hashcat
advanced password recovery

Navigation

Download

Name Version Date Download Signature
hashcat binaries v8.0.0 2026.10.25 Download PGP
hashcat sources v8.0.0 2026.10.25 Download PGP
Signing key on PGP keyservers: RSA, 2048-bit. Key ID: 2048R/8A16544F. Fingerprint: A708 3322 9D04 0B41 99CC 0052 3C17 DA8B 8A16 544F

Check out our GitHub Repository for the latest development version

GPU Driver requirements:

  • NVIDIA GPUs require the NVIDIA driver and the "NVIDIA CUDA Toolkit"
  • AMD GPUs on Linux require "ROCm"
  • AMD GPUs on Windows require "AMD Adrenalin Edition" and the "AMD HIP SDK"
  • Intel GPUs require the "Intel Graphics Compute Runtime", aka NEO
  • Intel and AMD CPUs require the "Intel CPU Runtime for OpenCL" or PoCL
  • Apple systems need nothing extra, macOS ships Metal and OpenCL

Minimum versions and details: hashcat requirements

Features

  • World's fastest password cracker
  • World's first and only in-kernel rule engine, usable in every attack mode
  • Free and open source, under the MIT license
  • Multi-OS: Linux, Windows and macOS, and builds from source on BSD and Android
  • Multi-backend: CUDA, HIP, Metal and OpenCL
  • Multi-device: several devices, and mixed device types, in one system
  • Multi-hash: cracks large numbers of hashes at once
  • Over 720 hash modes, each written with performance in mind
  • Hash recipes: write a hash as pbkdf2_sha256(md5(pass), salt, iter, 32), fully GPU accelerated
  • 10 attack modes for password candidate generation
  • Assimilation bridge: add a hash mode in C, Python or Rust, without writing a kernel
  • Brain: skips candidates an earlier session already tried
  • Distributed cracking networks, using an overlay
  • Reads candidates from a wordlist, from stdin, or from another program
  • Reads wordlists compressed with gzip, xz or zstd
  • Seekable wordlists
  • Markov chain keyspace ordering, so the likely candidates come first
  • Automatic performance tuning per device
  • Interactive pause, resume, rewind and advance
  • Named sessions, and restore after an interruption
  • Built-in benchmark
  • Integrated thermal watchdog

Screenshot

$ ./hashcat -m 75000 hash.txt -a 4
hashcat (v8.0.0) starting

Assimilation Bridge
===================
* Units #01-#02: ypcb bcrypt, 760 cores @ 115 MHz x 2 boards
  Board #01: Path:/dev/litepcie0, PCIe:1, ID:9091612394dd17, Sensors:Temp
  Board #02: Path:/dev/litepcie1, PCIe:1, ID:aa814b0059a3de, Sensors:Temp

OpenCL API (OpenCL 3.0 LINUX) - Platform #1 [Intel(R) Corporation]
==================================================================
* Device #01 -> #02: Intel(R) Core(TM) i5-9600K CPU @ 3.70GHz, 6MCU

Minimum password length supported by kernel: 0
Maximum password length supported by kernel: 72
Minimum salt length supported by kernel: 0
Maximum salt length supported by kernel: 256

pcfg: no ruleset named, running hashcat's own default-passwords
pcfg: default-passwords.tar.xz, 152 files in one archive
pcfg: loading 146 terminal lists
pcfg: terminal lists loaded in 0s 076ms
pcfg: grammar read in 0s 002ms, 23144 structures
pcfg: suffix tables read from cache in 0s 010ms
pcfg: 23144 structures, 146 terminal lists, 4 unusable dropped, 10 outside 0-72 bytes
pcfg: host engine, every candidate is built here and copied over
pcfg: CP.level read in 0s 293ms, 2482909 n-grams
pcfg: rest of OMEN in 1s 403ms
pcfg: OMEN escape carried, 15 levels over 1 model, 26386266585 guesses, 700 MiB of tables
pcfg: OMEN tables loaded in 1s 697ms
pcfg: building the level index
pcfg: level index built in 0s 003ms, 57 levels

Hashes: 1 digests; 1 unique digests, 1 unique salts
Bitmaps: 15 bits, 32768 entries, 0x00007fff mask, 131072 bytes
Rules: 1

Optimizers applied:
* Zero-Byte
* Single-Hash
* Single-Salt

Temperature abort Watchdogs:
* Candidate generator aborts at 90c
* Bridge units #1-#2 abort at 80c

Host memory allocated for this attack: 549 MB (29743 MB free)

[s]tatus [p]ause [r]ewind [a]dvance [b]ypass [c]heckpoint [f]inish [q]uit =>

$2a$05$MBCzKhG1KhezLh.0LRa0Kuw12nLJtpHy6DIaU.JAnqJUDYspHC.Ou:hashcat

Session..........: hashcat
Status...........: Cracked
Hash.Mode........: 75000 (bcrypt $2*$, Blowfish (Unix) [Bridged: FPGA])
Hash.Target......: $2a$05$MBCzKhG1KhezLh.0LRa0Kuw12nLJtpHy6DIaU.JAnqJU...pHC.Ou
Time.Started.....: Sat Oct 24 22:02:13 2026 (19 mins, 29 secs)
Time.Estimated...: Sat Oct 24 22:21:42 2026 (0 secs)
Kernel.Feature...: Pure Kernel (password length 0-72 bytes)
Guess.Base.......: Feed (default-passwords (scale 1, host, OMEN))
Guess.Queue......: 1/1 (100.00%)
Speed.#*.........:   256.4 kH/s (218.70ms) @ Accel:38 Loops:32 (x2)
Recovered........: 1/1 (100.00%) Digests (total), 1/1 (100.00%) Digests (new)
Progress.........: 300034320/34935457766817424 (0.01%)
Rejected.........: 0/300034320 (0.00%)
Restore.Point....: 299976560/34935457766817424 (0.01%), Iterations:32
Restore.Sub......: #01:0/0 #02:0/0
Candidate.Engine.: Host Generator + PCIe
Candidates.#02...: healich -> hitlibe
Hardware.Mon.#01.: Temp: #02:73c #01:60c

Started: Sat Oct 24 22:02:10 2026
Stopped: Sat Oct 24 22:21:42 2026

Algorithms

Constructions of the raw hashes, with nesting, salts, utf16le or HMAC, run as hash recipes.
For example md5($salt.sha1($pass)) is hash-mode 4000, see the hash recipe guide.

Raw Hash

  • MD2
  • MD4
  • MD5
  • MD6 *
  • SHA-0
  • SHA1
  • SHA2 *
  • SHA3 *
  • RIPEMD *
  • RIPEMD (original)
  • BLAKE2b, BLAKE2s *
  • BLAKE *
  • GOST R 34.11-2012 (Streebog) *
  • GOST R 34.11-94 (incl. CryptoPro)
  • Half MD5
  • Keccak *
  • ShangMi 3 (SM3)
  • Whirlpool (incl. Whirlpool-0, Whirlpool-T)
  • Tiger, Tiger2 *
  • TTH (Tiger Tree Hash, single leaf)
  • Snefru *
  • Skein-512 *
  • PANAMA
  • MDC-2
  • HAVAL (3, 4, 5 passes) *
  • BMW *
  • CubeHash *
  • ECHO *
  • Fugue *
  • Groestl *
  • Hamsi *
  • JH *
  • Luffa *
  • Shabal *
  • SHAvite-3 *
  • SIMD *
  • HAS-160
  • EDON-R *
  • RadioGatun[32], RadioGatun[64]

Raw Hash salted and/or iterated

  • UUID v3 (MD5)
  • UUID v5 (SHA-1)

Raw Hash authenticated

  • SipHash
  • Fernet (key = SHA256($pass))

Raw Cipher, Known-plaintext attack

  • RC4
  • 3DES (PT = $salt, key = $pass)
  • DES (PT = $salt, key = $pass)
  • AES-ECB (PT = $salt, key = $pass)
  • ChaCha20
  • Linux Kernel Crypto API (2.4)
  • Skip32 (PT = $salt, key = $pass)
  • MIFARE Ultralight C

Generic KDF

  • PBKDF1-SHA1
  • PBKDF2-HMAC (MD5, SHA1, SHA2) *
  • Argon2
  • bcrypt
  • scrypt
  • phpass
  • yescrypt
  • gost-yescrypt

Network Protocol

  • TACACS+
  • DANE RFC7929/RFC8162 SHA2-256
  • SIP digest authentication (MD5)
  • IKE-PSK
  • SNMPv3
  • WPA/WPA2 (PMKID, EAPOL, PMK)
  • IPMI2 RAKP
  • CRAM-MD5
  • MS SNTP
  • JWT (JSON Web Token)
  • Kerberos 5
  • NetNTLMv1 / NetNTLMv1+ESS
  • NetNTLMv2
  • Flask Session Cookie ($salt.$salt.$pass)
  • Amazon AWS Signature Version 4
  • iSCSI CHAP authentication, MD5(CHAP)
  • iClass
  • SASL DIGEST-MD5
  • POP3 APOP
  • Mikrotik RouterOS EC-SRP5
  • OSPFv2/RIPv2 MD5 authentication

Forums, CMS, E-Commerce

  • WBB (Woltlab Burning Board)
  • PHPS
  • SMF (Simple Machines Forum) > v1.1
  • MediaWiki B type
  • Redmine
  • Simpla CMS - md5($salt.$pass.md5($pass))
  • Umbraco HMAC-SHA1
  • Empire CMS (Admin password)
  • Joomla < 2.5.18
  • OpenCart
  • PrestaShop
  • Tripcode
  • Drupal7
  • CubeCart (whirlpool($salt.$pass.$salt))
  • PunBB
  • MyBB 1.2+, IPB2+ (Invision Power Board)
  • vBulletin (< 3.8.5, 3.8.5+)
  • osCommerce, xt:Commerce
  • MODX Evolution (uncrypt)

Database Server

  • MSSQL (2000, 2005, 2012, 2014, 2025)
  • MongoDB
  • PostgreSQL
  • Oracle
  • MySQL
  • Sybase ASE

FTP, HTTP, SMTP, LDAP Server

  • DNSSEC (NSEC3)
  • KNX IP Secure - Device Authentication Code
  • CRAM-MD5 Dovecot
  • SSHA-256/512(Base64), LDAP {SSHA256/512}
  • Radmin3
  • Dahua Authentication MD5
  • RedHat 389-DS LDAP (PBKDF2-HMAC-SHA256)
  • Besder Authentication MD5
  • FileZilla Server >= 0.9.55
  • ColdFusion 10+
  • Apache $apr1$ MD5, md5apr1, MD5 (APR)
  • Episerver
  • hMailServer
  • Netscape LDAP SHA/SSHA
  • mega.nz password-protected link

Raw Checksum

  • CRC32
  • CRC32C
  • CRC64Jones
  • Java Object hashCode()
  • MurmurHash

Operating System

  • RACF
  • AIX
  • LM
  • QNX /etc/shadow
  • DPAPI masterkey file (v1, v2)
  • GRUB 2
  • MS-AzureSync PBKDF2-HMAC-SHA256
  • AS/400
  • BSDi Crypt, Extended DES
  • NTLM
  • Radmin2
  • Samsung Android Password/PIN
  • Microsoft Online Account
  • Windows Hello PIN/Password
  • Windows Phone 8+ PIN/password
  • Cisco
  • Citrix NetScaler
  • Domain Cached Credentials (DCC, DCC2)
  • FortiGate (FortiOS)
  • ArubaOS
  • Juniper
  • Juniper/NetBSD sha1crypt
  • iPhone passcode (UID key + System Keybag)
  • macOS (10.4 - 10.8+)
  • bcrypt $2*$, Blowfish (Unix)
  • md5crypt, MD5 (Unix), Cisco-IOS $1$ (MD5)
  • descrypt, DES (Unix), Traditional DES
  • sha256crypt $5$, SHA256 (Unix)
  • sha512crypt $6$, SHA512 (Unix)
  • sm3crypt $sm3$, SM3 (Unix)
  • MD5(Sun), SunMD5
  • gost12512crypt [$gost12512hash$] (Unix)
  • scryptcrypt, scrypt (Unix)
  • Huawei / H3C / HPE Comware $h$6$
  • NTLM(NTLM_bin($pass))

Enterprise Application Software (EAS)

  • SAP CODVN
  • RSA Security Analytics / NetWitness (sha256)
  • Adobe AEM (SSPR, SHA2 with Salt) *
  • PeopleSoft
  • NetIQ SSPR
  • SolarWinds Orion (v1, v2)
  • SolarWinds Serv-U
  • Lotus Notes/Domino (5, 6, 8)
  • OpenEdge Progress Encode
  • Oracle Transportation Management (SHA256)
  • Huawei sha1(md5($pass).$salt)
  • AuthMe sha256

Archive

  • 7-Zip
  • RAR3
  • RAR5
  • PKZIP
  • SecureZIP
  • Veeam VBK
  • WinZip
  • Android Backup
  • Kremlin Encrypt 3.0 w/NewDES
  • Stuffit5
  • AxCrypt (1, 2)
  • iTunes backup (< 10.0, 10.0+)

Full-Disk Encryption (FDE)

  • AES Crypt (SHA256)
  • VMware VMX (PBKDF2-HMAC-SHA1 + AES-256-CBC)
  • LUKS (v1, v2)
  • VeraCrypt
  • BestCrypt Volume Encryption (v3, v4)
  • FileVault 2
  • VirtualBox
  • DiskCryptor
  • BitLocker
  • Android FDE (<= 4.3, Samsung DEK)
  • Apple File System (APFS)
  • TrueCrypt
  • eCryptfs
  • FreeBSD GELI
  • OpenBSD softraid FDE

File-Based Encryption (FBE)

  • ENCsecurity Datavault
  • Google fscrypt (Argon2id)

Document

  • PDF (1.1 - 1.7, Acrobat 2 - 11)
  • MS Office (97-2003, 2007 - 2016)
  • Open Document Format (1.1, 1.2)
  • Apple Secure Notes
  • Apple iWork

Password Manager

  • 1Password
  • Password Safe (v2, v3)
  • LastPass + LastPass sniffed
  • KeePass (KDBX v2, v3, v4)
  • Bitwarden
  • Ansible Vault
  • Mozilla key3.db, key4.db
  • Apple Keychain
  • KDE KWallet

One-Time Password

  • TOTP (HMAC-SHA1)

Framework

  • Web2py pbkdf2-sha512
  • Perl Mojolicious session cookie
  • Django
  • Apache Shiro 1 SHA-512
  • Atlassian (PBKDF2-HMAC-SHA1)
  • Ruby on Rails Restful-Authentication
  • Python Werkzeug
  • Python passlib
  • Wordpress bcrypt(hmac-sha384($pass))
  • Symfony Legacy SHA256

Private Key

  • PKCS#8 Private Keys
  • JKS Java Key Store Private Keys (SHA1)
  • GPG
  • RSA/DSA/EC/OpenSSH Private Keys
  • PKCS#12 (.pfx, .p12)
  • Apple DMG

Instant Messaging Service

  • XMPP SCRAM PBKDF2-SHA1
  • Teamspeak 3 (channel hash)
  • Telegram
  • Skype
  • Anope IRC Services (enc_sha256)

Cryptocurrency Wallet

  • Terra Station Wallet (AES256-CBC(PBKDF2($pass)))
  • MetaMask Wallet
  • Bisq .wallet (scrypt)
  • BitShares v0.x - sha512(sha512_bin(pass))
  • Bitcoin WIF private key
  • Bitcoin raw private key
  • Bitcoin/Litecoin wallet.dat
  • Electrum Wallet
  • Blockchain, My Wallet
  • Dogechain.info Wallet
  • Stargazer Stellar Wallet XLM
  • Ethereum Wallet
  • MultiBit
  • Exodus Desktop Wallet (scrypt)
  • BIP39 Passphrase
  • Cardano Eternl Wallet

Application Database

  • SQLCipher
  • SecureCRT MasterPassphrase v2
  • XCA database password

* every digest size hashcat supports for that hash, such as 224, 256, 384 and 512 bit

Attack-Modes

  • Straight: every word of a wordlist
  • Combination: two words joined, one from each wordlist
  • Brute-force: every candidate a mask allows
  • PCFG: a trained grammar makes the candidates, most likely first
  • Table: tables say what each token may become
  • Generic: candidates come from a feed plugin
  • Association: guesses from each hash's own context, such as its account name
  • Hybrid: the mask says where the word goes
  • ... and others

All attack modes accept rules.

Supported compute runtimes

  • AMD OpenCL
  • AMD HIP (ROCm on Linux, HIP SDK on Windows)
  • Apple OpenCL
  • Apple Metal
  • Intel OpenCL
  • Mesa rusticl OpenCL
  • NVidia OpenCL
  • NVidia CUDA
  • POCL OpenCL

Supported compute device types

Help

A detailed description of all commandline parameters is available by using --help. The package also contains the documentation in its docs folder, and example0.sh and example0.cmd to try a first attack. If you encounter a Bug, report it in the Forums where Fixes and Beta versions are announced as well.

If you still think you need help by a real human come to our Discord, or to #hashcat on Libera.Chat IRC.

Download older version(s)

This is a list of older hashcat versions, it's not always bad to grab the latest version.

Name Version Date Download Signature
hashcat binaries v7.1.2 2025.08.23 Download PGP
hashcat sources v7.1.2 2025.08.23 Download PGP
hashcat binaries v7.1.1 2025.08.18 Download PGP
hashcat sources v7.1.1 2025.08.18 Download PGP
hashcat binaries v7.1.0 2025.08.16 Download PGP
hashcat sources v7.1.0 2025.08.16 Download PGP
hashcat binaries v7.0.0 2025.08.01 Download PGP
hashcat sources v7.0.0 2025.08.01 Download PGP
hashcat binaries v6.2.6 2022.09.02 Download PGP
hashcat sources v6.2.6 2022.09.02 Download PGP
hashcat binaries v6.2.5 2021.11.21 Download PGP
hashcat sources v6.2.5 2021.11.21 Download PGP
hashcat binaries v6.2.4 2021.08.29 Download PGP
hashcat sources v6.2.4 2021.08.29 Download PGP
hashcat binaries v6.2.3 2021.07.16 Download PGP
hashcat sources v6.2.3 2021.07.16 Download PGP
hashcat binaries v6.2.2 2021.06.13 Download PGP
hashcat sources v6.2.2 2021.06.13 Download PGP
hashcat binaries v6.2.1 2021.05.15 Download PGP
hashcat sources v6.2.1 2021.05.15 Download PGP
hashcat binaries v6.2.0 2021.05.14 Download PGP
hashcat sources v6.2.0 2021.05.14 Download PGP
hashcat binaries v6.1.1 2020.07.29 Download PGP
hashcat sources v6.1.1 2020.07.29 Download PGP
hashcat binaries v6.1.0 2020.07.28 Download PGP
hashcat sources v6.1.0 2020.07.28 Download PGP
hashcat binaries v6.0.0 2020.06.16 Download PGP
hashcat sources v6.0.0 2020.06.16 Download PGP
hashcat binaries v5.1.0 2018.12.02 Download PGP
hashcat sources v5.1.0 2018.12.02 Download PGP
hashcat binaries v5.0.0 2018.10.28 Download PGP
hashcat sources v5.0.0 2018.10.28 Download PGP
hashcat binaries v4.2.1 2018.08.07 Download PGP
hashcat sources v4.2.1 2018.08.07 Download PGP
hashcat binaries v4.2.0 2018.08.02 Download PGP
hashcat sources v4.2.0 2018.08.02 Download PGP
hashcat binaries v4.1.0 2018.02.21 Download PGP
hashcat sources v4.1.0 2018.02.21 Download PGP
hashcat binaries v4.0.1 2017.11.07 Download PGP
hashcat sources v4.0.1 2017.11.07 Download PGP
hashcat binaries v4.0.0 2017.10.27 Download PGP
hashcat sources v4.0.0 2017.10.27 Download PGP
hashcat binaries v3.6.0 2017.06.09 Download PGP
hashcat sources v3.6.0 2017.06.09 Download PGP
hashcat binaries v3.5.0 2017.04.05 Download PGP
hashcat sources v3.5.0 2017.04.05 Download PGP
hashcat binaries v3.40 2017.03.03 Download PGP
hashcat sources v3.40 2017.03.03 Download PGP
hashcat binaries v3.30 2017.01.06 Download PGP
hashcat sources v3.30 2017.01.06 Download PGP
hashcat binaries v3.20 2016.12.02 Download PGP
hashcat sources v3.20 2016.12.02 Download PGP
hashcat binaries v3.10 2016.08.19 Download PGP
hashcat sources v3.10 2016.08.19 Download PGP
hashcat binaries v3.00 2016.06.29 Download PGP
hashcat sources v3.00 2016.06.29 Download PGP