What Kinds of Locked, Encrypted, or Protected Data Can Elcomsoft Tools Access?

Elcomsoft tools target three broad categories of protected data: encrypted files and volumes on computers, data locked inside smartphones, and information held in cloud services. The company positions these tools for law enforcement, business, and home users, with the stated goal of recovering passwords, decrypting protected data, and extracting evidence in a forensically sound way. Whether a specific tool fits your case depends on the device, the type of protection, and your use context (investigation, IT audit, or personal recovery).

Password Recovery and Decryption of Files and Volumes

Elcomsoft describes its product range as covering "recovering passwords and decrypting encrypted files and volumes." In practice, this category addresses data you can see but cannot open because it is protected by a password or encryption layer.

• Encrypted files — documents or archives that require a password to open.
• Encrypted volumes — container or disk-level encryption that blocks access until unlocked.

The company states its tools are designed to regain control over "locked, encrypted or password-protected data," which is the phrase it uses for business customers conducting security audits or recovering access to their own data.

Mobile Forensic Extraction from Smartphones

The mobile forensic product line is described as enabling "forensically sound extraction of evidence from a wide range of smartphones." This is the category most associated with law enforcement use, where the goal is not just access but preservation of evidence in a form that can be presented in court.

Key points from the company's own description:

• Extraction covers a wide range of smartphones, not a single platform.
• The process is presented as forensically sound, meaning the extraction method is intended to preserve the integrity of the evidence.
• Elcomsoft states that evidence recovered with its tools is admissible in court and that the tools are "fully accountable."

Cloud Service Data Extraction

Alongside device extraction, Elcomsoft lists "cloud services" as a source of evidence. This means data that lives in a cloud account rather than on the physical device — for example, backups, synced files, or account-stored information tied to a phone or computer.

The company frames this as part of its mobile forensic offering: extraction from "a wide range of smartphones and cloud services." For an investigation, this matters because data may exist in the cloud even when it is not present on the seized device.

Forensically Sound Evidence Recovery

The phrase "forensically sound" appears repeatedly in Elcomsoft's materials and is the thread connecting all three categories. For law enforcement and forensic customers, the value is not only accessing the data but doing so in a way that stands up to scrutiny.

The company makes several related claims:

Matching the Data Type to Your Situation

The three audiences Elcomsoft names — law enforcement, business, and home users — map onto these data categories in different ways:

• Law enforcement and forensic teams are the primary audience for mobile and cloud extraction, where chain-of-custody and admissibility matter most.
• Businesses are pointed toward regaining control over locked or encrypted data and running security audits, plus extracting information from mobile devices.
• Home users are served through a separate tools category, though the site does not detail specific home-use capabilities in the material available.

If your question is "can Elcomsoft access this specific protected data," the answer depends on which of the three categories it falls into — a file or volume, a phone, or a cloud account — and on whether your use case is an investigation, a corporate audit, or personal recovery. The company's product pages and the "All Products" listing are the place to confirm coverage for a particular device or encryption type, since the general description does not enumerate every supported format.

For pricing and licensing, the site links to a Purchase page and mentions subscriptions, but the available material does not list specific prices or terms, so those details need to be checked directly on the purchase page.