10 formats, one tool
Both generations of Office encryption, the full PDF encryption family, and common archives — detection and recovery work out of the box.
A complete engine built to recover
Dictionaries, rules, parallelism, resumability — several weapons aimed at one forgotten password, until it's back.
Fully offline
Zero networking, zero accounts, zero telemetry — privacy isn't a promise, it's the architecture. Files stay on your computer.
Dictionaries + rules
Import txt / csv dictionaries with automatic de-duplication and merging; or generate candidates from a character set and length range.
Resumable runs
Chunk-level progress keyed by file fingerprint; restart and continue exactly where you left off, never re-trying.
Smart de-dup · bilingual UI
Content hashing spots duplicate files and merges them into one record sharing the result; UI toggles between English and Chinese.
Full-format benchmark matrix
10 formats, 17 measured data points — all from the product's real recovery pipeline (not a standalone benchmark).
| Format | Encryption | CPU(Intel Core Ultra 9 285H) | GPU(Intel Arc 140T iGPU) | GPU speedup |
|---|---|---|---|---|
| docx / xlsx / pptx | Agile AES-256 (SHA-512 ×100k rounds) | 989/s | 2,236/s | 2.3× |
| docx / xlsx / pptx | Standard AES-128 (SHA-1 ×50k rounds, common with WPS) | 1,638/s | 64,923/s | 40× |
| doc / xls / ppt | Legacy RC4 (MD5) | 92,594/s | 85,764,700/s | 926× |
| doc / xls / ppt | Legacy RC4-40/128 (SHA-1) | 91,053/s | 83,095,500/s | 912× |
| RC4-40 (R2, Acrobat 3) | 69,693/s | 95,932,100/s | 1,376× | |
| RC4-128 (R3, Acrobat 5) | 19,453/s | 5,181,900/s | 266× | |
| AES-128 (R4, Acrobat 7) | 18,563/s | 5,185,600/s | 279× | |
| AES-256 (R5, Acrobat 9) | 65,339/s | 1,034,600,000/s | 15,832× | |
| AES-256 (R6, Acrobat X+, strongest) | 1,473/s | 4,202/s | 2.9× | |
| zip | ZipCrypto (legacy) | 7,291/s | CPU only | — |
| zip | WinZip AES-128 | 23,794/s | 1,275,700/s | 54× |
| zip | WinZip AES-192 | 16,773/s | 1,226,100/s | 73× |
| zip | WinZip AES-256 | 12,427/s | 1,224,500/s | 98× |
| 7z | AES-256 (LZMA2 compressed) | 1,124/s | 3,108/s | 2.8× |
| 7z | AES-256 (store-only) | 867/s | 2,996/s | 3.5× |
| rar | RAR5 content encryption | 3,058/s | 16,447/s | 5.4× |
| rar | RAR5 header encryption (-hp) | 2,909/s | 16,671/s | 5.7× |
* Legacy Office verification reads only a fixed-length header, so speed is size-independent.
Test rig: ThinkPad T14P Gen3 · Intel Core Ultra 9 285H · Intel Arc 140T iGPU · hashcat v7.1.2 · Python 3.13
Test notes
① Recovery speed is decided by the key-derivation algorithm, not the cipher — both AES-256, yet PDF R5 vs R6 differ by 240,000×.
② GPU speedups typically run 30–1,000×; measured on an iGPU only — a high-end discrete GPU would deliver a far greater boost.
③ Office/PDF/RAR/7z speeds are size-independent; ZipCrypto slows as files grow; 7z is slow due to its 524k-round key derivation, not size.
④ ZipCrypto currently runs on the CPU path only — GPU verification risks false positives, and accuracy comes first.
Sound familiar?
A forgotten password doesn't mean a lost file. Every PassGone feature exists because of one of these situations.
Fragments of memory don't spell a password
Passwords from different eras blur together; typing guesses one by one eats an entire afternoon.
Import txt / csv dictionaries (one password per line); multiple dictionaries are de-duplicated and merged automatically.
Name + birthday + digits, a thousand permutations
You recall which pieces the password was built from, but not the arrangement.
Tick upper/lowercase / digits / symbols, define a custom character set and a length range — candidates are generated for you.
Tomorrow it all starts over
Long recovery runs fear interruption most; rerunning means waiting twice.
Progress is tracked per file fingerprint (chunk-level); restart and it resumes automatically, never retrying what's done.
Watching a progress bar with no end
Encrypted files try one after another, too slowly to trust.
Multi-process parallelism across all CPU cores, with live speed and estimated time remaining.
Strong encryption grinds a CPU down
Modern Office encryption uses high iteration counts; a CPU alone tries too few per second.
Enable GPU acceleration with one click (optional hashcat component) — measured speedups from 2.3× to 15,832× across formats.
Duplicates run twice
Multiple copies of the same document get added and cracked separately — wasted computing.
Content hashing identifies duplicates, merges them into one record, and shares the recovered result.
Free gets you started, Full removes the limits
The Free edition includes format detection and recovery for everything; the Full edition is a one-time purchase with lifetime updates.
| Capability | Free¥0 | FullOne-time purchase |
|---|---|---|
| GUI / format detection for all formats | ✓ | ✓ |
| Rule-based candidate generation | Length ≤ 4 | Unlimited |
| Custom dictionary import | — | ✓ |
| Parallel computing | Up to 2 workers | Unlimited (all local cores) |
| Recovery record cache | Most recent 2 | Most recent 100 |
| Upgrades | — | One-time purchase, lifetime free updates |
* The Full edition is sold as an add-on inside Microsoft Store; see the store listing for pricing.
Terms of use
Use PassGone only to recover passwords of files you own or are explicitly authorized to access. Using it to obtain other people's files, invade anyone's privacy, or for any illegal purpose is strictly prohibited; users bear all legal consequences of misuse.
Got your file back? Buy the author a drumstick
PassGone is maintained by an independent developer. Donations unlock no features — they only fuel future updates.
Scan with WeChat · buy the author a drumstick