Information Security Stack Exchange is a question and answer site for information security professionals. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

A while back, I encrypted a few files with Truecrypt, and stored the password in my head. Now I need to access it again, the password isn't working. I'm sure most of it is right, but I'm off by one or two characters. Is there a program that will allow me to tell it most of the characters in the password in order, and guess the rest through brute force?

share|improve this question seems like exactly what you're after.

The other one to try is OTFBrutusGUI - which can be had from - though it has little documentation beyond scattered forum posts (such as and

More generally - John The Ripper ( is a generic brute-force tool often used and adapated to these sorts of scenarios. And TrueCrack ( is specifically for missing TrueCrypt passwords. It goes almost without saying that these aren't effective at all against passwords you have no knowledge of (assuming a reasonable password strength).

Edit: Modern versions of oclHashcat are also capable of cracking Truecrypt headers; see also.

share|improve this answer
Yeah that seems perfect, thanks! How'd you find it? – Robyn Feb 9 '13 at 22:42
It's a problem I've run into before - I've worked with a lot of forgetful people :) – Bob Watson Feb 9 '13 at 22:46
The help file in OTFBrutusGUI seems to adequately describe the password pattern syntax. – user151841 Jan 27 at 3:41

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.