Elcomsoft Explorer for WhatsApp (EXWA) is a
Windows tool to acquire, decrypt and display WhatsApp communication
histories. The tool offers multiple acquisition options to extract
and decrypt WhatsApp data from multiple local and cloud sources
including Android smartphones, iOS system backups (iTunes and
iCloud), and WhatsApp proprietary cloud backups in Google Drive and
iCloud Drive.
The tool supports both rooted and non-rooted Android phones.
Encrypted backups can be automatically decrypted providing that the
correct password is supplied. Downloading cloud backups from Apple
iCloud and iCloud Drive requires entering the user’s Apple ID and
password or using a binary authentication token extracted from the
user’s computer, while Google Drive downloads require a login and a
password. Two-factor authentication is supported for both Apple and
Google accounts.
The built-in viewer offers convenient view of messages, calls and
pictures stored in multiple WhatsApp databases obtained from the
different sources. Instant filtering and ultra-fast searching allow
finding records of interest in a matter of seconds.