Elcomsoft Phone Breaker

Gain full access to information stored in FileVault 2 containers, iOS, Apple iCloud, Windows Phone and BlackBerry 10 devices! Download device backups from Apple iCloud, Microsoft OneDrive and BlackBerry 10 servers. Use Apple ID and password or extract binary authentication tokens from computers, hard drives and forensic disk images to download iCloud data without a password. Decrypt iOS backups with GPU-accelerated password recovery.

$199.00$799.00

Share

Description

Elcomsoft Phone Breaker performs logical acquisition of mobile devices running Apple iOS, Windows Phone 8/8.1, Windows 10 Mobile and BlackBerry 10. Extract information from password-protected backups, recover the original plain-text password with GPU acceleration or retrieve data directly from the cloud. Supporting all current AMD and NVIDIA video cards, the new iPhone password recovery tool offers supercomputer performance at consumer prices.

Download information in real time from Apple iCloud! Elcomsoft Phone Breaker is the only forensic tool that can acquire data stored in iCloud with or without Apple ID and password. Cloud acquisition is an alternative way of retrieving information stored in mobile backups produced by Apple iOS, and the only method to explore Windows Phone 8 devices. Elcomsoft Phone Breaker can retrieve information from Apple iCloud and Windows Live! services provided that original user credentials for that account are known.

  • Break passwords and decrypt iOS backups with GPU acceleration
  • Decrypt iCloud Keychain and Messages with media files and documents from iCloud
  • Obtain synchronized data from Apple and Microsoft accounts
  • Download iCloud backups and synced data with or without Apple ID password

Supports: local iOS backups (iTunes); iCloud and iCloud Drive backups; iCloud synced data (call logs, photos, browsing history etc.) Microsoft Account (with valid authentication credentials); iCloud authentication tokens.

 

Cloud Acquisition via Apple iCloud and Microsoft Account

Cloud acquisition is a highly effective way of retrieving up-to-date information backed up or synced by modern smartphones with their respective cloud services. Elcomsoft Phone Breaker supports the extraction of cloud backups and synced data from Apple iCloud and Microsoft Account, enabling remote acquisition of iPhone and iPad devices as well as Windows devices, Skype and other Microsoft software.

Online backups and synchronized data can be acquired by forensic specialists without having the original iOS device in hands. All that’s needed to access online data stored in the cloud service are the original user’s authentication credentials including the second authentication factor.

 

End-to-End Encryption in iCloud

Elcomsoft Phone Breaker enables access to iCloud data with end-to-end encryption. Protected categories include iCloud Keychain, iCloud Messages, Health, Screen Time and Maps data. Accessing end-to-end encrypted data requires the user’s full authentication credentials including second authentication factor, as well as a system password or screen lock password to one of the user’s devices.

 

iCloud Keychain

Elcomsoft Phone Breaker is the only tool on the market to access, extract and decrypt iCloud Keychain, Apple’s cloud-based system for storing and syncing passwords, credit card data and other highly sensitive information across devices. As opposed to authorizing a new Apple device, Elcomsoft Phone Breaker does not become part of the circle of trust and does not require a middleware device, thus offering truly forensic extraction of protected records.

 

Screen Time Passcode

The Screen Time passcode is an optional feature in iOS 12/13/14 and newer versions that can be used to secure the Content & Privacy Restrictions. Once the password is set, iOS will prompt for the Screen Time passcode if an expert attempts to reset the device backup password (iTunes backup password) in addition to the screen lock passcode. As a result, experts will require two passcodes in order to reset the backup password: the device screen lock passcode and the Screen Time passcode. Since the 4-digit Screen Time passcode is separate to the device lock passcode (the one that is used when locking and unlocking the device), it becomes an extra security layer effectively blocking logical acquisition attempts.

By extracting and analyzing Screen Time information, experts can extract Screen Time passwords,
thus gaining the ability to remove Screen Time protection and/or to reset the password protecting local (iTunes) backups. This in turn makes logical acquisition easily possible.

 

iCloud Messages and Health Data

Apple supports Health and Messages sync through iCloud. Elcomsoft Phone Breaker is the first tool on the market to extract and decrypt messages from iCloud complete with attachments, extract and decrypt Health data. To access Health and Messages, the login and password to the user’s Apple Account, one-time code to pass Two-Factor Authentication and a screen lock password or system password for one of the already enrolled devices are required.

 

Extract Skype Conversations, OneDrive and Vault Files, and Windows 10 Timeline

The tool allows downloading of Skype conversation histories, files, contact lists and metadata directly from the user’s Microsoft account. Individual and group chats, text messages and attachments are extracted. The downloading of the entire conversation of an average Skype history only takes minutes!

For deleted chats and messages as well as for files purged from Skype servers after the 30-day retention period, Elcomsoft Phone Breaker can obtain metadata such as the date and time the file was deleted, the file’s name and size, sender’s Skype ID and the name of the chat.

The tool can download files from the user’s OneDrive. The downloaded files include the content of OneDrive Vault, which is a protected cloud storage for keeping the most sensitive kinds of information. In addition, the tool can obtain metadata for files that have been recently deleted from OneDrive.

Windows Timeline enhances Task View to display the currently running apps and past activities. The Timeline contains historical information about the user’s launched applications, searches, documents and Web browsing history. Along with Windows jumplists, the feature is little known and rarely disabled, giving a valuable insight into the history of system’s usage.

Elcomsoft Phone Breaker can now download Windows 10 Timeline data synchronized to the user’s Microsoft account, enabling experts’ access to timestamped information about the app usage, searches and opened Web pages.

 

Access iCloud without Login and Password

If the user’s Apple ID and password are not available, Elcomsoft Phone Breaker may be able to use a different method for authenticating into iCloud.

First, it can use a binary authentication token to access limited sets of synchronized data. The use of authentication tokens allows bypassing two-factor authentication even if no access to the second authentication factor is available.

The second method offers unrestricted access to everything stored in the user’s iCloud account including end-to-end encrypted data. Instead of using the login and password, you can authenticate to iCloud with the user’s trusted iOS device. By using a trusted device, experts benefit from unrestricted access to all kinds of information stored in the user’s iCloud account including the iPhone backups and end-to-end encrypted data. The trusted device must be unlocked and compatible with a jailbreak or the included agent app.

Brand

ElcomSoft

ElcomSoft offers a comprehensive range of tools for unlocking access to many types of data, recovering passwords and decrypting encrypted files and volumes. The company’s range of mobile forensic products enable forensically sound extraction of evidence from a wide range of smartphones and cloud services.

Additional information

Version

Windows, Macos

Program Edition (Common License)

Professional Edition, Forensic Edition

New Features

Device-based iCloud Authentication

EPB 10 adds the ability to use a trusted iPhone or iPad to perform iCloud extraction without the need to input a password or solve the two-factor authentication challenge. This new authentication method makes every type of data extractable including cloud backups, iCloud photos, and synchronized data including the end-to-end encrypted types.

 

Extract Skype Conversations, Messages, Files and Metadata

The latest update enables the downloading of Skype conversation histories, files, contact lists and metadata directly from the user’s Microsoft account. Individual and group chats, text messages and attachments are extracted. The downloading of the entire conversation of an average Skype history only takes minutes!

For deleted chats and messages as well as for files purged from Skype servers after the 30-day retention period, Elcomsoft Phone Breaker can obtain metadata such as the date and time the file was deleted, the file’s name and size, sender’s Skype ID and the name of the chat.

 

OneDrive, Vault and Timeline

EPB can now download files from the user’s OneDrive storage. The downloaded files include the content of OneDrive Vault, which is a protected cloud storage for keeping the most sensitive kinds of information. In addition, the tool can obtain metadata for files that have been recently deleted from OneDrive.

In addition, Elcomsoft Phone Breaker can now download Windows 10 Timeline data synchronized to the user’s Microsoft account, enabling experts’ access to timestamped information about the app usage, searches and opened Web pages.

Compatibility Chart

Pro
(Win/Mac)
Forensic
(Win/Mac)
General compatibility
Support for iOS 3 through iOS 14 (incl. iPadOS)
Support for all models of iPhone, iPod and iPad
Recover password to iTunes backup ✓/- ✓/-
GPU acceleration for password recovery 32/- 32/-
Apple iCloud
Support for 2FA accounts
Access iCloud with authentication tokens
Download iCloud backups (iOS<11.2)
Download iCloud backups (11.2-13.6 and 14)[1]
Download basic synced data
Download e2e-encrypted synced data (Messages, Health etc)
Download iCloud Photo Library
Download and explore iCloud Keychain
Download extra data from iCloud Drive
Get FileVault2 recovery key
Get Screen Time password, settings and app list
Number of iCloud accounts supported 30 300
Number of iCloud accounts per day 5 5
Other features
Decrypt iOS backups with known password
Explore iOS keychain data
Download data from Microsoft accounts
Decrypt BlackBerry backups and SD cards (OS < 10)
Decrypt BlackBerry 10 backups

Note: password recovery features are available in Windows version only.

Elcomsoft Phone Breaker supports Windows 7, Windows 8/8.1/10 x32 and x64 architectures. Supports password-protected backups to iPhone, iPhone 3G, iPhone 3GS, iPhone 4, iPhone 4S, iPhone 5, iPhone 5C, iPhone 5S, iPhone 6, iPhone 6 Plus, iPhone 6S, iPhone 6S Plus, iPhone 7, iPhone 7 Plus, iPhone 8 and 8 Plus, iPhone X/Xs/Xr, all editions of the iPhone 11, iPad (all generations including the iPad Pro), iPad Mini and iPod Touch (all generations).

Please note that Elcomsoft Phone Password Breaker is NOT the tool to remove iOS Activation Lock or iPhone passcode lock, unlock iPhone from the carrier, jailbreak the iPhone or remove SIM card PIN code. It is intended for recovery of backup passwords only. For more information, read the EPB manual and Phone Password Breaker FAQ.


  1. Note: this feature is never guaranteed. While we are working around the clock to monitor the latest developments in Apple’s cloud ecosystem, even the slightest change to Apple’s proprietary authentication and communication protocols may break cloud-based mobile forensic tools, including Elcomsoft Phone Breaker. More often than not, the changes will affect your ability to download iCloud backups, while other cloud-related featured may remain available. We are working hard to maintain our tools and restore cloud-related functionality as soon as possible. From time to time, the changes are so deep they require additional time to complete the research and testing, making iCloud backups inaccessible for the time being.At this time, all iCloud features offered by Elcomsoft Phone Breaker are fully functional.

System Requirements

Windows

  • Windows 7
  • Windows 8
  • Windows 8.1
  • Windows 10

Apple macOS

  • macOS 10.13 High Sierra
  • macOS 10.14 Mojave
  • macOS 10.15 Catalina
  • macOS 11 Big Sur
  • macOS 12 Monterey

Elcomsoft Phone Breaker supports password-protected backups to all generations of the iPhone, iPad (including all generations of iPad Air and iPad Pro), iPad Mini and iPod Touch (all generations).

Additional Requirements

  • manifest.plist file from iTunes backup (for iTunes backup password recovery)
  • Complete iTunes backup (to read keychain data)
  • Apple ID and password or authentication token (to download iCloud backup or files from iCloud)
  • Windows Live! ID and password (to download Windows Phone backup)
  • BlackBerry ID and password (to decrypt BB 10 backup)
  • One or more of supported NVIDIA or AMD cards(recommended for hardware acceleration of password recovery)

Trial Limitations

Free trial version (Windows) uses all available CPUs and GPUs, but shows only first two characters of backup passwords (hiding the rest under the asterisks), and does not allow dictionary mutations (Windows version only; Mac version does not have password recovery features at all). Also, trial version (Windows and MacOS X) does not show passwords extracted from the keychain, and allows to download only a few specific categories from iCloud backup.

Reviews

There are no reviews yet.

Be the first to review “Elcomsoft Phone Breaker”

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.

Recently Viewed Solutions

InstallAnywhere

$6,478.00$7,198.00

AdminStudio

$4,999.00$28,000.00

PL/SQL Developer

$216.00$648.00

Snagit

$62.49

Camtasia

$299.99

ImmuniWeb® Discovery

$199.00$995.00

InstallShield

$4,497.00$7,423.00

ImmuniWeb® On-Demand

$499.00$4,995.00