The Password and the Recovery Key Are Both Gone

The decode

Formatting would indeed destroy the data, so her instinct to ask first is right. The advice she received is technically true — formatting the stick would give a usable device but erase the encrypted contents. Her reluctance to accept that without checking is exactly the correct instinct, because formatting is the one irreversible step, and it should never be taken while any recovery avenue remains unexplored. Preserving the stick as-is keeps every option open.

The honest headline is that sound encryption with no keys is unrecoverable, and that must be said. Strong encryption is designed so that without the password or recovery key, the data cannot be reached — that is the entire point of it. When both credentials are genuinely gone, no laboratory technique unlocks it, and any service claiming to break arbitrary encryption is not being truthful. She deserves that plainly, so she does not pay for a false promise.

But two questions are worth answering before accepting the loss, and they can change the outcome. First, the encryption type: not all "encryption" is equally strong. Some vendor schemes, older methods, or weaker implementations have known limitations that a laboratory can sometimes work with, unlike properly-implemented full-disk encryption. Identifying exactly how the stick is encrypted determines whether it falls into the genuinely-unbreakable category or one with a real avenue. That is established from an image before any conclusion.

Second, the keys may not be as lost as they feel. A forgotten password sometimes returns in fragments — a remembered length, a structure, a partial recollection — which, on a small defined space, can be searchable. A "lost" recovery key was written somewhere when the encryption was set up: a saved file, a printout, an account, a note. Searching properly for surviving traces of either credential is genuine work with a real, if uncertain, chance, and it is worth doing before declaring the data gone.

The honest close is delivered without false hope. If the encryption is sound and no key material survives, the truthful answer is that the data is sealed — the same protection that would keep a thief out keeps everyone out — and formatting would only reclaim the device, not the data. If the encryption has a known weakness, or a trace of a key is found, that avenue is pursued fully. Which applies is established honestly, and stated plainly, before any charge.

On the bench

The stick was imaged under a hardware write-blocker before anything, so no format or write could occur. The encryption type was identified from the image — distinguishing sound full-disk encryption from weaker or vendor schemes with known limitations — and any surviving key material, remembered password fragments, or backups of the key searched for. Where the encryption was sound and no key survived, an honest statement was given that the data is sealed, with confirmation that formatting is destructive.

The outcome

Encryption type identified, every surviving trace of a key searched for, and an honest verdict delivered on whether the data is reachable. The diagnostic costs nothing and completes within two working days of arrival, and the quote is one fixed written figure with VAT already in it; if the data can't be brought back, no charge is made. The decode: sound encryption with both keys gone can't be broken — and you were right that formatting would only lose the data. But before accepting that, we confirm the encryption type and hunt for any surviving trace of a key, because that is the one real chance and it deserves checking.

Our case files are written up from genuine enquiries our lab has handled for customers across Swansea and South Wales, anonymised to protect client confidentiality. Each one describes the diagnostic and recovery approach our engineers apply to that fault, using the equipment listed.