


In this release, Elcomsoft Distributed Password Recovery adds support for FileVault 2 volumes stored on APFS-formatted disks. On Mac computers, APFS implements encryption via FileVault 2, a full-disk encryption feature that is built in to macOS. According to Apple, APFS is optimized for modern solid-state storage, and engineered with encryption as a primary feature. The APFS (Apple File System) is Apple's next-generation file system designed to scale from an Apple Watch to a Mac Pro. Read more in the article Breaking VeraCrypt containers.īreaking FileVault 2 encryption on APFS volumes Elcomsoft Distributed Password Recovery 4.20 adds VeraCrypt support, enabling investigators to unlock the most vigorously protected evidence. Volumes protected with VeraCrypt require a full-scale brute-force attack on the original plain-text password. Devoid of any major vulnerabilities, VeraCrypt is one of the most secure encrypted containers. VeraCrypt is the most popular third-party full-disk encryption product, a de-facto successor to TrueCrypt. While FileVault 2 is actively used on many macOS devices, VeraCrypt is the favorite of those who really have something to hide." "FileVault and VeraCrypt are equally important for the law enforcement and corporate IT experts performing internal investigations. "The use of full-disk encryption makes the work of forensic experts more difficult than ever," says Vladimir Katalov, ElcomSoft CEO. The update enables forensic access to disks protected with VeraCrypt, APFS volumes encrypted with FileVault 2, and recovers Tally Vault passwords. updates Elcomsoft Distributed Password Recovery with support for an even wider range of encrypted and locked evidence.
