unHashhash · verify · identify
Menu

Public deterministic result

NTLM

Unsafe legacy password format
Input
su6@zero
Iterations
1
Hash EB8C026AD3BA8FF016A7B347E0AE37CB
128 bits 32 hex characters
Other algorithmssu6@zero encoded to other algorithms, calculated explicitly when needed

The initial result calculates only the requested algorithm.

Calculate all hashes
VariationsBounded related public inputs

Lexicographic Password Neighbors

su2daysu2raysu2shi8esu2weisu33f44su3daysu3raysu3shi2esu44edsu45jojhsu4arasu4etovsu4kasu4nhsgsu57wbsu5j6ssu5risesu5shi4esu5SUsu2su66esssu6god26su6limeSu6X9SH5su8daysu8risesuabajgmsuadsuadessualksualkmjsualokinsuansuannesuaresuarezsuarez123suaspontsuaspontesuasticaSuAUjB

Permutations L33t

su6@zerosu6@zer0su6@z3rosu6@z3r0su64zerosu64zer0su64z3rosu64z3r0su6azerosu6azer0su6az3rosu6az3r0sub@zerosub@zer0sub@z3rosub@z3r0sub4zerosub4zer0sub4z3rosub4z3r0subazerosubazer0subaz3rosubaz3r05u6@zero5u6@zer05u6@z3ro5u6@z3r05u64zero5u64zer05u64z3ro5u64z3r05u6azero5u6azer05u6az3ro5u6az3r05ub@zero5ub@zer05ub@z3ro5ub@z3r05ub4zero5ub4zer05ub4z3ro5ub4z3r05ubazero5ubazer05ubaz3ro5ubaz3r0$u6@zero$u6@zer0$u6@z3ro$u6@z3r0$u64zero$u64zer0$u64z3ro$u64z3r0$u6azero$u6azer0$u6az3ro$u6az3r0$ub@zero$ub@zer0$ub@z3ro$ub@z3r0$ub4zero$ub4zer0$ub4z3ro$ub4z3r0$ubazero$ubazer0$ubaz3ro$ubaz3r0

Permutations Uppercase And Lowercase

su6@zerosu6@zeRosu6@zErosu6@zERosu6@Zerosu6@ZeRosu6@ZErosu6@ZERosU6@zerosU6@zeRosU6@zErosU6@zERosU6@ZerosU6@ZeRosU6@ZErosU6@ZERoSu6@zeroSu6@zeRoSu6@zEroSu6@zERoSu6@ZeroSu6@ZeRoSu6@ZEroSu6@ZERoSU6@zeroSU6@zeRoSU6@zEroSU6@zERoSU6@ZeroSU6@ZeRoSU6@ZEroSU6@ZERo

Algorithm guidance

About NTLM

NTLM is exposed only for compatibility with historical Windows authentication data.

Legacy interoperability and defensive analysis. It is not a modern password-storage format.

Read the NTLM reference
Hash another valueUses the private calculator flow

Digest calculator

Text to hash

Private result

Never enter a real account password or any other secret. Submitted text is processed by the server, but never placed in the URL, logs, analytics, or ads.