vCard Contact
| Format | vCard Contact |
|---|---|
| Short name | vCard |
| Category | document |
| Platforms | Windows, macOS, Linux, iOS, Android, QNX |
| Crush support | Not yet supported |
| Status | Reviewed |
| Last reviewed | 2026-10-05 |
Forensic relevance
Text format for contact data (versions 2.1, 3.0 and 4.0), used for contact exports and synchronisation by phones, mail clients and address books. A file can contain many contacts, each between BEGIN:VCARD and END:VCARD, with names, phone numbers, e-mail and postal addresses, organisation, notes, embedded photos (PHOTO) and optionally a last revision time (REV). Exports can preserve contacts that were later deleted on the device.
Signatures
| Offset | Hex | ASCII (non-printable as .) | Description |
|---|---|---|---|
| offset 0 (0x0) | 42 45 47 49 4E 3A 56 43 41 52 44 | BEGIN:VCARD | Start line 'BEGIN:VCARD' (may be preceded by a byte order mark) |
Known extensions
.vcf, .vcard
References
- vCard Format Specification (RFC 6350) https://www.rfc-editor.org/rfc/rfc6350.html
Cite this entry
Crush Format Reference, “vCard Contact”. https://kalink0.github.io/crush-forensics/formats/vcard/ — source: crush/data/build_formats_db.py at commit 640a2a9928f4e36a976b89901512a8dce824d093, built 2026-10-21 06:46:19 UTC.
Entry in the source at this commit · Change history of the source · Report a correction