Home > Pass-phrase recovery
Recovering passwords using Pass-phrase attack
Reset Windows Password v14.2
Telegram data recovery, Photo Database and Media Player investigation tools, and some more
Office password recovery tools
Resetting VBA passwords
New blog post
Dumping the history of users' IP addresses in Windows
Reset Windows Password v14.1
IP addresses history viewer, fast disk search, local security editor and some more

Articles and video

You may find it helpful to read our articles on Windows security and password recovery examples. Video section contains a number of movies about our programs in action

Password Recovery - pass-phrase attack

More and more users choose to create their passwords of entire phrases, passages from poems, movie aphorisms, lyrics, etc. Attempting to recover such passwords using the traditional techniques is unthinkable. Therefore, the recovery help comes with the predefined and known phrase attack.

Pass-phrase recovery was developed by our company. It is by much similar to the simple dictionary attack, except that here the password search goes phrase by phrase instead of going word by word. The main idea of the attack is to guess the right password by searching through predefined frequently used expressions, phrases, sayings, word combinations, etc.

For example, if the sought password is made of the widespread phrase 'To be or not to be', it is obvious that this is the only attack that has the virtue to cope with such a password. In order to do that, you are to specify a special pass-phrase dictionary.

A simple phrase dictionary comes with the program, but you can also download the online dictionaries that were compiled specifically for this recovery type.

99 percent of the success in the recovery of a password with a phrase attack depends on the quality of the dictionaries. Most likely, that is the reason why this type of attacks doesn't appear in just about any password cracker. For example, many users make their passwords of excerpts from their favorite songs or music bands. That's why we have created special, unique (you won't find anything like that anywhere on the Net!) music-oriented keyphrase sets. There's also a biblical set, movie phrases, proverbs, etc.


Phrase dictionaries

Phrase attack

The password-phrase attack options almost completely repeat the simple dictionary attack options: here, you also are to select one or several dictionaries for the phrase source, and it has the same way for setting phrase mutation rules.


Phrase mutation

Pass-phrase mutation

As you might have known strong mutation significantly raises chances for the successful recovery. Weak mutation is normally justified in only one case: for increasing the attack speed. Medium mutation is a normal balance between the operating speed and the number of generated password phrases. Strong mutation allows finding more difficult passwords by generating the widest range of all possible combinations, to the prejudice of the search speed. The greater is the mutation level, the more passwords the attack will cover.

The major difference in mutation levels:

  • Weak - simplest thus fastest mutations.
  • Normal - the same as Weak, but generates several additional mutations and case combinations.
  • Strong - maximal mutation level.
  • Ultra light - this is a 2-step mutation because every generated in Weak mode password goes through the second (Weak) mutation round.
  • Ultra normal - 2-step mutation. Every password generated in Normal mode is used as a source to generate additional combinations by implementing additional Normal mutation level.
  • Ultra hard - every password generated in Strong mode is used as a source to generate additional combinations by using additional Strong mutations.
Be careful! Ultra modes generate a great number of passwords, thus the attack may be running extremely slow. To speed up the attack, consider setting up input phrase limits. For example, you can limit input phrases to 5 words and 27 characters.

Dictionary generator

Phrase dictionary generator

The third tab uses for creating pass-phrase dictionaries.