Passware has added forensic passcode recovery and data extraction for 24 Samsung Galaxy Watch 4, 5 and 6 models in its latest Kit Mobile 2026 v5 update.
According to Passware, the new capability targets watches using Samsung’s Exynos W920 and W930 chipsets and exploits a vulnerability in the chips to recover the device passcode and decrypt application data.
The process requires physical access to the watch and a connection to USB test pads on the device’s circuit board.
The update also adds support for five additional Samsung devices using the Exynos 1280 chipset, 19 smartphones based on Unisoc T760, T770 and T820 chips, and password and data extraction from Enpass for Android.
The release highlights an important area of mobile forensics: even wearable devices can contain valuable evidence, including application data and potentially information relevant to an investigation.
Passware has not publicly detailed the underlying vulnerability beyond identifying the affected Exynos chipsets.