Hashcat — Password Cracker GuideStep-by-step reference: install & use Hashcat for password recovery — dictionary, brute-force, rules, hash types. Educational purposes only.FAQ

What is Hashcat?

Hashcat is an open-source password recovery tool that cracks password hashes using GPU acceleration. It tries billions of guesses per second across dictionary, brute-force, combinator and rule-based attacks.

Is Hashcat illegal?

No. Hashcat is a legitimate open-source tool used by security professionals for authorized password recovery and auditing. Using it to crack passwords you do not own or lack permission to test is illegal. Only run it on your own hashes or in an authorized engagement.

What does the -m flag do?

The -m flag sets the hash type (mode). For example -m 0 is MD5, -m 1000 is NTLM, -m 3200 is bcrypt and -m 1800 is sha512crypt. Using the wrong mode means the hash will never match.

What is a dictionary attack?

The -a 0 attack takes a wordlist (like the popular rockyou.txt) and tries each word as the password. Weak, common passwords fall almost instantly. It is the fastest way to crack predictable passwords.

What is a brute-force attack?

The -a 3 attack tries every possible combination of a character set. It works for short numeric pins or simple patterns but the search space explodes as length grows, so long random passwords are effectively uncrackable.

What are rules?

Rules transform base words into many variants (adding digits, capitalizing, appending symbols). Using -r with a rules file turns one wordlist entry into thousands of guesses, catching passwords like Summer → Summer2026!.

Why use a password manager?

A password manager generates and stores long, unique, random passwords for every account. That removes the single biggest cracker advantage: reused and weak human-chosen passwords. Length beats complexity.

How do I protect my own passwords?

Use 12+ random characters, a unique password per account, and a password manager. For extra protection enable multi-factor authentication where possible.

All tools · Sitemap · Games