supported since 2026.4:
- Apple devices;
- Samsung Exynos-based models with FDE;
- some Qualcomm-based devices with FBE;
- Huawei Kirin smartphones with on-device password verification.
Contact Support to request this option for another file type.
Passware Kit stores the previously tried passwords in a TXT file associated with the specific item and only checks the unique password candidates. This significantly reduces the overall time it takes to recover a password.
Passware Tip: You can manually edit the cached-passwords TXT file to exclude or add some passwords. Make sure you use the UTF-8 encoding and list one password per line with the
\nline break. For reliable results, clear the recovery states or start the password recovery over again.
The cache TXT files are stored locally in the %APPDATA% (Win) / ~Library (Mac) directory by default. Alongside the TXT file, a corresponding .json file is created to store metadata about the item including its name, path, and encryption flags.
The current cache size is calculated and displayed on the bottom of the Option section. To remove all the cached passwords, select "Cached passwords” at Tools | Clear and Reset.
Passware Tip: The usage of the password caching feature for protected items can be verified in the Logs tab of the Passware Kit.
NOTE: While working with the same protected item, the cache file will be appended with new passwords even if the attack model changes. When transferring the job to another computer, ensure make sure to copy the “cached-passwords” folder to a new machine in the same location.
Comments
0 comments
Article is closed for comments.