iOS Restrictions Passcode Cracker
iOS Restrictions Passcode Cracker works on all iDevices running iOS 7 – 11.
NB: With iOS 12, Apple moved the Restrictions Passcode into the Keychain, meaning this service is no longer effective against iDevices on iOS 12 and higher. I know, sad isn’t it?
Nothing for you to worry about, your new solution is Pinfinder, a small, downloadable freeware cross-platform utility that will recover your Restrictions Passcode from an iOS 12+ backup. Easy & effective. Forgotten your iOS Restrictions Passcode? Yeah, so had I, on my 32GB iPod Touch A1421. What a PIA, there’s no remote recovery option for that one. Stink. What I needed was an iOS Restrictions Passcode Cracker to remove the Restrictions Passcode.
Without an iOS Restrictions Passcode Cracker, I was looking at a full iOS update/restore to rid the pesky forgotten code. The official word from Apple was not good – I’d lose my jailbreak & be forever pissed that a simple 4-digit code beat me. shakes fist at sky You could train a monkey to find the passcode – eventually. End up with monkey spit all over your iDevice too, but that’s another story.
Look, recently Apple has shown that they can apply excellent security to protect their products (iCloud from iOS 7.1.2 on for example). Often though, they leave a hole so wide you can drive a truck through it. (rm /var/db/.applesetupdone anyone? Or resetpassword even?)
One of the repeated shortcomings of technology in general is to limit PIN passcodes to 4 digits – thereby reducing the possible target range to a maximum of 10,000 (0000 – 9999, your answer is somewhere in here.) This shortcoming affects your bank PIN, Android device, TV lock code, and Apple too. By itself, this is not secure protection.
Apple have no record of Restrictions Passcodes via the Apple ID mechanism, therefore the passcode data is on your device, right? Well obviously it is. Let’s find it. Where should you look? In an unencrypted iTunes backup, that’s what backups are for – storing data from a device.
It’s public knowledge that Apple obfuscate data with the pbkdf2-hmac-sha1 encryption, leaving a string of garbled text that requires decryption to be of any use. So, the process is – find the string, copy it, crack the encryption, pr0fit!!
Let’s Get Cracking!
If you have a Jailbreaked device, and thus root-level access to the file system, search for com.apple.restrictionspassword.plist, using either iFile from the device or a PC tool like iTools or iFunbox. Open the .plist, copy the RestrictionsPasswordKey data and RestrictionsPasswordSalt data then paste it into the relevant form boxes of the iOS Restrictions Passcode Cracker below.
If your iDevice is not JB’d, then you need to extract the string from an unencrypted iTunes backup. Windows users can find your backup folders here: – %SYSTEMDRIVE%/Users/*Your Username*/Appdata/Roaming/Apple Computer/MobileSync/Backup/Long Random Number/ and on Mac ~/Library/Application Support/MobileSync/Backup/
Inside the folders there’s a file named 398bc9c2aeeab4cb0c12ada0f52eea12cf14f40b – this contains the encrypted data string that we need. Copy that file name & use your OS Search function.
Found it? Good. Now open the file with a simple text editor (ie Notepad) to expose data that reads like this:
RestrictionsPasswordKey M/p4734c8/SOXZnGgZot+BciAW0=
RestrictionsPasswordSalt aSbUXg==
So the required data is:
Key: M/p4734c8/SOXZnGgZot+BciAW0=
Salt: aSbUXg==
The Magic:
Simply copy/paste the two strings into the relevant iOS Restrictions Passcode Cracker form boxes below. (Really, copy/paste – it’s too easy to make a mistake transcribing manually) Next, hit the blue Crack It button & wait til it iterates through the possibilities.
You can select your preferred range – if you know for sure that your lost passcode didn’t start with 00, for example, then enter 1000 in the Starting box.
NB: This is a private transaction. No data is transmitted from this page. All the work is done in your browser by Crypto.js
iOS Passcode Cracker
Pro Tip:
Use a very analog version of distributed computing to decimate the time required to crack your iOS Restrictions Passcode. Open 5 browser tabs with the iOS Restrictions Passcode Cracker loaded in each. Set the Starting Passcodes at 0000 (default), 2000, 4000, 6000, 8000, then hit the blue button in each tab.
Your time saved is dependent on which tab finds the answer. If it’s the first tab, no time saved, sorry ’bout it. But if it’s the last tab & the answer is 9000, then you’ve only calculated 1000 passcodes to get to an answer that’s revealed after 9000 guesses in a single-iteration system. Quantified, at 4 attempts/sec, your answer is revealed in just over 4 minutes, whereas the single tab approach wont reveal the solution for well over half an hour yet.
Either way, soon enough, your iOS Restrictions Passcode will be revealed. This is not a maybe solution, if you’ve entered the Key & Salt data correctly then this app will find the answer.
This page would not exist without the work of Hashcat and John The Ripper. You want cracking skills? Go visit them.
Did you like that? It worked for you? Please leave a comment, tell me about it.
does this work for the latest update?
The first few lines of this post will explain all to you – including the solution for latest updates.
Im using an IPhone XR running IOS 14.6 and I can’t seem to find the 398bc… file on windows with an unencrypted backup from itunes. Does this only work for IOS 12 and below?
Nevermind.
Is there even a Parental Restrictions option in iOS 14.6? It’s been replaced by Screen Time now.
This utility stops working with iOS12, it had a good long & useful life, from iOS 7 through 11 but there is no use for it on any device running iOS 12 or better.
Extremely useful as a Family IT guy especially one of those days when a family member forgets their password or causes some catastrophic problems, Thank you.
You have to find a folder that has a name as ridiculous as that
You think Apple gonna call it “iOS-lock-key-salt-here”?
Answer what?
Zack, dude, iPhone 3GS is a museum piece now. Let it go.
Hey, I have an iPhone 3gs that is running ios 6.1.6, I located the backup on my computer but I can’t find the key and salt.. does this not work on ios6 and earlier? If not is there anything else I can do to get through this passcode lock. I’ve been searching for a solution for 2 days.
Here we come to know about passcode crackers. It makes the work straight and easy for us. It is a really good article indeed. I am sure many people will come to read this in future. Great blog indeed, will visit again future to read more!! I must say this, if you get time can visit nzsunnyway.co.nz/ for ideas on this topic.
Please answer quick please
Hello I’m on an iPad I can’t seem to find the apple computer folder please help
I’ve identified how to find it already, have you read the guide? With such little information, I don’t know how to help you. “I’m on iPad” – does that mean you have a Restrictions Passcode on your iPad?
If you backed up to a Windows PC, download Everything, an awesome Windows search app, use that to find your Apple folder. On Mac, just use Finder.
OMG…! Who on earth are you?? I have suffered with a restriction passcode for 10 years. When I’d get a new gadget it would install the same forgotten restriction passcode and I carried it to 3 iPads. It didn’t block me from doing anything but I couldn’t change it and had 3 attempts left. I found the file you suggested (file: 398bc…..).
Mine was on my Windows laptop in: C:/>Documents and settings> user>Application Data> Apple Computer> MobileSync> Backup> 077e8c02981ffbbe78a664c9f28ef5fcba14ccf5
This code cracker gave me the passcode in 3 minutes…Free at last! Thank you so so much 🤗
What a kind remark. Thank you, responses like yours are why we do this.
Uhmmm…can you please help me where do i start with this i mean i cant understand much but where can i get the key and salt?
What’s your iDevice Elliezon? & which version of iOS is it on? You’ll find that info in Preferences / General
i couldn’t find the file 398bc9c2aeeab4cb0c12ada0f52eea12cf14f40b
OMG!!! I have the same exact phone and problem!!!! I need HELP. I also don’t have the app store or anything 🙁
Thank you so much, you are awesome. I can now reset my ipad and pass it on to someone else.
Hi all, many thanks to Megabyte 1024kb, this iOS cracker is a cracker, cracked my iPhone in under 4 mins, spent 4 days looking at Itunes, YouTube, relentless web know it all’s, resets, re-resets master resets, OMFG total waste of time, HERE is where you need to be, that is all..:)
My mom put restrictions on my phone and now i dont have the app store or anything. I need to reset the password because she forgot it. What is one that will work on an iphone 6s?
It’s not the hardware that’s relevant, it’s the firmware that your i6S is running.
To find out, go Preferences / General / About then look in the list there for Version. If the version is 11 or under, then follow the instructions on this page. If you’re running 12, then grab the download from Pinfinder. Either way, you do need to use iTunes to do a full, unencrypted local backup.
hi, I got the file from my IOS 11.3, but I can’t open it from the notepad, do we have another software to open the 398bc file??? I’m using win 10.
I don’t get how you can’t open it in Notepad. Right-click, Open With, choose Notepad.