MOBILedit Forensic Guide
MOBILedit Forensic is an all-in-one solution for data extraction from phones, smartwatches and clouds. It utilizes both physical and logical data acquisition, has excellent application analysis, deleted data recovery, a wide range of supported devices, fine-tuned reports, concurrent processing, and easy-to-use interface. With a brand new approach, MOBILedit Forensic is much stronger in security bypassing than ever before.
MOBILedit Forensic offers maximum functionality at a fraction of the price of other tools. It can be used as the only tool in a lab or as an enhancement to other tools with its data compatibility. When integrated with Camera Ballistics it scientifically analyzes camera photo origins.
License activation
Since version 8.0 every licence key must be registered and verified via the MOBILedit User Portal.
There are two types of activation possibilities: online activation and activation by physical dongle. Each one has its own advantages.
Online activation specifics
Dongle license specifics
With a full license, you can use MOBILedit Forensic with an unlimited number of phones.
To activate your license, follow the steps below:
If you have been using an activated demo license, deactivate the demo key and then activate the software with your new full license key.
Getting Started
MOBILedit Forensic performs mobile phone, smartwatch and cloud content extractions and is used by professionals in law enforcement, the military, government organisations, and also in the corporate and private sectors. By connecting a phone via USB cable, Wi-Fi or Bluetooth you can perform individual examinations of most mobile devices and generate reports in multiple formats (PDF, HTML, Excel, etc.) for a variety of needs.
MOBILedit Forensic can retrieve messages, call logs, pictures, contacts, apps, calendar events, emails, passwords, media, file systems, deleted data, and much more. You can even select specific data which you want to extract from the device.
Register in the User Portal and then download and install MOBILedit Forensic if you haven’t already. Activate the software with a valid license.
The digital key version of MOBILedit Forensic is not compatible with the dongle. For the dongle version please contact our technical support.
All versions of MOBILedit Forensic can be run offline, including both the digital key and the dongle versions. However, an internet connection or, internet-connected computer, is required for activation and updates for both types of license.
MOBILedit Forensic Express Installation Guide
Before connecting the phone, be sure you have installed the necessary device drivers on your PC. You can download our Complete Driver Pack or select the required individual drivers.
When connecting an Android device with MOBILedit Forensic running on a 64-bit version of Windows, the device drivers provided by the manufacturer of the phone might be sufficient to allow a proper connection between the device and the software. If not, you might need to replace it with the universal ADB (Android) driver.
Android rooting is an important step that will allow maximum data and additional deleted data acquisition. If you cannot or do not want to root the phone, you can alternatively use one of the temporary root access methods or the Application Downgrade feature to find hidden and deleted data in certain supported apps.
For iPhone iOS devices, ideally, the passcode and iTunes backup password are required. Jailbreaking an iPhone can bypass several types of Apple prohibitions for the end-user, including modifying the operating system (enforced by a "locked bootloader"), installing non-officially approved applications via side loading, and granting the user elevated administration-level privileges (root access). You can also try to bypass the passcode on locked iOS devices with the Lockdown Files Method.
Additional data can be found in either the iTunes or ADB backups. In cases where the backup is password-protected, you can use the Password toolbox to bypass the protection.
System Requirements
To enjoy the best possible user experience, please ensure your computer meets the minimum system requirements as shown below. We have also included additional specifications for a more powerful system:
Please note that meeting the minimum RAM requirements may impact concurrent extractions and performance on phones with a larger amount of data.
To install MOBILedit Forensic successfully, please disable your antivirus program. If enabled, our security bypassing features (i.e. Dirty Cow) may trigger the antivirus warning system. If it is not possible to disable it completely, disable at least the automatic scan of the folders.
By disabling your antivirus program you will also prevent any possible errors that may occur during installation and extraction.
For Windows 10 and above, you may also need to add MOBILedit Forensic to the safe/allowed list of apps in the controlled folder access settings.
It is not necessary to use write-blocking hardware when using MOBILedit Forensic.
MOBILedit Forensic is an all-in-one solution for data extraction from phones, smartwatches and clouds. It utilizes both physical and logical data acquisition, has excellent application analysis, deleted data recovery, a wide range of supported devices, fine-tuned reports, concurrent processing, and easy-to-use interface. With a brand new approach, MOBILedit Forensic is much stronger in security bypassing than ever before.
MOBILedit Forensic offers maximum functionality at a fraction of the price of other tools. It can be used as the only tool in a lab or as an enhancement to other tools with its data compatibility. When integrated with Camera Ballistics it scientifically analyzes camera photo origins.
License activation
Since version 8.0 every licence key must be registered and verified via the MOBILedit User Portal.
There are two types of activation possibilities: online activation and activation by physical dongle. Each one has its own advantages.
Online activation specifics
- the license can be purchased online, it is delivered immediately and the activation is also online
- Tap here to get the license online with assistance guide
- the computer needs to be connected to the internet
- one license is exactly for one computer
- can be deactivated online too
Dongle license specifics
- a dongle is a device with a special security chip, that you connect to a USB
- needs to be physically delivered by the carrier
- the license works only if the dongle is present
- allows for better sharing of licenses within departments: you can have multiple installations of our products in your department and in one-time work only on those with the dongle inserted
With a full license, you can use MOBILedit Forensic with an unlimited number of phones.
To activate your license, follow the steps below:
- Launch the software.
- Click on the “Activation” button.
- Enter the key you have received.
If you have been using an activated demo license, deactivate the demo key and then activate the software with your new full license key.
Getting Started
MOBILedit Forensic performs mobile phone, smartwatch and cloud content extractions and is used by professionals in law enforcement, the military, government organisations, and also in the corporate and private sectors. By connecting a phone via USB cable, Wi-Fi or Bluetooth you can perform individual examinations of most mobile devices and generate reports in multiple formats (PDF, HTML, Excel, etc.) for a variety of needs.
MOBILedit Forensic can retrieve messages, call logs, pictures, contacts, apps, calendar events, emails, passwords, media, file systems, deleted data, and much more. You can even select specific data which you want to extract from the device.
Before you begin
For the best possible experience, we recommend taking a look at the minimum system requirements.Register in the User Portal and then download and install MOBILedit Forensic if you haven’t already. Activate the software with a valid license.
The digital key version of MOBILedit Forensic is not compatible with the dongle. For the dongle version please contact our technical support.
All versions of MOBILedit Forensic can be run offline, including both the digital key and the dongle versions. However, an internet connection or, internet-connected computer, is required for activation and updates for both types of license.
MOBILedit Forensic Express Installation Guide
Before connecting the phone, be sure you have installed the necessary device drivers on your PC. You can download our Complete Driver Pack or select the required individual drivers.
When connecting an Android device with MOBILedit Forensic running on a 64-bit version of Windows, the device drivers provided by the manufacturer of the phone might be sufficient to allow a proper connection between the device and the software. If not, you might need to replace it with the universal ADB (Android) driver.
Getting maximum including deleted data
While MOBILedit Forensic is a very powerful extraction tool and extracts practically all information available, advanced users looking to get even more information from the phone should first 'root' or 'jailbreak' the phone.Android rooting is an important step that will allow maximum data and additional deleted data acquisition. If you cannot or do not want to root the phone, you can alternatively use one of the temporary root access methods or the Application Downgrade feature to find hidden and deleted data in certain supported apps.
For iPhone iOS devices, ideally, the passcode and iTunes backup password are required. Jailbreaking an iPhone can bypass several types of Apple prohibitions for the end-user, including modifying the operating system (enforced by a "locked bootloader"), installing non-officially approved applications via side loading, and granting the user elevated administration-level privileges (root access). You can also try to bypass the passcode on locked iOS devices with the Lockdown Files Method.
Password and PIN breaking
MOBILedit Forensic offers all kinds of password security bypassing tools such as MTK, LG, EDL, methods and flashing phones with a recovery image.Additional data can be found in either the iTunes or ADB backups. In cases where the backup is password-protected, you can use the Password toolbox to bypass the protection.
System Requirements
To enjoy the best possible user experience, please ensure your computer meets the minimum system requirements as shown below. We have also included additional specifications for a more powerful system:
- CPU: Intel Core i3 or Ryzen 3 as a minimum, i7 or Ryzen 7 is recommended for concurrent extractions, and a CPU with AVX is required for Face Matcher and Photo Recognizer.
- RAM: 16 GB as minimal configuration, 32 GB is recommended.
Please note that meeting the minimum RAM requirements may impact concurrent extractions and performance on phones with a larger amount of data.
- HDD: free space of 30 GB on the system drive, plus suitable storage space for the reports. Ideally, separate disks should be used for storing the data, and using SSDs will mean read/write speeds are quicker.
- OS: Windows 64-bit OS is required, Windows 10 as minimal configuration.
- Minimum screen resolution: 1250x800, recommended 1920x1080.
- High-quality cables for connecting phones are essential.
- GPU: The only feature that benefits from a GPU is the Password toolkit for brute force attacks on backup Pins and passwords. The GPU can be of any type and either integrated, a dedicated graphics card or fully external.
To install MOBILedit Forensic successfully, please disable your antivirus program. If enabled, our security bypassing features (i.e. Dirty Cow) may trigger the antivirus warning system. If it is not possible to disable it completely, disable at least the automatic scan of the folders.
By disabling your antivirus program you will also prevent any possible errors that may occur during installation and extraction.
For Windows 10 and above, you may also need to add MOBILedit Forensic to the safe/allowed list of apps in the controlled folder access settings.
It is not necessary to use write-blocking hardware when using MOBILedit Forensic.