Skip to content
OnlineHashCrack

Targeted password searches on managed GPUs

When the free Basic Search is not enough, choose wordlists, rules, masks and targeted brute-force searches for an authorized audit or recovery job. No cracking software or GPU fleet to install.

For hashes you own or are explicitly authorized to test.

Start an authorized search See the configuration guide

Dictionary-based

Wordlist search

Test entries from one or more password dictionaries against the hash. This approach is useful when passwords may follow common patterns or organization-specific conventions.

Available sources

  • Probable-Wordlists - organized by estimated real-world probability.
  • Weakpass - a curated public collection.
  • OHC wordlists - a private collection compiled from real-world breach data.
  • Your own custom wordlist - upload it to your account and select it for a job.
OnlineHashCrack custom wordlist search configuration

Defined keyspace

Brute-force search

Test every combination within a defined keyspace. The character set and password-length range determine the number of candidates and the estimated duration.

What you configure

  • Character set - lowercase, uppercase, digits, symbols, or a combination.
  • Length range - minimum and maximum password length to test.
  • Keyspace - character-set size raised to the selected length; shown before confirmation.
  • Duration estimate - based on keyspace and algorithm hashrate; shown before payment.
OnlineHashCrack brute-force configuration with charset and length options Read the step-by-step configuration guide

Wordlist add-on

Rulesets expand candidate coverage

Rulesets transform each wordlist entry into additional candidates using substitutions, capitalization, prefixes and suffixes. Rules run on the fly, expanding coverage without storing a second wordlist.

For example, password might produce P@ssw0rd, password2024! and PASSWORD.

Read the Hashcat rule reference
Ruleset configuration for wordlist searches
$9 / hourBilled by actual GPU time consumed
Estimate firstReview expected duration and cost before confirming
Result notificationEmail when the job completes, whether found or not
Clear refund termsGPU charges are non-refundable once resources are consumed

Questions about custom password searches

What is a wordlist search?

It tests entries from one or more password dictionaries against an authorized hash. It is useful when a password may follow common or organization-specific patterns.

Can I use my own wordlist?

Yes. Upload a custom wordlist to your account and select it when configuring a custom GPU job.

What does a ruleset do?

A ruleset transforms each wordlist entry into additional candidates with substitutions, case changes, prefixes and suffixes.

How much do custom GPU jobs cost?

Custom wordlist and brute-force jobs start at $9 per hour of GPU time. Review the estimate before confirming; charges apply to GPU time consumed.