Discover the NEW features of FTK Imager PRO
Coming soon, FTK Imager Pro will bring together iOS advanced logical collection, encryption detection and decryption, and direct-decrypted live data—all in one lightweight tool designed for digital investigators, field agents, and forensic analysts.
FTK Imager Pro Brings More to the Table
With the upcoming release of FTK Imager Pro, Exterro will add many new, key features to your forensic imaging toolkit. Learn how upgrading can improve the value of FTK Imager in your workflows. FTK Imager Pro delivers iOS advanced logical collection, encryption detection & decryption, and direct decrypted live data.
-
iOS Advanced Logical Collection
Acquire photos, messages, app data, call logs, and more from iOS devices using an intuitive, fast collection process.
-
Encryption Detection and Decryption
Detect encrypted images like BitLocker and prompt for credentials to decrypt them to view the data.
-
Direct-Decrypted Live Data
Skip the delays of full disk imaging, instantly view or acquire live decrypted BitLocker data directly from the target device.
What's the Difference between FTK Imager and FTK Imager Pro?
FTK Imager (Free Version)
• Quickly create forensic disk images
• Preview and capture files and folders
• Generate hash values for verification
• Mount evidence files for easy review
• Lightweight, fast, and easy-to-use
• Ideal for basic imaging and validation workflow
FTK Imager Pro (Paid Upgrade)
• Includes all features of FTK Imager
• iOS advanced logical collection (messages, photos, app data & more)
• Detects and decrypts encrypted images (e.g., BitLocker)
• Live decryption support — view or collect data without full disk imaging
• Expanded device and file system support
• Designed for professional forensic investigations
Is FTK Imager Pro right for you?
Incident Response and DFIR Teams – Quickly assess compromised endpoints, decrypt evidence, and export only what’s relevant for rapid response.
Law Enforcement and Digital Forensic Examiners – Preserve evidence defensibly with integrated decryption and preview capabilities.
Corporate Security and HR Investigations – Collect and triage sensitive data discreetly and securely during internal investigations.
eDiscovery and Legal Operations – Enable faster case processing by previewing and collecting only the data that matters most.
90%
Digital evidence appears in nearly 90 percent of all crimes committed today.
Take the Next Step after Imaging
While FTK Imager excels at electronic device imaging, its analysis and review capabilities are limited. Count on the full-featured FTK Forensic Toolkit to support the rest of your digital evidence workflow.
Frequently asked questions
-
What is FTK Imager Pro?
FTK Imager Pro is a powerful forensic imaging and data preview tool. It enables secure acquisition of hard drives, removable media, RAM, iOS devices, and logical files while preserving the integrity of the original data.
-
What is the difference between FTK Imager and FTK Imager Pro?
FTK Imager (Free): Basic imaging and preview functionality, no license required.
FTK Imager Pro ($499/year): Adds iOS collection, decryption support, and advanced workflows for professional forensic investigations.
-
How do I buy Imager Pro?
Purchase through the Exterro Shopify store. Orders are processed during business hours by our licensing team.
-
Will I get instant access after purchase?
Not instantly. Orders are fulfilled within business hours (usually a few hours on the same day). You’ll receive an email with your license file and instructions.
-
What type of license will I receive?
Imager Pro uses a virtual license (a “virtual dongle”). It is tied to your system and cannot be moved between computers.
-
How do I activate my license?
You’ll use License Manager to activate Imager Pro. Instructions and links will be included in your welcome email.
-
What if I already have FTK installed?
No problem. Imager Pro licenses can run alongside FTK licenses. In some cases, they can be added to the same dongle.
-
Where do I download Imager Pro?
From the Exterro product download page (the same page as free FTK Imager). A link will also be included in your welcome email.
-
Do I need to install anything extra?
You’ll need the License Manager if you don’t already have it. A download link will be provided.
-
How long does it take to get my license after purchase?
Typically within a few business hours (West Coast US time). You’ll receive an email with everything you need.
-
What if I don’t get my license?
Contact Exterro Support. Support contact info will be in your confirmation email.
-
Does the free version of Imager require a license?
No. Free FTK Imager does not require a license and will continue to work normally.
-
Will Imager Pro affect my existing FTK setup?
No. Both products can run on the same system without conflict.
-
Why do you use virtual licenses?
Virtual licenses provide security, prevent sharing, and ensure proper compliance reporting.
-
How much does FTK Imager Pro cost?
$499 for a one-year license, renewable annually at the same price.
-
What types of evidence can FTK Imager Pro acquire?
Hard drives (HDD/SSD), USB drives, memory cards, logical files/folders, RAM, and iOS device collections.
-
Can FTK Imager Pro create full file system images of iOS?
No. It supports advanced logical collection (AFC data, logs, and encrypted iTunes backups), not full file system images.
-
Can I image Android devices with FTK Imager Pro?
Not at this time. The current release supports iOS; Android and Mac support are planned for the future.
-
Can I preview BitLocker-encrypted files without imaging the entire drive?
Yes. With a valid password or recovery key, you can decrypt and preview BitLocker-protected files and folders immediately—ideal for triage.
-
How do I ensure the integrity of acquired evidence?
FTK Imager Pro generates and verifies hash values before and after acquisition, logging results to confirm data integrity for evidentiary defense.
-
Is FTK Imager Pro suitable for court-admissible evidence collection?
Yes. It supports logging, hashing, and write-blocking features required for chain-of-custody and evidentiary integrity.
-
Do I need a password when processing decrypted disks?
No. Once decrypted during acquisition, the resulting image is already in a decrypted state.
Resources
Product Briefs
FTK® Imager for Data Preview & Imaging - Product Brief
Need a quick way to see what data is on a computer hard drive? Join the thousands of forensic professionals worldwide who trust FTK Imager as their go-to solution for the first step in investigating an electronic device. FTK Imager is a FREE data preview and imaging tool used to acquire electronic evidence in a forensically sound manner by creating copies of computer data without making changes to the original evidence.
Product Briefs
10 Reasons Why You Should Upgrade from Imager to FTK® - Product Brief
While FTK Imager excels at electronic device imaging, its analysis and review capabilities are limited. Download this resource to learn what the full-featured FTK Forensic Toolkit can do for you that FTK Imager can't. Here are 10 core forensic analysis and review tasks that you're going to want to perform in FTK.
White Papers
Top 10 Most Underrated FTK Features
FTK digital forensic software is feature-rich to enable forensic investigators to collaborate effectively, reduce backlog and automate collections and processing.
Ready to Get More Out of Your Imaging Solution?
Unlock FTK Imager Pro today.