Extract Skype Conversations, Messages, Files and Metadata
The latest update enables the downloading of Skype conversation histories, files, contact lists and metadata directly from the user's Microsoft account. Individual and group chats, text messages and attachments are extracted. The downloading of the entire conversation of an average Skype history only takes minutes!
For deleted chats and messages as well as for files purged from Skype servers after the 30-day retention period, Elcomsoft Phone Breaker can obtain metadata such as the date and time the file was deleted, the file's name and size, sender's Skype ID and the name of the chat.
New iCloud Engine, Low-Level Access to iCloud Drive
The new and improved iCloud download engine is faster and significantly more robust than ever. Thanks to the new iCloud engine, Elcomsoft Phone Breaker becomes the first and only tool on the market that can download iCloud backups produced by Apple devices running all versions of iOS up to the latest iOS 13.2.
Advanced iCloud Drive structure analysis is an optional feature allowing users to enable deep, low-level analysis of iCloud Drive secure containers. While high-level file and folder access is all you need in most circumstances, the more comprehensive low-level extraction will return the missing bits and pieces scattered around in legacy containers.
Logical Acquisition of iPhone, iPad and iPod Touch Devices
Elcomsoft Phone Breaker enables forensic access to information stored in a wide range of Apple devices running all versions of iOS. The tool can brute-force passwords and decrypt iOS backups using GPU acceleration, decrypt and analyze passwords stored in iOS Keychain. The tool can download iCloud backups and synchronized data, and access protected data such as iCloud Keychain, iCloud Messages and Health.
Cloud Acquisition via Apple iCloud and Microsoft Account
Cloud acquisition is a highly effective way of retrieving up-to-date information backed up or synced by modern smartphones with their respective cloud services. Elcomsoft Phone Breaker supports the extraction of cloud backups and synced data from Apple iCloud and Microsoft Account, enabling remote acquisition of iPhone and iPad devices as well as smartphones running Windows Phone and Windows 10 Mobile.
Online backups can be acquired by forensic specialists without having the original iOS or Windows Phone device in hands. All that’s needed to access online backups stored in the cloud service are the original user’s credentials including Apple ID or Live ID accompanied with the corresponding password.
Access iCloud without Login and Password 
If the user’s Apple ID and password are not available, Elcomsoft Phone Breaker can use a binary authentication token created by Apple iCloud Control Panel in order to login to iCloud and retrieve information. The use of authentication tokens allows bypassing two-factor authentication even if no access to the secondary authentication factor is available.
Acquire iCloud Keychain
Elcomsoft Phone Breaker is the only tool on the market to access, extract and decrypt iCloud Keychain, Apple's cloud-based system for storing and syncing passwords, credit card data and other highly sensitive information across devices. As opposed to authorizing a new Apple device, Elcomsoft Phone Breaker does not become part of the circle of trust and does not require a middleware device, thus offering truly forensic extraction of protected records.
Extract Screen Time Passcode from iCloud
The Screen Time passcode is an optional feature in iOS 12 and newer that can be used to secure the Content & Privacy Restrictions. Once the password is set, iOS will prompt for the Screen Time passcode if an expert attempts to reset the device backup password (iTunes backup password) in addition to the screen lock passcode. As a result, experts will require two passcodes in order to reset the backup password: the device screen lock passcode and the Screen Time passcode. Since the 4-digit Screen Time passcode is separate to the device lock passcode (the one that is used when locking and unlocking the device), it becomes an extra security layer effectively blocking logical acquisition attempts.
By extracting and analyzing Screen Time information, experts can extract Screen Time passwords,
thus gaining the ability to remove Screen Time protection and/or to reset the password protecting local (iTunes) backups. This in turn makes logical acquisition easily possible.
Download Health and Messages from iCloud
Apple supports Health and Messages sync through iCloud. Elcomsoft Phone Breaker is the first tool on the market to extract and decrypt messages from iCloud complete with attachments, extract and decrypt Health data. To access Health and Messages, the login and password to the user's Apple Account, one-time code to pass Two-Factor Authentication and a screen lock password or system password for one of the already enrolled devices are required.
Decrypt FileVault 2
Elcomsoft Phone Breaker can extract escrow decryption keys from the user’s Apple account, and make use of those keys to decrypt macOS FileVault 2 volumes even if user account password is not known.
Note: At this time, Elcomsoft Phone Breaker can only decrypt HFS+ volumes.
When downloading iCloud backups created with iOS 11.2 from accounts with Two-Factor Authentication, a temporary account lock is possible. The user will be required to reset their iCloud password.