unHashhash · verify · identify
Menu

Public deterministic result

NTLM

Unsafe legacy password format
Input
Mlcr0$0ft12
Iterations
1
Hash 9049ECA8C8FE85BD400629FC12B39C5A
128 bits 32 hex characters
Other algorithmsMlcr0$0ft12 encoded to other algorithms, calculated explicitly when needed

The initial result calculates only the requested algorithm.

Calculate all hashes
VariationsBounded related public inputs

Lexicographic Password Neighbors

mlalondemlancmlarionmlars54mlas002mlashmarmlatinmlaxmimlb123mlb186apmlb643mlbd1967mlbmlbmlc2006mlc6561mlc8chlmlchiefsMLchlmlcj351mlclemomlcsMLcUYmld1313mld1515mleissnemleon69mLesp31MLestemlestrmlewhabumlewis77mlez3filmlf021mlf0311mlf53mlfarmMLFormanmlg1974mlg212mlgcsc

Permutations L33t

mlcr0$0ft12mlcr0$0f712mlcr0$oft12mlcr0$of712mlcr0s0ft12mlcr0s0f712mlcr0soft12mlcr0sof712mlcr050ft12mlcr050f712mlcr05oft12mlcr05of712mlcro$0ft12mlcro$0f712mlcro$oft12mlcro$of712mlcros0ft12mlcros0f712mlcrosoft12mlcrosof712mlcro50ft12mlcro50f712mlcro5oft12mlcro5of712m1cr0$0ft12m1cr0$0f712m1cr0$oft12m1cr0$of712m1cr0s0ft12m1cr0s0f712m1cr0soft12m1cr0sof712m1cr050ft12m1cr050f712m1cr05oft12m1cr05of712m1cro$0ft12m1cro$0f712m1cro$oft12m1cro$of712m1cros0ft12m1cros0f712m1crosoft12m1crosof712m1cro50ft12m1cro50f712m1cro5oft12m1cro5of712

Permutations Uppercase And Lowercase

mlcr0$0ft12mlcr0$0Ft12mlcR0$0ft12mlcR0$0Ft12mlCr0$0ft12mlCr0$0Ft12mlCR0$0ft12mlCR0$0Ft12mLcr0$0ft12mLcr0$0Ft12mLcR0$0ft12mLcR0$0Ft12mLCr0$0ft12mLCr0$0Ft12mLCR0$0ft12mLCR0$0Ft12Mlcr0$0ft12Mlcr0$0Ft12MlcR0$0ft12MlcR0$0Ft12MlCr0$0ft12MlCr0$0Ft12MlCR0$0ft12MlCR0$0Ft12MLcr0$0ft12MLcr0$0Ft12MLcR0$0ft12MLcR0$0Ft12MLCr0$0ft12MLCr0$0Ft12MLCR0$0ft12MLCR0$0Ft12

Algorithm guidance

About NTLM

NTLM is exposed only for compatibility with historical Windows authentication data.

Legacy interoperability and defensive analysis. It is not a modern password-storage format.

Read the NTLM reference
Hash another valueUses the private calculator flow

Digest calculator

Text to hash

Private result

Never enter a real account password or any other secret. Submitted text is processed by the server, but never placed in the URL, logs, analytics, or ads.