Attack simulator
Explore how attackers test a target hash against a list of likely passwords. This simulator is intentionally local, rate-limited, and educational so students can understand why common passwords are risky.
Safe learning note
Use only the demo hashes generated on this page. Do not use this tool against accounts, leaked hashes, or systems you do not own or have permission to test.
Generate a demo hash from a password, or paste another demo hash produced by the same selected algorithm.
a9e63a98One candidate per line. The simulator hashes each candidate and stops when a hash matches the target.
Each row shows one password guess, its computed demo hash, and whether it matched.
Dictionary attacks are effective when users choose common passwords that appear in likely-word lists.
Use long unique passwords, password managers, rate limits, MFA, and slow password hashing such as bcrypt, scrypt, or Argon2.
The simulator uses local demo hashes only and caps dictionary size to avoid turning the page into a real cracking tool.