Truesec Chaos Family Decryptors review
A focused, offline-capable option for recovering files affected by Chaos-family ransomware.
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Truesec Chaos Family Decryptors is a free Windows desktop tool for recovering files encrypted by Chaos-family ransomware. Its wizard guides users through selecting a strain or using an identification aid, setting the encrypted-file extension, and choosing folders to process. It is aimed at people who have identified a Chaos-family incident and need a focused decryptor rather than a general-purpose recovery utility. The software is GPLv3-licensed, and its source code is available on GitHub.
The workflow offers practical control over which files are targeted: users can select folders and optionally include subdirectories through recursive parsing. Decryption uses a local or downloadable database, and offline recovery is possible if that database is transferred from an internet-connected system. That makes the tool relevant where the affected Windows computer cannot connect to the internet, though database preparation must happen elsewhere in that case. The identification aid can help with strain selection, but the decryptor’s scope remains the Chaos family; it is not presented as a solution for other ransomware families.
The manual emphasizes precautions before recovery: back up drives, stop the ransomware, preserve disk space, and verify recovered files. These steps matter because decryption is only one part of incident recovery, and the tool does not replace containment or backup practices. Its free availability and narrow purpose make it a reasonable fit for users handling Chaos-family encryption on Windows, especially when offline work is needed. Users facing a different ransomware family, or looking for a broader recovery suite, should choose another tool. Truesec AB distributes the decryptor through the No More Ransom project.
Truesec Chaos Family Decryptors pros and cons
- Where it wins
- Wizard guides strain selection, file-extension settings and folder targeting.
- Can process selected folders recursively, including subdirectories.
- Supports offline decryption with a database transferred from another system.
- Where it doesn't
- Limited to files affected by Chaos-family ransomware.
- Recovery depends on a local or downloaded decryption database.
- The manual advises backups, stopping the ransomware and preserving disk space.
Truesec Chaos Family Decryptors fact sheet, pricing and score →
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update