NTLM Hash Generator
Compute the NTLM hash (MD4 over the UTF-16LE password) that Windows stores in the SAM and Active Directory, locally in your browser.
- Runs in your browser
- Free to use
About this tool
The NTLM Generator produces the NT hash exactly as Windows computes it: the password is converted to UTF-16 little-endian and hashed with MD4. The plain UTF-8 MD4 is shown too for comparison. Everything happens in your browser, which is important when the input is a real credential. Keep in mind that NTLM is unsalted MD4 over the UTF-16LE password: it is trivially crackable with rainbow tables and should only be used for compatibility testing, never as a way to protect passwords.
Other digests: MD5, SHA family.
How to use it — quick steps
- 01
Enter the password
Type or paste the password in the field above, for example password123. Use Ctrl + V to paste.
- 02
Adjust the options
Pick the settings that fit your case; the defaults work for most people. Changes apply instantly.
- 03
Press "Generate NTLM hash"
Press "Generate NTLM hash" or Ctrl + Enter. The result appears instantly below the form.
Key features of this tool
Nothing leaves your browser
The processing is plain JavaScript that runs on your device: the text you paste is never uploaded to our servers or to anyone else.
Instant results
Results appear the moment you press the button, even for long inputs, and every block has copy and download actions.
Works everywhere
No installation, no account and no limits: the tool works on desktop and mobile, in any modern browser, as often as you like.
Frequently asked questions
What is an NTLM hash?
The NT hash is MD4 applied to the password encoded as UTF-16LE. It is unsalted, so identical passwords always produce the same hash, which makes it trivial to crack with rainbow tables.
Why would I need it?
To verify a hash seen in a pentest report, to feed test data into tools, or to check that a password policy actually changed a stored value.
Are my files or data uploaded?
No. The tool is plain JavaScript that runs in your browser; the files or data you provide here are never uploaded to our servers.