Passware Kit shows "No password" or "Password not found" message in case no "Password" protection was set in BitLocker encryption. Mostly it means your BitLocker volume was encrypted with a Recovery Key which cannot be found with the brute-force method but only extracted from a memory image or hiberfil.sys. Please refer to the image below showing the Log in such cases:
To check what protectors were used, you can get a list of protectors for your BitLocker encrypted volume using the following steps:
1. Press "Start" button, write "cmd" in the search field, right-click cmd.exe and choose "Run as Administrator.
2. Press "Yes" in the appeared window
3. In the black window after C:Windowssystem32>right-click on the line and paste the following:
C:WindowsSystem32manage-bde.exe -status X: , where X is the volume or partition letter
You should get the answer like the following:
C:pk-test-cases>C:WindowsSystem32manage-bde.exe -status f: BitLocker Drive Encryption: Configuration Tool version 6.1.7601 Copyright (C) Microsoft Corporation. All rights reserved. Volume F: [New Volume] [Data Volume] Size: 4,88 GB BitLocker Version: Windows 7 Conversion Status: Fully Encrypted Percentage Encrypted: 100% Encryption Method: AES 128 with Diffuser Protection Status: Protection On Lock Status: Unlocked Identification Field: None Automatic Unlock: Disabled Key Protectors: Password Numerical Password
If you do not have "Password" mentioned under "Key Protectors", then Passware Kit cannot assign Brute-force attack on your BitLocker encrypted volume.
We can only recommend you to try searching for the protectors used on other devices and disks.
常见问题解答
BitLocker恢复时提示“没有发现密码”是什么意思？
这通常表示您的BitLocker卷未设置密码保护，而是使用了恢复密钥（Recovery Key）进行加密。恢复密钥无法通过暴力破解方式找到，只能从内存镜像或hiberfil.sys文件中提取。因此，Passware Kit会显示“No password”或“Password not found”消息，提示您需要改用其他方法获取密钥。
如何检查BitLocker卷使用了哪些保护器？
您可以通过命令行检查BitLocker卷的保护器列表。点击“开始”按钮，在搜索框中输入“cmd”，右键选择“以管理员身份运行”，然后执行命令“manage-bde -protectors -get C:”（将C:替换为您的卷标）。输出结果会显示所有保护器类型，如密码、恢复密钥或TPM等，帮助您确认加密方式。
如果BitLocker卷只有恢复密钥，如何恢复数据？
如果BitLocker卷仅使用恢复密钥保护，无法通过暴力破解密码的方式恢复。您需要从系统的内存镜像（如RAM dump）或休眠文件（hiberfil.sys）中提取恢复密钥。Passware Kit支持分析这些文件以获取密钥，从而解密卷。请确保在系统休眠或崩溃后及时获取这些文件，以提高恢复成功率。