Choosing Password Recovery Tools in 2026: Online, Desktop, and Open Source

If you lost the password to a Microsoft Office document, a ZIP archive, a RAR archive, a 7z archive, or a PDF file you personally own, the 2026 landscape is easier to map than the marketing pages suggest. You are choosing among four categories: paid online password recovery services, free online tools, desktop password recovery software, and free/open-source tools such as Hashcat and John the Ripper. Paid cloud services are worth it when you need GPU acceleration without building a lab, and when the vendor’s pricing model—success-based pricing or an upfront fee with a documented refund—matches your risk. Free online options are enough for older or weaker encryption and simple passwords. Desktop products such as Passware and Elcomsoft keep the file on your machine. Command-line tools remain the most powerful option for people who already have a GPU and the time to configure an attack. No honest tool guarantees recovery of a long, random password protected with AES-256 encryption.

This guide is for recovering passwords on files you lawfully possess. It is not a way to open someone else’s documents.

Why recovering a forgotten file password is hard

People lose file-open passwords for ordinary reasons: a ZIP created years ago, an Excel workbook inherited from a colleague, a PDF exported with a password that never went into a password manager. The technical problem is not “the file is broken.” It is that modern formats store a verifier derived from the password with a strong cipher.

Microsoft Office documents from Office 2007 onward, current ZIP and 7z archives, many PDF owner/user passwords, and RAR5 all commonly use AES-256 encryption. Older Office files (Office 97–2003) often used the RC4 cipher and a much weaker verifier; those are the cases where a free web form or a short dictionary still has a realistic chance. In 2026, a random 12-character password on AES-256 is not something you should expect any commercial or open-source product to recover in a useful amount of time. Specialized tools exist because they automate dictionary attacks, brute-force attacks, and hardware scheduling—not because they bypass AES.

Different containers also expose different “hooks” to a recovery program. A ZIP may be ZipCrypto or AES. RAR and RAR5 are not interchangeable. A PDF may use an older revision or a newer AES-based standard. Office has file-open passwords, which recovery tools target, and other protection types (such as some worksheet-modify flags) that are not the same problem. That is why a single “password remover” page cannot honestly claim every format.

Damaged files are a separate issue. Password recovery assumes an intact encrypted container. If the archive headers are truncated, recovering the password will not reconstruct missing payload bytes.

How to evaluate password recovery tools

Use this checklist before you upload a file or buy a license:

• Legal fit. The vendor should state that the service is for files you own. If the copy never says that, treat it as a warning.
• Success expectations. Ask what happens on failure. “We always succeed” is a red flag. Realistic pages talk about password length, character set, and encryption generation.
• Supported file types. Confirm Microsoft Office (Word, Excel, PowerPoint), ZIP archives, RAR archives, 7z archives, and PDF files separately—not as one vague “Office & archives” badge.
• Encryption standards. AES-256 encryption versus the RC4 cipher (legacy Office) changes the odds more than the brand name on the box.
• Speed. GPU acceleration in the cloud or on a local card is what makes large dictionaries and short brute-force ranges practical.
• Privacy. Online services see at least a hash or a file. Desktop and CLI tools can stay offline. Some online vendors offer a hash-only / feature-extract path so the original file never leaves your disk.
• Pricing model. Success-based pricing charges when a password is found. Others charge a flat professional fee, sometimes with a refund if recovery reaches a documented failure state. Desktop tools are usually a license. Open-source is free of license cost but not free of electricity and time.
• Ease of use. A browser upload versus installing Passware Kit versus writing Hashcat commands.
• Support. A real contact address matters when a format is mis-detected or a payment does not match a task.

Catpasswd is one online option on that list: a cloud service online since 2016, with free and professional recovery, a 10M+ password dictionary, and no command-line requirement. It does not replace a forensic workstation, and it does not promise a 100% success rate.

Paid online password recovery services: when they are worth it

Online password recovery services exist for people who need GPU-class search without buying cards or learning Hashcat. Typical advantages are a queue that already has hardware, support for several file families in one upload box, and a pricing page you can read before you commit.

They are worth paying for when:

• The file uses a format the service actually documents (not an implied “all encryption”).
• You remember something about the password (length, language, a base word) or you know it was human-chosen rather than a 20-character random string.
• You accept that AES-256 plus a high-entropy password may still fail.
• You have read how the vendor handles failure—success-based pricing, or an upfront professional fee with a written refund rule.

Examples of this category, which you should compare on their own terms:

• LostMyPassPro publishes a universal guide covering ZIP, RAR, PDF, Office, and 7z and is frequently cited for success-based pricing on online recovery.
• passwordrecovery.io positions itself around structural recovery for Office, archives, and hashes.
• OfficePassword.net focuses on Word, Excel, and PowerPoint check-and-recover flows.
• Catpasswd is a cloud recovery platform for forgotten RAR, ZIP, Office, Excel, PDF, and 7z passwords. Free recovery is available; Professional recovery is $7.49; expert/custom work starts at $89.99. Professional orders paid on or after 1 August 2026 that reach a terminal failure may be refunded minus a small handling fee (terms). That is not the same as success-based pricing: you pay the professional fee to run a deeper search, and the refund applies only if that run finishes without a password. Success is still not guaranteed.

Use a paid online service when time and setup cost more than the fee. Skip it when you already run Hashcat on a capable GPU, or when the password is known to be long and random.

Free online options: limits and legitimate use cases

Free online tools and free tiers of paid sites are useful for a narrow band of jobs: older Microsoft Office files that still use the RC4 cipher, ZipCrypto ZIP archives, short or reused passwords, and “check whether this file is even encrypted the way I think.” They usually combine some of: lower success rates, file-size caps, slower queues, advertising, or limited encryption generations.

Risks to weigh:

• You are sending a file or a derived hash to a third party. Prefer vendors that explain retention and deletion. Catpasswd’s help center describes a feature-extraction path so the original document does not need to be uploaded.
• A “remover” that unlocks every AES-256 Office file for free in the browser is not describing real cryptography.
• Office Password Remover is one widely advertised free-oriented Office option; treat its scope as “legacy or weak protection,” not as a 2026 AES-256 guarantee.

Free is enough when the password was a pet name or a short numeric PIN and the file is an older generation. It is not a substitute for GPU search against a modern RAR5 or AES ZIP.

Desktop password recovery software

Desktop password recovery software is the right category when the file cannot leave the building, when you already have a workstation GPU, or when you need a licensed product for repeated jobs.

Notable names:

• Passware (Passware Kit) is a long-standing commercial suite for many encrypted formats, with GPU support and a forensic-oriented SKU.
• Elcomsoft sells specialist tools and publishes technical explainers, including a 2026 overview of unlocking ZIP, RAR, PDF, and Microsoft Office passwords.
• PassFab and Passper sell consumer-facing Windows applications for Office, PDF, and archives.

Benefits: offline operation, control over dictionaries and masks, no upload. Costs: a license, a machine that may need to stay on for days, and the same cryptographic limits as everyone else. A desktop license does not make AES-256 weaker.

Open-source and command-line tools

Hashcat and John the Ripper are the reference free/open-source tools for people who can extract a hash, choose an attack mode, and point the job at a GPU. They are excellent at dictionary attacks and brute-force attacks (including mask attacks that constrain charset and length). They are a poor first step if you only wanted to open last year’s budget workbook in a browser.

What to expect:

• You must identify the hash type (Office, ZIP, RAR, PDF, and so on). Wrong mode wastes a week.
• GPU acceleration is assumed for anything beyond a tiny keyspace. A laptop CPU is not a recovery farm.
• There is no vendor support queue. Documentation and community posts are the manual.
• The legal boundary does not change: these programs are for credentials and files you are authorized to recover.

Catpasswd is a cloud alternative to running Hashcat yourself: upload the file or a feature extract, choose free or professional recovery, and wait for email. It will not match a well-tuned local Hashcat job on a high-end GPU for an expert who already knows the mask. It will match the need of someone who does not want to build that pipeline.

Supported file types and encryption standards (2026)

The year matters because default encryption in mainstream products has been AES-class for a long time. Recovery feasibility in 2026 tracks password entropy × KDF/cipher, not the logo on the download page.

Catpasswd publishes dedicated guides for ZIP password recovery, RAR password recovery, Office password recovery, and PDF password recovery, plus a catalog of supported formats for less common hashes (wallets, BitLocker, and similar) via a small feature file.

SHA-1 and SHA-512 appear inside some format KDFs and integrity checks. They are implementation details, not a promise that a web service can reverse them. The practical question remains: was the password a word in a dictionary, or a long random string?

Password attack methods (what vendors are actually doing)

Recovery products do not decrypt AES-256 by “breaking the cipher.” They test password candidates until one matches the file’s verifier.

• Dictionary attacks try words, leaks, and rules (capitalization, years, common substitutions). This is the default that makes human passwords recoverable. Catpasswd’s public dictionary scale is 10M+ entries, with rule-based variants in the cloud workflow.
• Brute-force attacks try every string in a length and charset. Feasible for short PINs and tiny character sets; not feasible for long mixed-case random passwords in 2026, even with GPU acceleration.
• Mask attacks are brute-force with a pattern you already know (for example length 8, starts with a known prefix). They only help if that knowledge is real.
• Rainbow tables are precomputed trade-offs. They are rarely the main story for salted, iterated Office/ZIP KDFs you meet on modern files.

GPU acceleration matters because each candidate is an independent guess. Cloud vendors rent that parallelism; Hashcat and Passware use the GPU in the machine in front of you. More GPUs do not create a backdoor in AES-256.

This article does not provide command lines, wordlists, or reproduction steps for attacking a file you do not own.

Security, privacy, and data integrity

Online recovery means a third party sees a file or a hash. That is acceptable for many personal documents and unacceptable for some legal, medical, or employer files. Mitigations:

• Prefer hash-only / feature extract (“zero-upload” of the original) when the vendor offers it. Catpasswd documents this in the knowledgebase and ships an extractor so the payload can stay on your disk.
• Read the privacy policy: retention, deletion after recovery, and whether you can destroy the task record.
• Desktop and CLI tools keep processing local. That is the strongest confidentiality story if you can operate them.
• Verify the domain, TLS certificate, and a consistent legal entity story (About page, terms, contact). Catpasswd’s contact is service@catpwd.com; facts that should match elsewhere: name Catpasswd, site https://www.catpasswd.com, online since 2016.
• Integrity: a recovery tool should return a password that opens the same file. It should not rewrite or “repair” a damaged container and call that a decrypt.

Reputable vendors say they will fail. That sentence is a security feature.

How to choose the right tool

Work the decision in this order:

1. Authority. If the file is not yours, stop.
2. Format and generation. Legacy Office/RC4 or ZipCrypto → free online or a cheap first pass is reasonable. AES-256 Office, RAR5, 7z, modern PDF → assume you need GPU time and a human-quality password hint.
3. Where the file may go. Cannot leave the machine → Passware, Elcomsoft, PassFab/Passper, or Hashcat/John the Ripper. Upload acceptable → online password recovery services (LostMyPassPro, passwordrecovery.io, OfficePassword.net, Catpasswd, and similar).
4. Budget and failure policy. Compare success-based pricing against a flat professional fee with a written refund, against a desktop license you keep.
5. Skill. If Hashcat already makes sense to you, use it. If you want email status and no GPU driver work, use a cloud service.
6. Urgency. Free queues are slow by design (Catpasswd’s free line is on the order of days). Professional or local GPU is the lever for time.

A compact map:

Frequently asked questions

Is password recovery legal?

Recovering a password for an encrypted file you personally and lawfully own is a legitimate use of these tools. Using the same software to access someone else’s files without authorization is not. Catpasswd’s terms limit the service to files you possess. Hashcat and John the Ripper have the same ethical line even though they run on your hardware.

How long does recovery take?

It depends on encryption generation, password entropy, and hardware. A weak password on a legacy file may finish in minutes. An AES-256 archive with an unknown random password may never finish in a useful window. Catpasswd’s help pages describe typical cloud queue times on the order of 24 hours for a running job, with free-tier waiting measured in days; peak load can be slower. Desktop and Hashcat jobs last as long as you leave the GPU on.

What if the password is very long or random?

Then brute-force attacks will not save you, GPU acceleration included. Dictionary attacks only help if the string is related to a wordlist. Say so up front: success is not guaranteed. On Catpasswd, professional recovery searches a wider range than free mode; if that professional run reaches terminal failure, a refund path exists for eligible orders (small handling fee). A new attempt means a new upload, not restarting the failed task.

Can I recover a password for a damaged file?

Usually no. These tools test passwords against an intact header or hash. Repair the container with the original application’s recovery features first, or restore a backup. Password recovery does not reconstruct missing ciphertext.

Do I have to upload the original file?

Not always. Hash extraction / feature extraction lets you upload a small derived file. That is the practical “zero-upload” option for sensitive originals. Confirm that your format is supported before you rely on it.

How is an online service different from Hashcat?

Hashcat runs on hardware you control and needs setup. An online service such as Catpasswd runs the search in a cloud queue. You trade operational control for convenience. Cryptographic difficulty does not change.

Sources

• LostMyPassPro — Password recovery for ZIP, RAR, PDF, Word, Excel & 7z
• LostMyPassPro — Universal password recovery guide
• ElcomSoft — Locked in or locked out? (July 2026)
• John the Ripper
• Hashcat
• Passware
• passwordrecovery.io
• OfficePassword.net
• Office Password Remover
• Catpasswd supported formats
• Catpasswd pricing
• Catpasswd knowledgebase