Suggestions appear as you type. Use the up and down arrows to choose one and Enter to open it.

This page's audience our own tag's counts — open to see them
–Visits
–Page views
–Clicks to vendors
–Time on page
–Reading now
Clicks to vendors, by tool
  • –
Top countries
  • –
Devices
  • –

– · visits, page views and clicks counted by our own tag, which counts more than our checked analytics; every figure rounded down · how we count

The Best Ransomware Decryption Tools in 2026

Avast Decryption Tools is the leading pick because its free Windows collection helps identify a strain from its name, extension and ransom note, while a single utility supports AtomSilo alongside LockFile. Avast Decryption Tools is the best free option. It suits Windows users checking whether their infection appears in the supported list, and its strain-specific coverage includes a tool that can restore data when the strain's offline key matches. For a versatile Windows workflow, Trend Micro Ransomware File Decryptor is a strong fit: users can select a family themselves or let signatures identify it, then work through single files or directory trees while keeping activity records. Kaspersky RakhniDecryptor suits users facing varied supported infections because it examines internal, removable and network storage and provides command-line plus resumable recovery controls. The collection also includes focused tools for particular strains, so checking coverage before running any decryptor is essential; each utility works only with the ransomware families or variants it supports.

Our top picks

  1. Top ranked

    9.3/10

    A free collection of strain-specific Windows tools, with coverage limited to supported variants.

    Free plan

  2. Runner-up

    A free Windows decryptor with broad family coverage, but recovery depends on the infection.

    Free plan

  3. Top-ranked free plan

    A broad free decryptor with drive scanning and command-line recovery controls.

    Free plan

Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.

The full ranking 21 tools, best first

21 tools
  1. Best forWindows users checking for a listed ransomware strain

    A free collection of strain-specific Windows tools, with coverage limited to supported variants.

    9.3/10★★★★★
    Visit Avast
  2. Best forWindows users needing a versatile decryptor

    A free Windows decryptor with broad family coverage, but recovery depends on the infection.

    9.1/10★★★★★
    Visit Trend Micro
  3. Best forWindows users with diverse supported infections

    A broad free decryptor with drive scanning and command-line recovery controls.

    • Command-line operation
    9.0/10★★★★☆
    Visit Kaspersky
  4. Best forTeams decrypting files across connected drives

    A free Windows toolkit for trying strain-specific recovery across queued drives and locations.

    8.8/10★★★★☆
    Visit Emsisoft
  5. Best forWindows users with one of seven listed strains

    A focused set of free Windows decryptors for files affected by seven listed strains.

    8.7/10★★★★☆
    Visit AVG
  6. Best forWindows users with supported GandCrab versions

    A focused free decryptor for GandCrab versions 1, 4 and 5.0.1–5.2.

    8.6/10★★★★☆
    Visit Bitdefender
  7. Best forWindows users with supported Crysis variants

    A focused, free decryptor for supported Crysis/Wallet variants, with command-line options.

    • Command-line operation
    8.5/10★★★★☆
    Visit ESET
  8. Best forRecovering files from REvil or Sodinokibi

    A focused, free decryptor for eligible REvil/Sodinokibi attacks on Windows.

    8.4/10★★★★☆
    Visit Bitdefender
  9. Best forWindows users affected by ShrinkLocker

    A focused BitLocker decryptor for ShrinkLocker recovery, not general ransomware cleanup.

    • Offline use
    • Command-line operation
    8.3/10★★★★☆
    Visit Bitdefender
  10. Best forUsers with STOP Djvu files and a matching offline key

    A focused, no-cost recovery option when STOP Djvu files match an available offline key.

    8.2/10★★★★☆
    Visit Emsisoft
  11. Best forUsers affected by Merry X-Mas ransomware

    A focused, free utility for decrypting files affected by Merry X-Mas ransomware.

    8.1/10★★★★☆
    Visit Check Point
  12. Best forUsers affected by Mira ransomware

    A free, focused decryptor for files affected by Mira ransomware.

    8.0/10★★★★☆
    Visit F-Secure
  13. Best forWindows users recovering files encrypted by LooCipher

    A focused, free Windows decryptor for supported LooCipher files, with recovery run through CMD.

    • Command-line operation
    7.9/10★★★★☆
    Visit KISA
  14. Best forUsers wanting prevention, not file decryption

    A broad security suite with ransomware protection, but no listed file decryption.

    7.7/10★★★★☆
    Visit Trend Micro
  15. Best forWindows users needing offline Chaos-family recovery

    A focused, offline-capable option for recovering files affected by Chaos-family ransomware.

    • Offline use
    7.7/10★★★★☆
    Visit Truesec
  16. Best forUsers affected by BarRax ransomware

    A focused, free decryptor for BarRax-affected Windows machines.

    • Command-line operation
    7.5/10★★★★☆
    Visit Check Point
  17. Best forWindows users affected by Nemty ransomware

    A focused Nemty decryptor with recursive path processing and a clear results summary.

    7.4/10★★★★☆
    Visit Tesorion
  18. Best forTechnical users recovering eligible Black Basta files

    A command-line recovery toolkit for files affected by a specific Black Basta strain.

    • Command-line operation
    7.3/10★★★★☆
    Visit SRLabs
  19. Best forLinux users with eligible LockBit 3.0 files

    A free Linux command-line decryptor for eligible LockBit 3.0 files.

    • Command-line operation
    7.2/10★★★★☆
    Visit LockBit Rescue
  20. Best forTechnical users with Gentlemen ransomware artifacts

    A free, command-line recovery tool for Gentlemen ransomware when matching keys are in memory.

    • Command-line operation
    7.0/10★★★★☆
    Visit site
  21. Best forAndroid users affected by CryCryptor

    A free Android decryptor focused specifically on devices compromised by CryCryptor.

    6.9/10★★★☆☆
    Visit ESET

No tools match those filters.

Compare at a glance

#ToolFree planPaid fromSupported strainsRecovery methodSupported operating systemsScore
1Avast Decryption ToolsYesFreeAES_NI, Alcatraz Locker, Apocalypse, AtomSilo, LockFile, Babuk, BadBlock, Bart, BigBobRoss, BTCWare, Crypt888, CryptoMix (Offline), CrySiS, EncrypTile, FindZip, Fonix, GandCrab, Globe, HermeticRansom, HiddenTear, Jigsaw, LambdaLocker, Legion, NoobCrypt, Prometheus, Stampado, SZFLocker, TargetCompany, TeslaCrypt, Troldesh / Shade, XDataDecryptorWindows9.3
2Trend Micro Ransomware File DecryptorYesFreeCryptXXX V1/V2/V3/V4/V5; TeslaCrypt V1/V2/V3/V4; SNSLocker; AutoLocky; BadBlock; 777; XORIST; XORBAT; CERBER V1; Stampado; Nemucod; Chimera; LECHIFFRE; MirCop; Jigsaw; Globe/Purge; DXXD; Teamxrat/Xpan; Crysis; TeleCrypt; DemoTool; WannaCry (WCRY); PetyaDecryptorWindows9.1
3Kaspersky RakhniDecryptorYesFreeConti; Ragnarok; Fonix; Rakhni; Agent.iih; Autoit; Aura; Pletor; Rotor; Lamer; Cryptokluchen; Democry; GandCrypt (versions 4 and 5); Bitman (versions 3 and 4); Libra; Lobzik; Lortok; Yatron; Chimera; CryFile; Crypren.afjh (FortuneCrypt); Nemchig; Mircop; Mor; Crusis (Dharma); AecHu; Jaff; Cryakl; Maze; Sekhmet; EgregorDecryptorWindows (the tool is launched as RakhniDecryptor.exe)9.0
4Emsisoft Ransomware Decryption ToolsYesFreeDecryptorWindows8.8
5AVG Ransomware Decryption ToolsYesFreeApocalypse, BadBlock, Bart, Crypt888, Legion, SZFLocker, TeslaCryptDecryptorWindows (BadBlock fixes explicitly offered for 32-bit and 64-bit Windows)8.7
6Bitdefender GandCrab DecryptorYesFreeGandCrab versions 1, 4, and 5.0.1–5.2; not versions 2 or 3DecryptorWindows8.6
7ESET Crysis DecryptorYesFree.xtbl, .crysis, .crypt, .lock, .crypted, .dharma, .wallet, .onion (supported Crysis/Wallet variants)DecryptorWindows8.5
8Bitdefender REvil/Sodinokibi Decryption ToolYesFreeREvil; SodinokibiDecryptorWindows8.4
9Bitdefender ShrinkLocker UnlockerYesFreeShrinkLockerDecryptorWindows8.3
10Emsisoft STOP Djvu DecryptorYesFreeSTOP Djvu (including older Djvu variants, subject to decryption limitations)DecryptorWindows8.2
11Check Point Merry X-Mas DecryptorYesFreeMerry X-Mas ransomwareDecryptor8.1
12F-Secure Mira DecryptorYesFreeMiraDecryptor8.0
13KISA LooCipher Ransomware Decryption ToolYesFreeLooCipherDecryptor7.9
14Trend Micro Maximum SecurityNo$104.95/yr7.7
15Truesec Chaos Family DecryptorsYesFreeDecryptorWindows7.7
16Check Point BarRax DecryptorYesFreeBarRax RansomDecryptor7.5
17Tesorion Nemty DecryptorYesFreeNemtyDecryptor7.4
18SRLabs Black Basta BusterYesFreeBlack Basta strain used around April 2023Both7.3
19LockBit RescueYesFreeLockBit 3.0 (Black); CriptomanGizmoDecryptorLinux x86_647.2
20Gentlemen Ransomware DecryptorYesFreeThe Gentlemen (also known as hastalamuerte)Decryptor7.0
21ESET CryDecryptorYesFreeCryCryptorDecryptorAndroid6.9

Head-to-head All 28 comparisons →

Explore other topics All topics →

How we rank ransomware decryption tools

Every tool on this page was researched by iTechGuides Editors from its official website — pricing pages, plan tables and product documentation. We rank on how well each one does this category's core job, what the free or entry plan includes, and where it falls short. Where we have enough verified facts, the score out of 10 is a rubric — job fit, value and how much we could verify — shown with its breakdown on every tool's page; a tool we have not verified enough to score yet shows its rank without a number. Scores are re-checked when a product changes its plans. Read the full editorial policy, or submit a tool we missed.

Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026

Last updated · How we research and update