unHashhash · verify · identify
Menu

Public deterministic result

NTLM

Unsafe legacy password format
Input
qqgL2E
Iterations
1
Hash 5BBD62AF7EA466F54E98FA4B80B61E69
128 bits 32 hex characters
Other algorithmsqqgL2E encoded to other algorithms, calculated explicitly when needed

The initial result calculates only the requested algorithm.

Calculate all hashes
VariationsBounded related public inputs

Lexicographic Password Neighbors

qq6671qq7961wwqq820737qq8866Qq89052908071qq8920089QQ8Gws75MGO8qqaa11qqaaqqaaqqaassddqqaazqqaazzqqaazzqazqqaazzwwssxxqqaazzxxqqahQqaz2wsxqqbbq6QQCLCFFDQqfhoGQqH92Rqqmfgfqqmoreqqpp1233qqqqqq000qqq028qqq11qqq111qqq1111qqq11111qqq111qqqqq111qqqqqq112233qqq123qqq123123qqq12345qqq123456qqq1234567qqq123456789

Permutations L33t

qqgl2eqqgl23qqg12eqqg123qq9l2eqq9l23qq912eqq9123qqql2eqqql23qqq12eqqq123q9gl2eq9gl23q9g12eq9g123q99l2eq99l23q9912eq99123q9ql2eq9ql23q9q12eq9q123qggl2eqggl23qgg12eqgg123qg9l2eqg9l23qg912eqg9123qgql2eqgql23qgq12eqgq1239qgl2e9qgl239qg12e9qg1239q9l2e9q9l239q912e9q91239qql2e9qql239qq12e9qq12399gl2e99gl2399g12e99g123999l2e999l2399912e99912399ql2e99ql2399q12e99q1239ggl2e9ggl239gg12e9gg1239g9l2e9g9l239g912e9g91239gql2e9gql239gq12e9gq123gqgl2egqgl23gqg12egqg123gq9l2egq9l23gq912egq9123gqql2egqql23gqq12egqq123g9gl2eg9gl23g9g12eg9g123g99l2eg99l23g9912eg99123g9ql2eg9ql23g9q12eg9q123gggl2egggl23ggg12eggg123gg9l2egg9l23gg912egg9123ggql2eggql23ggq12eggq123

Permutations Uppercase And Lowercase

qqgl2eqqgl2EqqgL2eqqgL2EqqGl2eqqGl2EqqGL2eqqGL2EqQgl2eqQgl2EqQgL2eqQgL2EqQGl2eqQGl2EqQGL2eqQGL2EQqgl2eQqgl2EQqgL2eQqgL2EQqGl2eQqGl2EQqGL2eQqGL2EQQgl2eQQgl2EQQgL2eQQgL2EQQGl2eQQGl2EQQGL2eQQGL2E

Algorithm guidance

About NTLM

NTLM is exposed only for compatibility with historical Windows authentication data.

Legacy interoperability and defensive analysis. It is not a modern password-storage format.

Read the NTLM reference
Hash another valueUses the private calculator flow

Digest calculator

Text to hash

Private result

Never enter a real account password or any other secret. Submitted text is processed by the server, but never placed in the URL, logs, analytics, or ads.