🏢 NTLM Hash Generator

🔑
Length: {{ password.length }} characters
⚙️
🎨
📝
🔐

Generated Hashes

{{ result.hashes.ntlm }}
32-character MD4 hash of UTF-16LE encoded password
{{ result.hashes.lm }}
⚠️ Legacy DES-based hash - extremely insecure
📊

Password Analysis

Length
{{ result.password_info.password_length }} characters
Unicode
{{ result.password_info.has_unicode ?'Yes' :'No' }}
Complexity Analysis
✓ Lowercase: {{ result.password_info.complexity.has_lowercase ?'Yes' :'No' }}
✓ Uppercase: {{ result.password_info.complexity.has_uppercase ?'Yes' :'No' }}
✓ Digits: {{ result.password_info.complexity.has_digits ?'Yes' :'No' }}
✓ Special chars: {{ result.password_info.complexity.has_special ?'Yes' :'No' }}
Strength Score: {{ result.password_info.complexity.score }}/100
{{ formatStrengthLevel(result.password_info.complexity.level) }}
⚠️

Security Warnings

{{ getWarningIcon(warning.type) }} {{ warning.message }}

🔐 NTLM Hash Results

Enter a password above to generate NTLM hashes...

⚠️ {{ error }}

ℹ️ About NTLM Hash Generation

NTLM (NT LAN Manager) is a legacy Microsoft authentication family used by Windows, SMB, and some domain environments. This tool generates NT hashes and legacy LM hashes for controlled compatibility testing, password-audit labs, and forensic notes. Microsoft's protocol documentation for the NTLM authentication protocol is published as MS-NLMP.

Common Use Cases:

  • Windows domain authentication and Active Directory
  • SMB/CIFS network protocol authentication
  • Security testing and penetration testing
  • Password cracking research and analysis
  • Forensic analysis of Windows systems
  • Legacy system compatibility testing

Hash Types:

  • NT hash: MD4 hash of the UTF-16LE encoded password, shown as 32 hexadecimal characters.
  • LM hash: legacy DES-based format that uppercases and splits passwords into 7-character chunks; included only for old-system analysis.

Technical Details:

  • NTLM uses MD4 hashing of the Unicode (UTF-16LE) password; MD4 is specified in RFC 1320.
  • No salt is used, making it vulnerable to rainbow table attacks
  • LM hash converts to uppercase and truncates at 14 characters
  • Modern Windows systems disable LM hashes by default

Security Warning: NTLM hashes are password-equivalent secrets and can be abused in pass-the-hash workflows. They are unsalted and fast to test offline. LM hashes are extremely insecure and should remain disabled. Prefer Kerberos, modern Windows authentication hardening, strong password policy, and monitored credential rotation for production systems.

API Usage Example:

POST /api/tools/crypto/ntlm
Content-Type: application/json

{
    "password": "Password123",
    "outputFormat": "hex",
    "includeHash": true,
    "includeLm": false
}
Ready