| 1Password(Agile Keychain) | 6600 | — |
| 1Password(Cloud Keychain) | 8200 | — |
| 7-zip | 11600 | 7z |
| Adler-32 | — | — |
| AIX(smd5) | 6300 | aix-smd5 |
| AIX(ssha1) | 6700 | aix-ssha1 |
| AIX(ssha256) | 6400 | aix-ssha256 |
| AIX(ssha512) | 6500 | aix-ssha512 |
| Android Backup | 18900 | androidbackup |
| Android FDE ≤ 4.3 | 8800 | fde |
| Android PIN | 5800 | — |
| Apache MD5 | 1600 | — |
| Argon2d | — | argon2 |
| Argon2i | — | argon2 |
| Argon2id | — | — |
| bcrypt | 3200 | bcrypt |
| bcrypt(SHA-256) | — | — |
| BigCrypt | — | bcrypt |
| Bitcoin / Litecoin | 11300 | bitcoin |
| BitLocker | 22100 | bitlocker |
| Blake2 | 600 | raw-blake2 |
| BLAKE2-224 | — | — |
| BLAKE2-256 | — | — |
| BLAKE2-384 | — | — |
| Blake2b-256 | — | — |
| BLAKE2b-512 | 600 | — |
| Blowfish(OpenBSD) | 3200 | bcrypt |
| BSDi Crypt | 12400 | bsdicrypt |
| Cisco Type 4 | — | cisco4 |
| Cisco Type 7 | — | — |
| Cisco Type 8 | 9200 | cisco8 |
| Cisco Type 9 | 9300 | cisco9 |
| Cisco VPN Client(PCF-File) | — | — |
| Cisco-ASA(MD5) | 2410 | asa-md5 |
| Cisco-IOS(MD5) | 500 | md5crypt |
| Cisco-IOS(SHA-256) | 5700 | — |
| Cisco-PIX(MD5) | 2400 | pix-md5 |
| Citrix Netscaler | 8100 | citrix_ns10 |
| Clavister Secure Gateway | — | — |
| CRAM-MD5 | 10200 | — |
| CRC-16 | — | — |
| CRC-16-CCITT | — | — |
| CRC-24 | — | — |
| CRC-32 | 11500 | crc32 |
| CRC-32B | — | — |
| CRC-64 | — | — |
| CRC-96(ZIP) | — | — |
| Crypt16 | — | — |
| CryptoCurrency(Adress) | — | — |
| CryptoCurrency(PrivateKey) | — | — |
| Dahua | — | dahua |
| DES(Unix) | 1500 | descrypt |
| DEScrypt | 1500 | descrypt |
| Django(bcrypt) | — | — |
| Django(bcrypt-SHA256) | — | — |
| Django(DES Crypt Wrapper) | — | — |
| Django(MD5) | — | — |
| Django(PBKDF2-HMAC-SHA1) | — | — |
| Django(PBKDF2-HMAC-SHA256) | 10000 | django |
| Django(SHA-1) | 124 | — |
| Django(SHA-256) | — | — |
| Django(SHA-384) | — | — |
| DNSSEC(NSEC3) | 8300 | — |
| Domain Cached Credentials | 1100 | mscash |
| Domain Cached Credentials 2 | 2100 | mscash2 |
| Double MD5 | 2600 | — |
| Double SHA-1 | 4500 | — |
| Drupal > v7.x | 7900 | drupal7 |
| Eggdrop IRC Bot | — | bfegg |
| Electrum Wallet (Salt-Type 1-3) | 16600 | electrum |
| Electrum Wallet (Salt-Type 4) | 21700 | electrum |
| Electrum Wallet (Salt-Type 5) | 21800 | electrum |
| ELF-32 | — | — |
| EPi | 123 | — |
| EPiServer 6.x < v4 | 141 | episerver |
| Ethereum Pre-Sale Wallet, PBKDF2-HMAC-SHA256 | 16300 | ethereum-presale-opencl |
| Ethereum Wallet, PBKDF2-HMAC-SHA256 | 15600 | ethereum-opencl |
| Fairly Secure Hashed Password | — | — |
| FCS-16 | — | — |
| FCS-32 | — | — |
| Fletcher-32 | — | — |
| FNV-132 | — | — |
| FNV-164 | — | — |
| Fortigate(FortiOS) | 7000 | fortigate |
| FreeBSD MD5 | 500 | md5crypt |
| GHash-32-3 | — | — |
| GHash-32-5 | — | — |
| GOST CryptoPro S-Box | — | — |
| GOST R 34.11-94 | 6900 | gost |
| GRUB 2 | 7200 | — |
| Half MD5 | 5100 | — |
| HAS-160 | — | — |
| Haval-128 | — | haval-128-4 |
| Haval-160 | — | — |
| Haval-160 (3 rounds) | 6000 | dynamic_190 |
| Haval-160 (4 rounds) | 6000 | dynamic_200 |
| Haval-160 (5 rounds) | 6000 | dynamic_210 |
| Haval-192 | — | — |
| Haval-192 (3 rounds) | 6000 | dynamic_220 |
| Haval-192 (4 rounds) | 6000 | dynamic_230 |
| Haval-192 (5 rounds) | 6000 | dynamic_240 |
| Haval-224 | — | — |
| Haval-224 (4 rounds) | 6000 | dynamic_260 |
| Haval-224 (5 rounds) | 6000 | dynamic_270 |
| Haval-256 (3 rounds) | — | dynamic_140 |
| Haval-256 (4 rounds) | — | dynamic_290 |
| Haval-256 (5 rounds) | — | dynamic_300 |
| HMAC-MD5 (key = $pass) | 50 | hmac-md5 |
| HMAC-MD5 (key = $salt) | 60 | hmac-md5 |
| HMAC-SHA1 (key = $pass) | 150 | hmac-sha1 |
| HMAC-SHA1 (key = $salt) | 160 | hmac-sha1 |
| HMAC-SHA256 (key = $pass) | 1450 | hmac-sha256 |
| HMAC-SHA256 (key = $salt) | 1460 | hmac-sha256 |
| HMAC-SHA512 (key = $pass) | 1750 | hmac-sha512 |
| HMAC-SHA512 (key = $salt) | 1760 | hmac-sha512 |
| hMailServer | 1421 | hmailserver |
| IKE-PSK MD5 | 5300 | — |
| IKE-PSK SHA1 | 5400 | — |
| IP.Board ≥ v2+ | 2811 | — |
| IPMI2 RAKP HMAC-SHA1 | 7300 | — |
| iSCSI CHAP Authentication | 4800 | chap |
| iTunes backup >= 10.0 | 14800 | itunes-backup |
| Joaat | — | — |
| Joomla ≥ v2.5.18 | 400 | phpass |
| Juniper Netscreen/SSG(ScreenOS) | 22 | md5ns |
| JWT (JSON Web Token) | 16500 | — |
| Keccak-224 | 17700 | — |
| Keccak-256 | 17800 | — |
| Keccak-384 | 17900 | — |
| Keccak-512 | 1800 | — |
| Keepass 1 AES / without keyfile | 13400 | — |
| Keepass 1 Twofish / with keyfile | 13400 | — |
| Keepass 2 AES / with keyfile | 13400 | — |
| Keepass 2 AES / without keyfile | 13400 | — |
| Kerberos 5 AS-REP etype 23 | 18200 | krb5pa-sha1 |
| Kerberos 5 AS-REQ Pre-Auth | 7500 | krb5pa-md5 |
| Kerberos 5 TGS-REP etype 17 (AES128-CTS-HMAC-SHA1-96) | 19600 | — |
| Kerberos 5 TGS-REP etype 18 (AES256-CTS-HMAC-SHA1-96) | 19700 | — |
| Kerberos 5 TGS-REP etype 23 | 13100 | krb5tgs |
| Kerberos 5, etype 17, Pre-Auth | 19800 | — |
| Kerberos 5, etype 17, Pre-Auth (with salt) | — | krb5pa-sha1 |
| Kerberos 5, etype 18, Pre-Auth | 19900 | — |
| Kerberos 5, etype 18, Pre-Auth (with salt) | — | krb5pa-sha1 |
| Lastpass | 6800 | — |
| LDAP(SSHA-512) | 1711 | ssha512 |
| Lineage II C4 | — | — |
| LinkedIn | 190 | raw-sha1-linkedin |
| LM | 3000 | lm |
| Lotus Notes/Domino 5 | 8600 | lotus5 |
| Lotus Notes/Domino 6 | 8700 | dominosec |
| Lotus Notes/Domino 8 | 9100 | — |
| MangosWeb Enhanced CMS | — | — |
| MD2 | — | md2 |
| MD4 | 900 | raw-md4 |
| md4($pass.$salt) | — | dynamic_32 |
| md4($salt.$pass) | — | dynamic_31 |
| md4(utf16($pass)) | — | dynamic_33 |
| MD5 | 0 | raw-md5 |
| MD5 Crypt | 500 | md5crypt |
| md5($pass.$salt) | 10 | — |
| md5($pass.md5($salt)) | 3720 | — |
| md5($salt.$pass) | 20 | — |
| md5($salt.$pass.$salt) | 3800 | — |
| md5($salt.md5($pass)) | 3710 | — |
| md5($salt.md5($pass.$salt)) | 4110 | — |
| md5($salt.md5($salt.$pass)) | 4010 | — |
| md5($salt.pad16($pass)) | — | dynamic_39 |
| md5($salt.unicode($pass)) | 40 | — |
| md5($username.0.$pass) | 4210 | — |
| MD5(APR) | 1600 | — |
| MD5(Chap) | 4800 | chap |
| md5(md4($pass)) | — | dynamic_34 |
| md5(md5($pass).md5($salt)) | 3910 | — |
| md5(md5($salt).$pass) | 3610 | — |
| md5(md5(md5($pass))) | 3500 | — |
| md5(sha1($pass)) | 4400 | — |
| md5(unicode($pass).$salt) | 30 | — |
| md5(uppercase(md5($pass))) | 4300 | — |
| md5(utf16($pass)) | — | dynamic_29 |
| md5apr1 | 1600 | — |
| MediaWiki | 3711 | mediawiki |
| Microsoft MSTSC(RDP-File) | — | — |
| Microsoft Office 2007 | 9400 | office |
| Microsoft Office 2010 | 9500 | office |
| Microsoft Office 2013 | 9600 | office |
| Microsoft Office 2016 - SheetProtection | 25300 | — |
| Microsoft Office ≤ 2003 (MD5+RC4) | 9700 | oldoffice |
| Microsoft Office ≤ 2003 (MD5+RC4) collider-mode #1 | 9710 | oldoffice |
| Microsoft Office ≤ 2003 (SHA1+RC4) | 9800 | oldoffice |
| Microsoft Office ≤ 2003 (SHA1+RC4) collider-mode #1 | 9810 | oldoffice |
| Microsoft Outlook PST | — | — |
| Minecraft(AuthMe Reloaded) | 20711 | — |
| Minecraft(xAuth) | — | — |
| Monero | — | monero |
| MS Office 2016 - SheetProtection | 25300 | — |
| MS Office ⇐ 2003 $0/$1, MD5 + RC4, collider #2 | 9720 | oldoffice |
| MS Office ⇐ 2003 $3, SHA1 + RC4, collider #2 | 9820 | oldoffice |
| MSSQL(2000) | 131 | mssql |
| MSSQL(2005) | 132 | mssql05 |
| MSSQL(2008) | 132 | mssql05 |
| MSSQL(2012) | 1731 | mssql12 |
| MSSQL(2014) | 1731 | mssql12 |
| MyBB ≥ v1.2+ | 2811 | — |
| MySQL Challenge-Response Authentication (SHA1) | 11200 | — |
| MySQL323 | 200 | mysql |
| MySQL4.1 | 300 | mysql-sha1 |
| MySQL5.x | 300 | mysql-sha1 |
| net-md5 | — | dynamic_39 |
| NetNTLMv1-VANILLA / NetNTLMv1+ESS | 5500 | netntlm |
| NetNTLMv2 | 5600 | netntlmv2 |
| Netscape LDAP SHA | 101 | nsldap |
| Netscape LDAP SSHA | 111 | nsldaps |
| nsldaps | 111 | nsldaps |
| NTHash(FreeBSD Variant) | — | — |
| NTLM | 1000 | nt |
| Open Document Format (ODF) 1.2 (SHA-256, AES) | 18400 | — |
| Oracle 11g/12c | 112 | oracle11 |
| Oracle H: Type (Oracle 7+), DES(Oracle) | 3100 | — |
| osCommerce | 21 | — |
| OSX v10.4 | 122 | xsha |
| OSX v10.5 | 122 | xsha |
| OSX v10.6 | 122 | xsha |
| OSX v10.7 | 1722 | xsha512 |
| OSX v10.8 | 7100 | pbkdf2-hmac-sha512 |
| OSX v10.9 | 7100 | pbkdf2-hmac-sha512 |
| Palshop CMS | — | — |
| PANAMA | — | dynamic_320 |
| PBKDF2(Atlassian) | — | — |
| PBKDF2(Cryptacular) | — | — |
| PBKDF2(Dwayne Litzenberger) | — | — |
| PBKDF2-HMAC-SHA256(PHP) | 10900 | — |
| PBKDF2-SHA1(Generic) | 20400 | — |
| PBKDF2-SHA256(Generic) | 20300 | pbkdf2-hmac-sha256 |
| PBKDF2-SHA512(Generic) | 20200 | — |
| PDF 1.1 - 1.3 (Acrobat 2 - 4) | 10400 | pdf |
| PDF 1.1 - 1.3 (Acrobat 2 - 4), collider #1 | 10410 | pdf |
| PDF 1.1 - 1.3 (Acrobat 2 - 4), collider #2 | 10420 | — |
| PDF 1.4 - 1.6 (Acrobat 5 - 8) | 10500 | pdf |
| PDF 1.7 Level 3 (Acrobat 9) | 10600 | pdf |
| PDF 1.7 Level 8 (Acrobat 10 - 11) | 10700 | pdf |
| PeopleSoft | 133 | — |
| PHPass' Portable Hash | 400 | phpass |
| phpBB v3.x | 400 | phpass |
| PHPS | 2612 | phps |
| PKZIP (Compressed Multi-File) | 17220 | pkzip |
| PKZIP (Compressed) | 17200 | pkzip |
| PKZIP (Mixed Multi-File Checksum-Only) | 17230 | pkzip |
| PKZIP (Mixed Multi-File) | 17225 | pkzip |
| PKZIP (Uncompressed) | 17210 | pkzip |
| PKZIP Master Key | 20500 | — |
| PKZIP Master Key (6 byte optimization) | 20510 | — |
| PostgreSQL Challenge-Response Authentication (MD5) | 11100 | postgres |
| PostgreSQL MD5 | — | — |
| PrestaShop | 11000 | — |
| RACF | 8500 | racf |
| RAdmin v2.x | 9900 | radmin |
| RAR3-hp | 12500 | rar |
| RAR3-p (Compressed) | 23800 | rar |
| RAR3-p (Uncompressed) | 23700 | rar |
| RAR5 | 13000 | rar5 |
| Redmine Project Management Web App | 4521 | — |
| RIPEMD-128 | — | ripemd-128 |
| RIPEMD-160 | 6000 | ripemd-160 |
| RIPEMD-256 | — | dynamic_140 |
| RIPEMD-320 | — | dynamic_150 |
| RSA/DSA/EC/OpenSSH Private Keys ($4$) | 22941 | — |
| Salsa10 | — | — |
| Salsa20 | — | — |
| SAM(LM_Hash:NT_Hash) | — | — |
| SAP CODVN B (BCODE) | 7700 | sapb |
| SAP CODVN F/G (PASSCODE) | 7800 | sapg |
| SAP CODVN H (PWDSALTEDHASH) iSSHA-1 | 10300 | saph |
| SCRAM Hash | — | — |
| scrypt | 8900 | — |
| SecureZIP AES-128 | 23001 | securezip |
| SecureZIP AES-192 | 23002 | securezip |
| SecureZIP AES-256 | 23003 | securezip |
| SHA-1 | 100 | raw-sha1 |
| SHA-1 Crypt | 15100 | sha1crypt |
| SHA-1(Base64) | 101 | nsldap |
| SHA-1(Oracle) | — | — |
| SHA-224 | 1300 | raw-sha224 |
| SHA-256 | 1400 | raw-sha256 |
| SHA-256 Crypt | 7400 | sha256crypt |
| SHA-384 | 10800 | raw-sha384 |
| SHA-512 | 1700 | raw-sha512 |
| SHA-512 Crypt | 1800 | sha512crypt |
| sha1($pass.$salt) | 110 | — |
| sha1($salt.$pass) | 120 | — |
| sha1($salt.$pass.$salt) | 4710 | — |
| sha1($salt.unicode($pass)) | 140 | — |
| sha1(md5($pass)) | 4700 | — |
| sha1(sha1(sha1($pass))) | 4600 | — |
| sha1(unicode($pass).$salt) | 130 | — |
| sha224($pass.$salt)) | — | dynamic_52 |
| sha224($salt.$pass) | — | dynamic_51 |
| sha224($salt.sha224($pass)) | — | dynamic_56 |
| sha224(sha224($pass)) | — | dynamic_53 |
| sha224(sha224($pass).$salt) | — | dynamic_55 |
| sha224(sha224($pass).sha224($pass)) | — | dynamic_58 |
| sha224(sha224($salt).sha224($pass)) | — | dynamic_57 |
| sha224(sha224_raw($pass)) | — | dynamic_54 |
| sha256($pass.$salt) | 1410 | dynamic_62 |
| sha256($salt.$pass) | 1420 | dynamic_61 |
| sha256($salt.sha256($pass)) | 1420 | dynamic_66 |
| sha256($salt.unicode($pass)) | 1440 | — |
| sha256(sha256($pass)) | 1420 | dynamic_63 |
| sha256(sha256($pass).$salt) | 1420 | dynamic_65 |
| sha256(sha256($pass).sha256($pass)) | 1420 | dynamic_68 |
| sha256(sha256($salt).sha256($pass)) | 1420 | dynamic_67 |
| sha256(sha256_raw($pass))) | 1420 | dynamic_64 |
| sha256(unicode($pass).$salt) | 1430 | — |
| SHA3-224 | 17300 | — |
| SHA3-256 | 17400 | dynamic_380 |
| SHA3-384 | — | dynamic_390 |
| SHA3-512 | 17600 | raw-sha3 |
| sha384($pass.$salt) | — | dynamic_72 |
| sha384($salt.$pass) | — | dynamic_71 |
| sha384($salt.sha384($pass)) | — | dynamic_76 |
| sha384(sha384($pass)) | — | dynamic_73 |
| sha384(sha384($pass).$salt) | — | dynamic_75 |
| sha384(sha384($pass).sha384($pass)) | — | dynamic_78 |
| sha384(sha384($salt).sha384($pass)) | — | dynamic_77 |
| sha384(sha384_raw($pass)) | — | dynamic_74 |
| sha512($pass.$salt) | 1710 | — |
| sha512($salt.$pass) | 1720 | — |
| sha512($salt.unicode($pass)) | 1740 | — |
| sha512(unicode($pass).$salt) | 1730 | — |
| Siemens-S7 | — | siemens-s7 |
| SipHash | 10100 | — |
| Skein-1024 | — | — |
| Skein-1024(384) | — | — |
| Skein-1024(512) | — | — |
| Skein-224 | — | dynamic_330 |
| Skein-256 | — | skein-256 |
| Skein-256(128) | — | — |
| Skein-256(160) | — | — |
| Skein-256(224) | — | — |
| Skein-384 | — | dynamic_350 |
| Skein-512 | — | skein-512 |
| Skein-512(128) | — | — |
| Skein-512(160) | — | — |
| Skein-512(224) | — | — |
| Skein-512(256) | — | — |
| Skein-512(384) | — | — |
| Skype | 23 | — |
| SMF ≥ v1.1 | 121 | — |
| Snefru-128 | — | snefru-128 |
| Snefru-256 | — | snefru-256 |
| SSHA-1(Base64) | 111 | nsldaps |
| SSHA-512(Base64) | 1711 | ssha512 |
| Sun MD5 Crypt | 3300 | sunmd5 |
| Sybase ASE | 8000 | sybasease |
| Telegram Desktop 1.3.9 | — | telegram |
| Telegram Desktop >= 2.1.14-beta / 2.2.0 | — | telegram |
| Telegram Mobile App Passcode (SHA256) | 22301 | Telegram |
| Tiger-128 | — | — |
| Tiger-160 | — | — |
| Tiger-192 | — | tiger |
| Traditional DES | 1500 | descrypt |
| vBulletin < v3.8.5 | 2611 | — |
| Ventrilo | — | — |
| VNC | — | vnc |
| WebEdition CMS | 3721 | — |
| Whirlpool | 6100 | whirlpool |
| WinZip | 13600 | zip |
| Woltlab Burning Board 3.x | 8400 | wbb3 |
| Woltlab Burning Board 4.x | — | — |
| Wordpress v2.6.0/2.6.1 | 400 | phpass |
| Wordpress ≥ v2.6.2 | 400 | phpass |
| WPA-PBKDF2-PMKID+EAPOL | 22000 | — |
| XOR-32 | — | — |
| xt:Commerce | 21 | — |
| yescrypt | Not yet supported, see notes in summary. | On systems that use libxcrypt, you may use --format=crypt to use JtR in passthrough mode which uses the system's crypt function. |
| ZipMonster | — | — |