If you use it as a USB you have access to the entire drive ?
(I think the key is located in the HPA area that's why you can't dump the key)

You get an read error if you try to read sectors before the drive is decrypted.
A possible solution is to deactivate the Encryption Flash on the PCB by for example desoldering.
Then the drive "falls back" to usb only mode and you are able to access the sectors (which should now be encrypted).
In this mode the drive of course also shows the previously hidden sectors, including the key sector which is in the "HPA".

The problem is he cannot deactivate the encryption chip on the PCB.
Therefore he has no access to the key sector or to other sectors at all.
Even not to sector 0, sector 1, and so on...

If he could manage to send me the key sector, I could try to brute force his password, because he can remember big parts of it.

If you remove the SATA-USB bridge card, there is a way to decrypt the data on the drive. I do it by setting up a decryption filter in linux to emulate the JMS538S chip.

And why not find, and do not reset the counter directly in memory?

Quick question!

Was anyone able to decrypt data on these WD my passport ultra?

I am stuck

It's possible for most drives.

_________________
SAN, NAS, RAID, Server, and HDD Data Recovery.

" What do you mean? has anyone here done it or know anyone who could. IT's a locked drive with password via smartware.

Are there step by step instructions that a shop can carry out?

Doomer means he can unlock most of them, but you need to outsource to him.

_________________
http://www.northwind.gr
SandForce SSD Recovery
Ransomware Reverse Engineering - NoMoreRansom! partners

1. Put the drive to a box
2. Ship the box to a DR company that can do it
3. Pay for the job
4. Receive recovered data

_________________
SAN, NAS, RAID, Server, and HDD Data Recovery.

laughing so hard it hurts - thanks Doomer..

_________________
Digitalsupport Data Recovery
https://digitalsupport.dk

With a budget of 100$ I'm a poor man searching for Rich services, today after trying many free diagnostics I retire.

Hit the format option and now I can never go back!

Thank You

Hi, guys! Sorry to reach you all so abruptly, but I see this topic is about a tool for decrypting WD hard drive passwords.
I initially contacted WD customer care and tried all the steps they told me to. The problem is I don't want to format the drive just to reset the password because the solution they gave was to format the drive and then reset the password.

But I have no technical knowledge, so I'm not sure if the reallymine tool is what I need to remove the password to get a new one. Also, this is the type of hard drive (it' 5 TB):

https://www.westerndigital.com/products ... 50BBK-WESN

So, can I remove the password and access my files using that software, or is there a simpler tool I can use? Also, though I'm no technical expert with very limited knowledge of coding, using Github, etc. But I can use Command Prompt on Windows, provided I follow detailed instructions, because I think I'll need that to use the reallymine.

Thanks, guys. I await your response! Thank you!

I may be wrong, but reallymine doesn't crack/reset any passwords. It will only help in cases of old types of WD encrypted drives (via JM, SYMW and INIC bridges) when someone lost the bridge etc, or needs to image via SATA instead of USB.

Your case is completely different.
I suggest you contact Doomer and see if they're able to recover your drive.

_________________
http://www.northwind.gr
SandForce SSD Recovery
Ransomware Reverse Engineering - NoMoreRansom! partners

1. You cannot use that software and expect to access the files. Your drive is encrypted and that software will erase the encryption keys along with the password. This is essentially a crypto erase procedure. ALL DATA WILL BE UNRECOVERABLE after that, even by pros.
2. There is no simpler tool either
3. If you need to access your data the only solution is professional data recovery but it is several hundred dollars.

_________________
SAN, NAS, RAID, Server, and HDD Data Recovery.

I don't believe reallymine writes anything to the source drive.

ISTR that the author was talking about brute forcing the password, but I don't recall if he actually implemented anything.

_________________
A backup a day keeps DR away.

I probably misunderstood.
I thought the author was talking about WD Smartware program that WD support likely suggested.

_________________
SAN, NAS, RAID, Server, and HDD Data Recovery.

Alright, I'll do that. Thank you

Thanks. I appreciate it

Guys, let me explain in more detail. Please excuse my English if I can't properly express myself. So, the problem I'm having is that I forgot the password to my WD passport, right? But I can still access my files using ONLY ONE COMPUTER because I already instructed the hard drive to recognize one of my laptops (I do hope what I'm saying makes sense). But the hard drive is faulty and has bad sectors, and scanning it in Windows using CHKDSK isn't fixing it. So, I want to try scanning it on my Mac because it has a more powerful and faster disk repair tool (disk utility), and that's where the problem lies:

I didn't save my Mac as one of the devices the hard drive can recognize, so when I insert it into the Mac to scan, it tells me I have to input the password. Since I can't remove the password, I'll have to settle for a way to fix the bad sectors so I can copy my files out. Right now, even if I try to copy the files out, it doesn't work; the system will either freeze, or I just get an error. I know formatting will probably fix the issue, but I need to copy the files out first. But the bad sectors stop me from copying them out.

So, in a nutshell, I just need to find a way to fix the bad sectors, and my Mac can do that, but it asks for a password when I insert it into the Mac. Can you guys assist me in any way, please? I didn't give this info before because I thought that once I removed the password, I could just fix the drive with my Mac and copy my files, but now I'm faced with no other option. I can attach screenshots if anyone wants to see. Sorry for the long explanation, guys!

Bad sectors can not be 'fixed'.
DO NOT format the drive. If you do, it's game over.
DO NOT run any 'repair' utilities, they'll make things worse.

The best approach would be to image your drive to another drive and recover your data from there.
This is a Spyglass2 drive, which complicates things a lot.

In theory, you must:
Connect the patient drive to the laptop that has the password stored and recognizes the drive.
Run an imager, like UFS or DMDE.
Connect a destination drive and image the patient data to the destination.
Analyze the destination drive and get your data.

Problems: You need to run it via Windows, which is never a good thing;
You need to use a software that knows how to skip bad areas. UFS has a built-in algo that can help skip bad areas, you can try that.
You can't convert your drive to SATA and run a Linux imager which would help tremendously. EDIT: you can't connect to SATA anyway, you don't know the password, so it has to be on your laptop, duh.

Best way scenario: Give your drive to a Data Recovery lab. At this point, it should be affordable, unless there's a surprise hiding underneath.

_________________
http://www.northwind.gr
SandForce SSD Recovery
Ransomware Reverse Engineering - NoMoreRansom! partners