FH5 and older support

ForzaCryptoTool v3.3.0

Adds support for FH5 and older.

FH5 and older

• Decrypt and re-encrypt files from FM6 Apex, FH3, FM7, FH4 and FH5: saves, GameDB, loose files
  such as PhysicsSettings.ini, and Method 22 asset ZIPs.
• Runs on your own machine. No internet connection is needed for these games.
• The game and file type are detected automatically when you drop a file.
• To re-encrypt, choose the game under Re-encrypt for on the Dashboard, or use --game on the
  command line:

ForzaCryptoTool decrypt gamedbRC.slt
ForzaCryptoTool encrypt PhysicsSettings_decrypted.ini --game FH4

Downloads

Asset	Platform	Contents
ForzaCryptoTool.exe	Windows x64	Self-contained graphical app and command line
forzacrypto	Linux x64	Self-contained command line
SHA256SUMS.txt	Any	SHA-256 hashes for both binaries

No .NET runtime installation is required.

Notes

• FH5 is supported up to build 1.619.349.0.
• Tested on retail FH3 and FH4 files. FM6 Apex, FM7 and FH5 have not been tested on retail files.
• Forza Horizon 6 works as before and still needs an internet connection.
• Keep a backup of any game file or save before replacing it.

Credits

• Doliman100 — FH5 and older support is based on his
  ForzaTech-crypto-tool.

Asset Browser — browse and edit game files in the tool

ForzaCryptoTool v3.2.0

Adds an Asset Browser: browse the game install inside the tool and edit files in place, instead of
decrypting an archive to disk and opening it in an external editor.

---

Asset Browser

Point it at the game install and expand it as a tree. Archives open from the ZIP central directory
alone — no entry data is read — so expanding a multi-GB archive is instant and costs no decryption
and no network call.

Decryption is deliberately lazy: only the entry you actually click is decrypted, and it is sent to
the service on its own rather than as part of its archive. Opening one XML out of a 5.6 GB archive
uploads a few hundred bytes. Method 0 and method 8 entries are not encrypted at all and open fully
offline.

Per-entry status, before anything is opened

Every entry is classified from its page layout, with no decryption:

Badge	Meaning
plain	Stored or deflate. Opens offline.
encrypted	Method 22, decryptable on open.
locked	Method 22 whose per-page IVs are unavailable.

A locked entry states the reason rather than failing vaguely: only the first chunk's IV is stored in
the file, and the rest are cipher-internal state that cannot be derived from the file's bytes. Such
an entry is never rendered as guessed bytes — the raw ciphertext is available in the hex view
instead. Only openable is ticked by default and can be unticked to see everything.

Archives show a summary such as 122 entries · 44 openable · 78 locked, so you can tell whether one
is worth opening at a glance.

---

Editing

Text files and archive entries can now be edited and saved. Save offers the output folder
(default) or overwriting the original in the game install, behind a second confirmation naming the
exact path. Overwriting always writes a timestamped .bak alongside first.

Saving an entry rebuilds its whole archive with every other entry byte-copied — including
encrypted entries the tool cannot read. Editing one readable file inside an archive full of
unreadable ones is the normal case, and untouched bytes pass straight through.

The file's original BOM and line endings are preserved. The install mixes both (2,598 files carry a
UTF-8 BOM and 1,968 don't; 3,864 are CRLF and 700 LF), so normalizing either would rewrite far more
of a file than you changed.

Nothing is written that fails its own read-back: a rebuilt archive is reopened and the edited entry
compared before it lands, and a re-encrypted archive is reparsed and its entry count checked.

---

Archive handling

New format model with a byte-exact guarantee: repacking an archive with no changes reproduces it
byte for byte. Verified across all 8,888 archives under 32 MB in the retail install.

Untouched entries are byte-copied rather than recompressed, because .NET's deflate does not
reproduce the game packer's bit stream. Local headers and central-directory records are copied with
only the fields that genuinely moved, preserving FH6's quirk of carrying its 0x1123 extra field in
the central directory but not in local headers.

Records are also walked in physical order so inter-entry padding survives. Exactly one archive in the
install (UI.zip) has a 22-byte gap between two entries; packing records contiguously produced a
file 22 bytes short and shifted every later offset. That is why the check runs over the whole install
rather than a sample.

---

Also in this release

• Shared dark styling for grids, tabs and trees, so every view matches.
• A test suite ships with the source. It runs against a real game install and skips cleanly without
  one.
• Encrypted config containers using an .xml extension are now recognized (previously reported as
  unknown).

---

Notes

• Editing is currently offered for text content. Binary formats open read-only in the hex view.
• Locked entries stay locked until their IVs are available; this is a property of the format, not a
  limitation of the client or the service.
• The client holds no encryption keys. Every decrypt and re-encrypt runs service-side, as before.

added a native FH6 profile editor

Forza Crypto Tool v3.1.0

New: native FH6 profile editor

• Open or drag in encrypted or decrypted C_ProfileData files.
• Encrypted profiles are decrypted into a temporary working copy automatically.
• Save validates the edited document, re-encrypts it, and asks where to write the encrypted result.
• Edit typed properties, the canonical account XUID, BXML strings, fixed-width binary scalars, and the embedded SQLite database.
• Unknown seasonal records and catalog drift no longer prevent otherwise valid FH6 saves from opening.
• FH5 compatibility code from the reference editor was intentionally excluded.

Save Swap account labels

• Added Identify accounts to resolve discovered XUID folders to Xbox gamertags through PeopleHub.
• Grab XUID reports and caches the signed-in gamertag for the current UI session.
• Xbox authorization data stays in memory and is not written to logs or settings.

Interface improvements

• Replaced native light ComboBox chrome and popups with a consistent dark theme.
• Added a working manual update check and wired the automatic update preference into startup.

Downloads

Asset	Platform	Contents
ForzaCryptoTool.exe	Windows x64	Self-contained graphical app and command line
forzacrypto	Linux x64	Self-contained command line
SHA256SUMS.txt	Any	SHA-256 hashes for both binaries

No .NET runtime installation is required. The Windows and Linux binaries include their native SQLite dependency.

Notes

• Crypto operations require an internet connection to the configured service.
• Profile editing is intentionally FH6-only.
• Keep an untouched game-save backup and close the game before replacing a save.
• A successful structural round-trip does not substitute for testing every edited field in-game.

Credits

• draff — original profile-editor reference implementation, FH6 format research, and sample save-editor guidance.
• Forza Mods AIO — reference for the Save Swap Xbox account-identification/PeopleHub approach (source).

UI Overhaul + CLI + RUNE support + Fixes

v3.0.0

A full rebuild of Forza Crypto Tool. New interface, a proper command line, save swapping for RUNE, and
a Linux build.

📺 Tutorial video · 💬 Discord support

---

New interface

The tool has been rewritten from the ground up.

• It fits your screen. The old version was laid out in fixed pixels and got cut off on monitors
  that weren't the developer's — buttons ran off the edge or overlapped. The new interface resizes
  properly, reflows when narrow, and scrolls instead of clipping. It's been checked from a 720×560
  window up to 4K, at 100% through 200% display scaling.
• Redesigned dashboard with drag-and-drop, live file identification, and an activity log.
• Save Swap is now a clear three-step flow.
• Dark title bar, and the window remembers its size.

Command line

Everything the app can do is now scriptable. ForzaCryptoTool.exe opens the window when you
double-click it, and runs headlessly when you give it a command:

ForzaCryptoTool decrypt gamedbRC.slt -o db.sqlite
ForzaCryptoTool encrypt db.sqlite -o gamedbRC.slt --force
ForzaCryptoTool encrypt PhysicsSettings_decrypted.ini --original PhysicsSettings.ini
ForzaCryptoTool saveswap donor_C_ProfileData --rune --yes
ForzaCryptoTool detect Camera.zip
ForzaCryptoTool saves

Commands: decrypt · encrypt · detect · saveswap · restore · saves.
Exit codes are meaningful (0 ok, 2 bad usage, 3 not found, 4 service offline, 5 unsupported),
so it works properly in scripts.

Save Swap for RUNE

RUNE installs are detected automatically, at:

C:\Users\Public\Documents\MicrosoftStore\RUNE\Forza Horizon 6 [<id>]\<xuid>\SaveGames\ContainersRoot\User_<hex>\

RUNE uses one fixed account on every install, so the XUID is filled in for you — there's nothing to
look up. Xbox/retail (PGS) saves are still detected as before.

Swaps write a timestamped backup of every file they replace, and Restore original undoes a swap even
after restarting the tool.

Linux

forzacrypto is the same command line as a native Linux binary. It finds saves inside Proton and Wine
prefixes (Steam compatdata, Lutris, Heroic, ~/.wine).

The graphical app remains Windows-only.

---

Downloads

File	For
ForzaCryptoTool.exe	Windows — the app and the command line in one file
forzacrypto	Linux — command line only

Both are self-contained. No .NET install needed.

---

Verified before release

Every supported file type was tested end-to-end against the live service on real game files:

Type	Result
GameDB (gamedbRC.slt, 14.5 MB)	205 tables, 638 cars, integrity_check = ok
Profile save (C_ProfileData)	3,087,088 bytes, valid plaintext
Method 22 (Camera.zip)	244 entries, all valid, clean XML
Config (PhysicsSettings.ini)	66,508 bytes of readable config

The config round-trip was also verified: decrypt → edit → re-encrypt → decrypt returns the edited
file byte-for-byte.

---

Fixes

• Removed a dead fallback server that made every launch wait on a failing connection first.
• Decrypt and re-encrypt availability is now decided in one place, so buttons can't be wrongly greyed
  out for a file type that's actually supported.

Notes

• Decryption still runs server-side. No encryption keys are stored in the app, and the release binary
  contains neither the service address nor the app key.
• Settings and logs move to a new location. The tool writes fresh defaults on first run; nothing from
  v2 is modified.
• v2 is unaffected if you keep it installed — v3 is a separate application.

Config file decryption/encryption support

Adds support for FH6 encrypted config files

---

Config file (.ini) support

• Decrypt & re-encrypt FH6 encrypted config files. Drop a file like
  media\Physics\PhysicsSettings.ini and the tool now detects it, decrypts it to plain editable
  text, and re-encrypts your edits back into a loadable file.
• Auto-detected. Encrypted .ini / .cfg / .config files are recognized on drop and routed
  to the config path.

Workflow: drop the encrypted .ini → Decrypt → edit the text → Re-Encrypt (pick the
original encrypted file when asked) → close FH6, copy the result back in.

Draff is the goat fr fr

ForzaCryptoTool v2.8.0

No more IV capture. Drag, drop, done. This release removes the entire IV-capture workflow — the tool now derives all the IVs it needs, so you just drop a Forza Horizon 6 file and it handles the rest.

Highlights

No IV files needed.

The FH6 file per-chunk IVs have been solved!

• The "Capture IVs" page is gone. No more launching the game to capture, no profile_ivs.json, no IV tables.
• Decrypt, edit, re-encrypt, and save-swap all work straight from the file.

Smart drag-and-drop

Drop any supported FH6 file on the Dashboard and the tool:

1. Auto-detects the type — GameDB, Profile, or Method 22.
2. Detects whether it's encrypted or decrypted.
3. Enables the right action — encrypted → Decrypt, decrypted → Re-Encrypt (plus Merge for decrypted GameDBs).

No more guessing which button to press.

Decrypt any modified database

You can now decrypt a GameDB you've already edited/re-encrypted — not just stock files — so the full decrypt → edit → re-encrypt → re-edit loop works end-to-end.

Merge GameDBs (auto-detect)

The Dashboard Merge button pulls another decrypted GameDB's changes into yours — it automatically detects what changed and applies only those rows, with integrity checks and backups.

UI

• subtle UI changes for a more pleasing look.

Fixed

• Alot

How to use it

1. Dashboard → drag your file onto the drop zone.
2. Click the action it lights up (Decrypt if encrypted, Re-Encrypt if decrypted).
3. Edit the decrypted file in between (e.g. DB Browser for SQLite for GameDBs).
4. Copy the result into your game.

Notes

• Always back up your files before editing.
• Supports FH6 GameDB, PGS / ProfileBackup profiles, and Method 22 asset ZIPs. Other/unknown FH6 container types or non-FH6 files will fail with a clear "unsupported" message rather than produce junk.
• If keys are rotated after a game update, the backend may need updating — please don't spam report when that's the cause.
• Huge thank you to draff ( and his clanker) for helping solve the IV problem!

support for 6.382.893.0 + other improvements/fixes

ForzaCryptoTool V2.7 — Release Notes

⚠️ Major workflow change: Sessions removed

The Sessions tab is gone. The full GameDB flow — decrypt → edit → re-encrypt → re-edit → merge — now happens entirely on the Dashboard with plain files. No session bookkeeping, no hidden state. This is a simpler, more predictable workflow.

New

• Decrypt ANY modified database. You can now decrypt a GameDB you've already edited/re-encrypted — not just stock game files. The tool automatically picks the right decrypt path (IV table for stock DBs, in-file IVs for modified ones), so the re-edit loop works: decrypt → edit → re-encrypt → decrypt again → edit again → re-encrypt.

• Merge another DB's changes (auto-detect). New Merge button on the Dashboard: pick a donor decrypted GameDB and the tool automatically detects what changed in it (added/modified rows) and applies only those rows into your DB — no table-picking. Includes integrity checking, foreign-key safety, and a container-size guard, and it backs up your file first.

• Re-encrypt without sessions. Re-encrypt asks for the original encrypted .slt only when it needs it; right after a decrypt it's one click. Sends the IV table for stock originals and goes table-free for modified ones automatically.

• Real error messages. Backend failures now show the actual reason.

• Multi-version GameDB IV table. The bundled IV table covers multiple game builds at once (currently 6.353.145.0 and 6.382.893.0). This is to add unlimited support for future game versions.

• "No edits detected" warning. After a re-encrypt, if the output is byte-identical to the original, the tool warns you loudly — catching "I forgot to save / edited the wrong file."

• In-app next-step guidance. After each operation the tool tells you exactly what to do next.

Improved

• Auto-update fixed. The updater now points at the correct public releases repo (it was 404'ing before) and gives honest "up to date / no release / can't reach GitHub" messages instead of falsely claiming you're current.

• Older ForzaTech: only valid combos. The game/key-type dropdown now offers only the key types each game actually supports, so you can't pick a combination the backend rejects.

• Consistent naming/icons. The re-encrypt action is "Re-Encrypt" with a single icon everywhere.

• Sidebar navigation rebuilt on a cleaner internal model.

• MS Store version is now FULLY supported.

Fixed

• The "Job polling failed: backend reported failure" error on modified databases — root-caused and fixed across frontend (decrypt-path selection, real error surfacing) and backend (block-0 reconstruction, oversized-recovery rejection).

• Re-Encrypt no longer greys out on a decrypted GameDB loaded on its own.

• Merge no longer freezes the window (runs in the background) and is guarded against exceeding the fixed GameDB container size, with a clear message instead of a confusing backend error.

How to use it (quick reference)

Edit the game database

1. Dashboard → drag your encrypted gamedbRC.slt → Decrypt.
2. Open the ..._decrypted.sqlite in DB Browser for SQLite, edit, Save, close.
3. Re-Encrypt (pick the original .slt if asked) → loadable .slt.

Merge another DB's changes into yours

1. Decrypt your base DB. With the decrypted .sqlite loaded, click Merge.
2. Pick the donor decrypted .sqlite → it auto-applies the donor's changes.
3. Re-Encrypt → loadable .slt.

Notes

• Always back up your files before editing.
• IV capture for Profile and Method 22 is unchanged.
• After a game update there's a chance the backend needs updating. Please don't spam-report issues if the backend simply needs new keys after a patch.

GameDB Editing, DPI Fixes, Auto-Update & Backend Failover

ForzaCryptoTool v2.6.0 — GameDB Editing, DPI Fixes, Auto-Update & Backend Failover

This release completes the GameDB editing workflow and adds several client-side improvements from v2.5 to v2.6.

The headline change is full GameDB decrypt → edit → re-encrypt support. gamedbRC.slt can now be decrypted into a clean SQLite database, edited in a normal SQLite editor, re-encrypted. You cannot replace the games stock DB with an edited DB yet

---

Highlights

• GameDB decrypt and re-encrypt. gamedbRC.slt now decrypts to a clean SQLite database and re-encrypts with edits preserved.
• Bundled GameDB IV table. The required per-chunk IV table is included with the tool and sent automatically.
• DPI scaling fixes. Fixed blurry text, crooked rendering, clipped controls, and sidebar alignment issues on high-DPI displays.
• Responsive UI layout. Sidebar, topbar, icons, dialogs, and navigation controls now scale correctly at higher Windows zoom levels.
• In-app auto-update. The tool can check GitHub Releases, download a new build, replace itself, and relaunch.
• Dual-backend failover. The client can switch between backend hosts if one becomes unavailable. (only this version)

---

GameDB Editing

• Added full GameDB decrypt → edit → re-encrypt support.
• Fixed malformed decrypted GameDB output.
• Fixed the missing per-chunk IV issue that caused bad SQLite pages.
• Recovered and bundled all required GameDB IVs.
• Re-encryption now preserves edits and produces a valid encrypted .slt.
• Re-encrypting an unchanged decrypt reproduces the original file byte-for-byte.
• Edited SQLite databases are reframed, padded, encrypted, and written back as valid GameDB files. (Need patcher to load in game)
• GameDB size changes are handled during re-encryption.
• The GameDB IV table is bundled in the executable.

---

GameDB Quick Start

1. Drop the encrypted gamedbRC.slt onto the Dashboard.
2. Choose Decrypt.
3. Open the decrypted .sqlite in any SQLite editor.
4. Make your edits.
5. Drop the edited .sqlite onto the Dashboard.
6. Choose Re-Encrypt.
7. Wait for patcher.

---

UI & DPI Improvements

• Fixed sidebar padding and alignment issues on high-DPI displays.
• Fixed navigation items appearing offset, clipped, or improperly centered.
• Fixed crooked/blurry text caused by Windows scaling above 100%.
• Fixed inconsistent spacing between icons, labels, and content panels.
• Added proper PerMonitorV2 DPI awareness.
• Added DPI-aware icon sizing.

---

In-App Auto-Update

• Added automatic update checks through GitHub Releases.
• Added startup update checking.
• Added Update now, Skip this version, and Later options.
• Added update download progress.
• Added in-place executable replacement and automatic relaunch.
• Added Check Now button in Settings.
• Added auto-check toggle in Settings.
• Skipped versions are remembered.
• Failed update checks are ignored silently and do not block startup.

---

Multi-Backend Routing

• Added support for multiple backend hosts.
• Added startup backend health checks.
• The first healthy backend is selected and pinned for the session.
• If the active backend becomes unreachable, the client retries once on the next healthy host.
• HTTP errors such as 401 are surfaced normally and do not trigger pointless failover.
• If all backends are offline, the client shows a clear backend-offline message.
• Existing endpoint behavior and request formats remain unchanged.
• Existing application key behavior remains unchanged.

---

Requirements

• Windows x64.
• Forza Horizon 6. (duh)
• Administrator access for IV-capture workflows.
• Reachable ForzaCryptoTool backend and valid application key.
• For GameDB editing: encrypted gamedbRC.slt.

---

Credits

• DVS — ForzaCryptoTool development and crypto research.
• Ariza — save-swap method guidance.
• xxd20xxx — crypto research.

Please report reproducible issues through the repository's Issues tab. Include the tool version, operation, game build, and sanitized diagnostics.

Do not share the raw exe if you want to share the tool please share the github source link.

MS Store Support + GameDB Fix + Older ForzaTech + UI Fixes

ForzaCryptoTool v2.5.0 — Release Notes

---

What's new in 2.5.0

1. Full MS support for Save Swap and IV capture.

2. GameDB — decrypt & edit in any SQL tool

Decrypting gamedbRC.slt now produces a clean, openable SQLite (it used to come out reported as "malformed"). Decrypt → edit values in any SQL editor. Do NOT overwrite your games base encrypted DB with decrypted edited DB - It will not work

3. "Older ForzaTech" support

Bundled https://github.com/Doliman100/ForzaTech-crypto-tool into the backend so you can decrypt older Forza Files in a new "Older ForzaTech" tab

4. UI redesign

• Left sidebar navigation — every tab is always visible at any window size, more compact layout.
• Dark dropdowns (no more system-white).
• No more resize artifacts — clean repainting when you resize the window.

---

Notes

• This is for offline, single-player editing your save, save swapping and any other uses of this tool can result in a ban and im not responsible for your decision.

• Full decrypted GameDB editing and loading into FH6 is in progress. (be patient)

Saveswap Fixed + Profile Editor

ForzaCryptoTool v2.4.0 — Release Notes

---

What's new in 2.4.0

1. Save Swap that actually works (any donor, any size)

The tool had a bug that didnt allow for bigger donor saves and the game would throw error codes or just stall. This is the main issue that has been fixed.

Combined with donor mode (the swap re-encrypts under the donor's own encryption state), this means:

• ✅ Works with a donor bigger than your current save (no more size limit).
• ✅ Works on the cracked build and the Steam build.
• ✅ Replaces the donor's XUID with yours everywhere (both byte orders — fixes garage ownership).

2. Simpler Save Swap — no active IV capture needed

You no longer need to capture an IV table for your active save. The Save Swap tab now needs only:

1. Donor save (the C_ProfileData you want)
2. Donor save IVs (the profile_ivs.json captured for that donor)
3. Active save (the file the game currently loads — it's read to match your build's version, then
   overwritten)
4. Target XUID (your account — use Grab XUID with the Xbox App signed in)

A timestamped backup of your active save is made automatically, and Restore Original Save brings it
back if anything goes wrong.

3. Profile Editor — now edits in-game values

Decrypt your C_ProfileData (with its IV table) and the editor lists its properties. Editable numeric
fields (e.g. TotalCredits, TotalXP, TotalSkills) are marked ✎ edit — double-click one, type a
new value, and it's changed in place. Edit the XUID too if you wanna change your xuid for manual saveswapping aswell, then Re-encrypt & Save. All edits are
written safely (same-width, no structural changes).

---

How to do a save swap (step by step)

1. Capture the donor's IVs (once per donor save if a save is given with IVs this is not needed) with the FH6 Profile IV Tool while that donor save
   is the one loaded in-game — it produces a profile_ivs.json.
2. Open ForzaCryptoTool → Save Swap.
3. Set Donor save = the donor C_ProfileData, Donor save IVs = its profile_ivs.json.
4. Click Auto-detect Active Save (or browse to your PGS C_ProfileData).
5. Click Grab XUID (sign into the Xbox App with your account first), or paste your XUID.
6. Click Swap Save. A backup is made; the swapped file is written.
7. Close any running game, launch Forza Horizon 6.
8. If Xbox shows a "which save?" (local vs cloud) prompt, pick the one you just wrote.

If a swap ever fails, click Restore Original Save.

⚠️ IV freshness: an IV table matches exactly one save version. Don't relaunch the game between
capturing IVs and using them — FH6 autosaves constantly and that invalidates the capture.

---

Known limitation — what a save swap does and doesn't carry

A swap copies everything stored inside C_ProfileData: your garage (all cars + installed parts), credits,
career XP and progress, campaign/feature unlocks, accolades, barn finds, collections, wristbands, photos.

It does not carry data that lives outside C_ProfileData.

---

Notes

• Single self-contained ForzaCryptoTool.exe — no install, no .NET prerequisite.
• The "Backend: connected" indicator (top bar) must be green for Decrypt / Swap / Re-encrypt to work.
• This is for offline, single-player save editing on builds you own. Online play with edited saves is
  your personal choice and i am not responsible for any bans.
• Huge thanks to Ariza for helping figure out the issue.
• Microsoft store version is still in progress.