unHashhash · verify · identify
Menu

Public deterministic result

NTLM

Unsafe legacy password format
Input
zi10ndo$
Iterations
1
Hash B6B87C30CC835A567EAF321B233A2C4F
128 bits 32 hex characters
Other algorithmszi10ndo$ encoded to other algorithms, calculated explicitly when needed

The initial result calculates only the requested algorithm.

Calculate all hashes
VariationsBounded related public inputs

Lexicographic Password Neighbors

ZHzvcNzhzvxvdazhzwcF3!zHZweeZEzHZzQUL5H9EJZi$aJYzi-rimzi-ziizi.A5Ooqxqmjzi01zi0603zi065camzi08819588886056zi09tolviZI0C35ztZi0nravezI0ob9Izi0p95zi0vgtgzi0xqbh9zi114n3njw4zi11ma27ZI12345BAzi13558346zi1366613zi1407naZI1973zi1awzi1ure6azi1ybysezi1zi1zi1zouyzi2005zi208qurzI210574zi2125zI227G8rzi2424zi251180zi260994

Permutations L33t

zi10ndo$zi10ndoszi10ndo5zi10nd0$zi10nd0szi10nd05zi1ondo$zi1ondoszi1ondo5zi1ond0$zi1ond0szi1ond05zii0ndo$zii0ndoszii0ndo5zii0nd0$zii0nd0szii0nd05ziiondo$ziiondosziiondo5ziiond0$ziiond0sziiond05zil0ndo$zil0ndoszil0ndo5zil0nd0$zil0nd0szil0nd05zilondo$zilondoszilondo5zilond0$zilond0szilond05z110ndo$z110ndosz110ndo5z110nd0$z110nd0sz110nd05z11ondo$z11ondosz11ondo5z11ond0$z11ond0sz11ond05z1i0ndo$z1i0ndosz1i0ndo5z1i0nd0$z1i0nd0sz1i0nd05z1iondo$z1iondosz1iondo5z1iond0$z1iond0sz1iond05z1l0ndo$z1l0ndosz1l0ndo5z1l0nd0$z1l0nd0sz1l0nd05z1londo$z1londosz1londo5z1lond0$z1lond0sz1lond05

Permutations Uppercase And Lowercase

zi10ndo$zi10ndO$zi10nDo$zi10nDO$zi10Ndo$zi10NdO$zi10NDo$zi10NDO$zI10ndo$zI10ndO$zI10nDo$zI10nDO$zI10Ndo$zI10NdO$zI10NDo$zI10NDO$Zi10ndo$Zi10ndO$Zi10nDo$Zi10nDO$Zi10Ndo$Zi10NdO$Zi10NDo$Zi10NDO$ZI10ndo$ZI10ndO$ZI10nDo$ZI10nDO$ZI10Ndo$ZI10NdO$ZI10NDo$ZI10NDO$

Algorithm guidance

About NTLM

NTLM is exposed only for compatibility with historical Windows authentication data.

Legacy interoperability and defensive analysis. It is not a modern password-storage format.

Read the NTLM reference
Hash another valueUses the private calculator flow

Digest calculator

Text to hash

Private result

Never enter a real account password or any other secret. Submitted text is processed by the server, but never placed in the URL, logs, analytics, or ads.