NTLM Hash Generator
The MD4-based hash Windows stores for local accounts.
About this tool
NTLM is the hash Windows stores for account passwords: the UTF-16 password run through MD4. It appears in the SAM database, in pass-the-hash attacks, and in Active Directory audits. Because MD4 is fast and unsalted, NTLM hashes fall quickly to modern cracking — which is exactly what makes auditing them valuable.
This tool computes NTLM hashes in your browser for password-strength auditing and authorized penetration testing. Enter a candidate password to see the hash a Windows system would store.
Like everything on encrypt.tools, this runs entirely in your browser — nothing you enter is transmitted or stored.
Frequently asked questions about NTLM Hasher
What is an NTLM hash?+
It's the MD4 hash of a password encoded as UTF-16 little-endian — the format Windows stores in its SAM database and Active Directory. It has no salt, so identical passwords always produce identical hashes.
Why are NTLM hashes considered weak?+
NTLM uses unsalted MD4, which is extremely fast to compute. Modern GPUs try billions of candidates per second, so any password short enough to appear in a wordlist or brute-force range is recovered quickly. This is why long, unique passwords matter.
Is generating NTLM hashes legal?+
Computing a hash from a password you know is just math and is used for legitimate password auditing and authorized penetration testing. Only test systems and accounts you own or are authorized to assess.
Related tools
PBKDF2 Derivation
Derive keys from passwords with salt and iterations
ARGON2 · MEMORY-HARDArgon2 Hasher
The password-hashing competition winner, memory-hard
BCRYPT · COSTBcrypt Hasher
Hash and verify passwords with the bcrypt standard
SCRYPT · N/r/pScrypt Calculator
Memory-hard key derivation with tunable N, r, p