Over-the-air acquisition from iOS backups stored in Apple iCloud.The correct password is required to decrypt the backup. Įncrypted backups are automatically decrypted. Access to registered phone number or SIM card is required. WhatsApp backups can be pulled from the user’s Google Account and decrypted. Over-the-air acquisition of WhatsApp proprietary backups stored in Google Drive.Rooted (Android 4.0-9.0) and non-rooted (Android 4.0-6.0.1) devices are supported. Direct extraction from Android smartphones.WhatsApp AcquisitionĮlcomsoft Explorer for WhatsApp supports all of the following acquisition methods of WhatsApp databases: Instant filtering and ultra-fast searching allow finding records of interest in a matter of seconds.Įlcomsoft Explorer for WhatsApp is an all-in-one standalone acquisition, extraction and viewing tool for WhatsApp backups. The built-in viewer offers convenient view of messages, calls and pictures stored in multiple WhatsApp databases obtained from the different sources. Two-factor authentication is supported for both Apple and Google accounts.

Downloading cloud backups from Apple iCloud and iCloud Drive requires entering the user’s Apple ID and password or using a binary authentication token extracted from the user’s computer, while Google Drive downloads require a login and a password.

Encrypted backups can be automatically decrypted providing that the correct password is supplied.

The tool supports both rooted and non-rooted Android phones. The tool offers multiple acquisition options to extract and decrypt WhatsApp data from multiple local and cloud sources including Android smartphones, iOS system backups (iTunes and iCloud), and WhatsApp proprietary cloud backups in Google Drive and iCloud Drive. Elcomsoft Explorer for WhatsApp (EXWA) is a Windows tool to acquire, decrypt and display WhatsApp communication histories.

Elcomsoft explorer for whatsapp cracked