Reveal iTunes backup

Reveal iTunes backup

If you previously used iTunes software to back up your iOS device, you can use this feature in order to extract data from the created iTunes backup using MOBILedit Forensic Express.

Please follow the steps below:
  1. Open MOBILedit Forensic Express 
  2. Click on "Import data"

  3. Choose the "Reveal iTunes backups" option

  1. A list of available backups will show up - choose which one you want to extract data from.
          
  1. Once you've selected a backup, click Next and enter the password for the backup (if required).
    If you don't know the password, you can always try to break it with our password breaker.
    in case the password is non existent, it is automatically to "123" (and unset after the extraction is finished)
          
  1. After entering the correct password, the backup will be loaded into MOBILedit Forensic Express and you'll be able to perform an extraction just as if an actual device were connected.



    • Related Articles

    • iTunes backup

      Previous iTunes backup can be read in MOBILedit. What you need to do is copy all these backups into proper iTunes folder. The location in Windows is: \Users\(username)\AppData\Roaming\Apple Computer\MobileSync\Backup\ After you copy the backup and ...

    • How to make an application backup

      1) Open MOBILedit Forensic Express and click "Start"   2) Plug your phone to USB. You will see that on your phone Forensic Connector screen will show up. MOBILedit will then find the connected phone. [1] Shows the phone type currently connected  [2] ...

    • Backup: what to backup

      When you start a backup you have to select what type of backup you want to perform. According to your device there could be multiple options to choose from.  In the case of Android you can select basic MOBILedit backup (which can backup contacts, ...

    • iTunes backup password is required each time I run analysis

      Normally when you extract iTunes backup and a temporary password is set-up by MOBILedit Forensic Express is this password removed after successful extraction. It looks like your first extraction didn't finish successfully and the iTunes Backup ...

    • iTunes 12.1

      If you are not able to connect your iPhone and you are using 64 bit Windows most likely it’s a problem with an update to the latest version of iTunes, which both the MOBILedit and Phone Forensics Express use by default as a way to connect the iPhone, ...