🔐 encrypt.tools
NTLM · WINDOWS

NTLM Hash Generator

The MD4-based hash Windows stores for local accounts.

Free · no sign-up · runs locally·

FIELD NOTES

About this tool

NTLM is the hash Windows stores for account passwords: the UTF-16 password run through MD4. It appears in the SAM database, in pass-the-hash attacks, and in Active Directory audits. Because MD4 is fast and unsalted, NTLM hashes fall quickly to modern cracking — which is exactly what makes auditing them valuable.

This tool computes NTLM hashes in your browser for password-strength auditing and authorized penetration testing. Enter a candidate password to see the hash a Windows system would store.

Like everything on encrypt.tools, this runs entirely in your browser — nothing you enter is transmitted or stored.

COMMAND LINE

Do the same in a terminal

Reproduce or cross-check this tool with standard command-line utilities. For deterministic operations like hashing and encoding, the output matches exactly.

$ printf 'password' | iconv -t UTF-16LE | openssl dgst -md4 -provider legacy -provider default
MD4(stdin)= 8846f7eaee8fb117ad06bdd830b7586c
FREQUENTLY ASKED

Frequently asked questions about NTLM Hasher

What is an NTLM hash?+

It's the MD4 hash of a password encoded as UTF-16 little-endian — the format Windows stores in its SAM database and Active Directory. It has no salt, so identical passwords always produce identical hashes.

Why are NTLM hashes considered weak?+

NTLM uses unsalted MD4, which is extremely fast to compute. Modern GPUs try billions of candidates per second, so any password short enough to appear in a wordlist or brute-force range is recovered quickly. This is why long, unique passwords matter.

Is generating NTLM hashes legal?+

Computing a hash from a password you know is just math and is used for legitimate password auditing and authorized penetration testing. Only test systems and accounts you own or are authorized to assess.

RELATED INSTRUMENTS