Passware Kit shows “No password” or “Password not found” message in case no “Password” protection was set in BitLocker encryption. Mostly it means your BitLocker volume was encrypted with a Recovery Key which cannot be found with the brute-force method but only extracted from a memory image or hiberfil.sys. Please refer to the image below showing the Log in such cases:
To check what protectors were used, you can get a list of protectors for your BitLocker encrypted volume using the following steps:
1. Press “Start” button, write “cmd” in the search field, right-click cmd.exe and choose “Run as Administrator.
2. Press “Yes” in the appeared window
3. In the black window after C:\Windows\system32>right-click on the line and paste the following:
C:\Windows\System32\manage-bde.exe -status X: , where X is the volume or partition letter
You should get the answer like the following:
C:\pk-test-cases>C:\Windows\System32\manage-bde.exe -status f: BitLocker Drive Encryption: Configuration Tool version 6.1.7601 Copyright (C) Microsoft Corporation. All rights reserved. Volume F: [New Volume] [Data Volume] Size: 4,88 GB BitLocker Version: Windows 7 Conversion Status: Fully Encrypted Percentage Encrypted: 100% Encryption Method: AES 128 with Diffuser Protection Status: Protection On Lock Status: Unlocked Identification Field: None Automatic Unlock: Disabled Key Protectors: Password Numerical Password
If you do not have “Password” mentioned under “Key Protectors”, then Passware Kit cannot assign Brute-force attack on your BitLocker encrypted volume.
We can only recommend you to try searching for the protectors used on other devices and disks.
西数科技: 司法鉴定/产品质量鉴定/检验检测/数据恢复专家. 4006184118
常见问题解答
BitLocker恢复时提示“没有发现密码”是什么意思?
这表示您的BitLocker卷在加密时没有设置密码保护,而是使用了恢复密钥(Recovery Key)。Passware Kit等工具无法通过暴力破解方式找到密码,只能从内存镜像或休眠文件(hiberfil.sys)中提取恢复密钥。建议您检查加密设置,确认是否使用了恢复密钥而非密码。
如何检查BitLocker卷使用了哪些保护器?
您可以按以下步骤操作:点击“开始”按钮,在搜索框中输入“cmd”,右键单击cmd.exe并选择“以管理员身份运行”。然后在命令提示符中输入相关命令(如manage-bde -protectors -get 盘符),即可列出该BitLocker卷使用的所有保护器,包括密码、恢复密钥等。这有助于判断为何出现“没有发现密码”的提示。
BitLocker恢复密钥无法通过暴力破解找到,该怎么办?
如果BitLocker卷使用恢复密钥而非密码,暴力破解方法无效。您需要从内存镜像或hiberfil.sys文件中提取恢复密钥。建议使用支持内存分析的工具(如Passware Kit)进行提取,或检查系统是否生成了休眠文件。若无法自行处理,可联系专业数据恢复服务,尤其是涉及服务器或重要数据时。