unHashhash · verify · identify
Menu

Public deterministic result

NTLM

Unsafe legacy password format
Input
ihaLLf@x
Iterations
1
Hash CD8523376BE82A0740C0F584AAD882B8
128 bits 32 hex characters
Other algorithmsihaLLf@x encoded to other algorithms, calculated explicitly when needed

The initial result calculates only the requested algorithm.

Calculate all hashes
VariationsBounded related public inputs

Lexicographic Password Neighbors

ih0pe4m0ih2ba1dih82bl8ih82w8ih82wrkih8819Ih8bartih8donnaih8fedzih8gwzih8i52ih8ndsih8peopleIh8PWsih8togih8youihaa91ihabIHADWIHahUnUFENiQeihanaaihaoihappyihasz39ihateihate1ihate31ihateallihateall220390ihateaolihatebenihateboys!ihatecmuihatedeeihatefatihatehackersihateherihatehimIHateHotF1leihateit

Permutations L33t

ihallf@xihallf4xihallfaxihal1f@xihal1f4xihal1faxiha1lf@xiha1lf4xiha1lfaxiha11f@xiha11f4xiha11faxih4llf@xih4llf4xih4llfaxih4l1f@xih4l1f4xih4l1faxih41lf@xih41lf4xih41lfaxih411f@xih411f4xih411faxih@llf@xih@llf4xih@llfaxih@l1f@xih@l1f4xih@l1faxih@1lf@xih@1lf4xih@1lfaxih@11f@xih@11f4xih@11fax1hallf@x1hallf4x1hallfax1hal1f@x1hal1f4x1hal1fax1ha1lf@x1ha1lf4x1ha1lfax1ha11f@x1ha11f4x1ha11fax1h4llf@x1h4llf4x1h4llfax1h4l1f@x1h4l1f4x1h4l1fax1h41lf@x1h41lf4x1h41lfax1h411f@x1h411f4x1h411fax1h@llf@x1h@llf4x1h@llfax1h@l1f@x1h@l1f4x1h@l1fax1h@1lf@x1h@1lf4x1h@1lfax1h@11f@x1h@11f4x1h@11fax

Permutations Uppercase And Lowercase

ihallf@xihalLf@xihaLlf@xihaLLf@xihAllf@xihAlLf@xihALlf@xihALLf@xiHallf@xiHalLf@xiHaLlf@xiHaLLf@xiHAllf@xiHAlLf@xiHALlf@xiHALLf@xIhallf@xIhalLf@xIhaLlf@xIhaLLf@xIhAllf@xIhAlLf@xIhALlf@xIhALLf@xIHallf@xIHalLf@xIHaLlf@xIHaLLf@xIHAllf@xIHAlLf@xIHALlf@xIHALLf@x

Algorithm guidance

About NTLM

NTLM is exposed only for compatibility with historical Windows authentication data.

Legacy interoperability and defensive analysis. It is not a modern password-storage format.

Read the NTLM reference
Hash another valueUses the private calculator flow

Digest calculator

Text to hash

Private result

Never enter a real account password or any other secret. Submitted text is processed by the server, but never placed in the URL, logs, analytics, or ads.