ShadowExplorer — The Free Windows-Snapshot Recovery Tool
ShadowExplorer is the free tool that recovers from Windows' own Volume Shadow Copies. If you have ever taken a snapshot, it is the first tool to try — free, no subscription, no limit.
What it does
ShadowExplorer runs on Windows and lists every Volume Shadow Copy the system has kept. You browse a snapshot like a file tree, pick the files you want, and copy them out (to the current Windows or a USB drive). If a ransomware run encrypted your files but did not delete the shadow copies (the C3RB3R variant did not, in most cases), ShadowExplorer is the free path to a clean pre-infection state. It is Windows-only — for a NAS, use the vendor's snapshot tool (Hyper Backup, HBS 3, MyArchive, Duple Backup).
Pricing and the free tier
Free, open-source, no limit. No subscription, no per-file fee. If your Windows system has shadow copies enabled (most do), ShadowExplorer is the first free tool to try.
Good at
- Recovering from Windows Volume Shadow Copies (free)
- Undoing a ransomware run that did not delete the shadow copies
- Free, no subscription, no limit
Not for
- NAS arrays (it is a Windows tool)
- Recovering from a dead Windows install (bootable media is separate)
- Recovering a file that was deleted before the last shadow copy
Key features
- Free, open-source, no limit
- Browses Windows Volume Shadow Copies
- Recovers to the current Windows or a USB
- Works for ransomware that did not delete the shadows
Frequently asked questions
Is ShadowExplorer free?
Yes — free, open-source, no limit. No subscription.
Can ShadowExplorer recover a Synology NAS?
No — it is a Windows tool. For a NAS, use the vendor's snapshot tool (Hyper Backup, HBS 3, MyArchive, Duple Backup) or R-Studio.
Why did ShadowExplorer work when the files were encrypted?
The ransomware encrypted the live files but did not delete the Volume Shadow Copies. ShadowExplorer browses the shadows, which still hold the pre-infection state.
Tools are half the picture — the snapshot and backup layer is the other half. See the 3-2-1 backup guide, the ransomware recovery walkthrough, and what decryption tools actually exist.
Last updated: November 2026 · prices are US list prices at the time of writing. As an Amazon Associate we earn from qualifying purchases.