unHashhash · verify · identify
Menu

Public deterministic result

NTLM

Unsafe legacy password format
Input
zl1r@t7y
Iterations
1
Hash CF16C9D569F78A9A4A40B6E50D7DAE87
128 bits 32 hex characters
Other algorithmszl1r@t7y encoded to other algorithms, calculated explicitly when needed

The initial result calculates only the requested algorithm.

Calculate all hashes
VariationsBounded related public inputs

Lexicographic Password Neighbors

zl051079zl08157Zl0WIYs6W0xvYzl0yboyazL1011zzzl1015zl10nd05Zl11101982zl12fnjv20vbhzl1427zl16jE8hzl1905zl1906zl1afzzl1bogneZL1e7bNyZl1iU1IRzl1L4FKgZL1MOTORzl1Q2zl1rattyzL1u5QE2zl1ZFJ17199009zl200404zl2011zl29kznzl2aiqzl2c3a2f1m7zL2gTCmzl2nrfzl2RzBsAK2HzL2ShlV4zl2y6i4kZL2zbJftzl30138zl30zl30bczl3270ZL36429L6Jzl37rw6bZL3BYC

Permutations L33t

zl1r@t7yzl1r@ttyzl1r@77yzl1r@7tyzl1r4t7yzl1r4ttyzl1r477yzl1r47tyzl1rat7yzl1rattyzl1ra77yzl1ra7tyzlir@t7yzlir@ttyzlir@77yzlir@7tyzlir4t7yzlir4ttyzlir477yzlir47tyzlirat7yzlirattyzlira77yzlira7tyzllr@t7yzllr@ttyzllr@77yzllr@7tyzllr4t7yzllr4ttyzllr477yzllr47tyzllrat7yzllrattyzllra77yzllra7tyz11r@t7yz11r@ttyz11r@77yz11r@7tyz11r4t7yz11r4ttyz11r477yz11r47tyz11rat7yz11rattyz11ra77yz11ra7tyz1ir@t7yz1ir@ttyz1ir@77yz1ir@7tyz1ir4t7yz1ir4ttyz1ir477yz1ir47tyz1irat7yz1irattyz1ira77yz1ira7tyz1lr@t7yz1lr@ttyz1lr@77yz1lr@7tyz1lr4t7yz1lr4ttyz1lr477yz1lr47tyz1lrat7yz1lrattyz1lra77yz1lra7ty

Permutations Uppercase And Lowercase

zl1r@t7yzl1r@t7Yzl1r@T7yzl1r@T7Yzl1R@t7yzl1R@t7Yzl1R@T7yzl1R@T7YzL1r@t7yzL1r@t7YzL1r@T7yzL1r@T7YzL1R@t7yzL1R@t7YzL1R@T7yzL1R@T7YZl1r@t7yZl1r@t7YZl1r@T7yZl1r@T7YZl1R@t7yZl1R@t7YZl1R@T7yZl1R@T7YZL1r@t7yZL1r@t7YZL1r@T7yZL1r@T7YZL1R@t7yZL1R@t7YZL1R@T7yZL1R@T7Y

Algorithm guidance

About NTLM

NTLM is exposed only for compatibility with historical Windows authentication data.

Legacy interoperability and defensive analysis. It is not a modern password-storage format.

Read the NTLM reference
Hash another valueUses the private calculator flow

Digest calculator

Text to hash

Private result

Never enter a real account password or any other secret. Submitted text is processed by the server, but never placed in the URL, logs, analytics, or ads.