WebToolsPlanet
Security Tools

NTLM Hash Generator

Generate NTLM hashes for lab work, migration checks, password-audit fixtures, and compatibility testing with older Windows authentication data.

NTLM128-bitUTF-16LEBrowser based

Last updated: May 30, 2026

Client-Side Processing
Input Data Stays on Device
Instant Local Execution

Find this tool useful? Support the project to keep it free!

Buy me a coffee

What is NTLM Hash Generator?

An NTLM hash is the MD4 digest of a password encoded as UTF-16LE. It is associated with older Windows authentication workflows and is commonly seen in password audit and migration contexts.

Treat NTLM hashes as password-equivalent secrets. This page is intended for local testing and controlled fixtures, not for pasting real production passwords into untrusted environments.

How to Use NTLM Hash Generator

1

Type the password or sample text to hash

2

Review the generated NTLM hash

3

Toggle uppercase if your tooling expects capital hex

4

Copy the hash for controlled tests or migration checks

Common Use Cases

  • Creating NTLM fixtures for password migration tests.
  • Checking expected NT hash values in lab environments.
  • Reproducing old authentication examples.
  • Comparing UTF-16LE password hashing behavior.

Example Input and Output

Generate the well-known NTLM test vector for password.

Input text
password
NTLM hash
8846f7eaee8fb117ad06bdd830b7586c

How This Tool Works

The tool converts the input string to UTF-16LE bytes, runs MD4 over those bytes, and formats the 128-bit result as hexadecimal in the browser.

Technical Stack

TypeScriptUTF-16LE encodingMD4Client-side hashing

Variant

MD4 over UTF-16LE password bytes.

Security note

NTLM hashes are password-equivalent secrets. Use this page for lab data and fixtures, not production credentials.

Frequently Asked Questions

How is an NTLM hash calculated?
It is MD4 applied to the password encoded as UTF-16LE code units.
Is an NTLM hash safe to share?
No. NTLM hashes can be used in pass-the-hash attacks and should be treated like passwords.
What is the output length?
NTLM outputs 128 bits, displayed as 32 hexadecimal characters.
Is the password uploaded?
No. The hash is generated locally in your browser.