Skip to main content
appkiro.comappkiro.com

NTLM Hash Generator

Calculate an NT password hash for an authorised lab, migration check or controlled audit.

What this tool does

An NT hash is the MD4 digest of a password encoded as UTF-16LE and is normally represented as 32 hexadecimal characters. NT hashes are unsalted and weak by modern standards, so this tool must not be used to design a password-storage system or access accounts without permission.

Use a non-production test password and generate the NT hash only for an authorised workflow.

Maximum 500,000 characters: 0 / 500000

No result

How to use it

  1. Enter only a lab or test password you are authorised to process.

  2. Generate the digest and confirm the 32-character uppercase hexadecimal output.

  3. Use the result only in the documented audit, migration or compatibility workflow.

Key features

  • NT hash calculation defined as MD4 over UTF-16LE bytes.
  • 32-character hexadecimal output.
  • Focused explanation of the algorithm and its security limitations.

Practical use cases

  • Validating a controlled migration or compatibility test.
  • Building authorised security-lab fixtures.
  • Comparing a known test vector during defensive auditing.

Limitations and important notes

  • NT hashes are unsalted and unsuitable for modern password storage.
  • Use only data you are authorised to process; do not paste production credentials.
  • Hex letter casing does not change the digest value, but match the format expected by the target system.

Troubleshooting

The output is not what I expected.

Recheck the input, selected options and the limitation notes below; preserve the original before trying a destructive cleanup. NT hashes are unsalted and unsuitable for modern password storage.

The page becomes slow with a large input or repeat count.

Reduce the input, split the operation into smaller batches and close other memory-heavy tabs. Keep an original copy before retrying.

The result changes after I paste it elsewhere.

Test the destination app, font and character encoding. Some apps normalize whitespace or render Unicode differently.

Frequently asked questions

How is an NTLM hash calculated?

An NT hash is the MD4 digest of a password encoded as UTF-16LE and is normally represented as 32 hexadecimal characters. NT hashes are unsalted and weak by modern standards, so this tool must not be used to design a password-storage system or access accounts without permission.

What is the NTLM/NT hash formula?

Encode the password as UTF-16LE, calculate MD4 over those bytes and render the 16-byte digest as 32 hexadecimal characters.

Is an NT hash secure for storing passwords?

No. It is unsalted and based on MD4. Use a modern, purpose-built password hashing scheme selected by your security team.

What are the limitations?

NT hashes are unsalted and unsuitable for modern password storage. Use only data you are authorised to process; do not paste production credentials. Hex letter casing does not change the digest value, but match the format expected by the target system.

Use the tool

Use a non-production test password and generate the NT hash only for an authorised workflow.