Skip to content
OnlineHashCrack

Terms, Conditions and Acceptable Use

The terms, authorization requirements and acceptable-use rules that govern OnlineHashCrack.

Last updated: 26 Sep 2026

1. Definitions

The following definitions apply throughout these Terms and Conditions:

  • "OnlineHashCrack": the legal entity operating the platform at onlinehashcrack.com, responsible for these Terms and all rights and obligations arising from them.
  • "Service" or "the Service": the GPU-accelerated password recovery and security testing platform operated by OnlineHashCrack.
  • "User", "You", "Your": any natural or legal person accessing or using the Service in any capacity, including via the API.
  • "Submission": any password hash, encrypted file, WPA capture, or other data uploaded to the Service via the website interface or the API.
  • "Output": any result produced by the Service in response to a Submission, including a recovered cleartext password, a weakness report, or a negative result.
  • "API": the programmatic interface provided by OnlineHashCrack for automated Submissions and integrations.
  • "Tier": one of three account verification and access levels (Tier 1, Tier 2, Tier 3) governing access to Service features, as defined in Section 5.
  • "GPU Resources": computational infrastructure consumed by the Service to process a Submission, including priority queue slots, brute-force job time, and custom wordlist processing.

2. Acceptance of Terms

By accessing, registering for, or using the Service in any capacity, you agree to be legally bound by these Terms in their entirety. If you do not agree, you must immediately cease all use of the Service.

Use of the Service by a legal entity constitutes acceptance on behalf of that entity, and the individual accepting these Terms represents that they have full authority to bind that entity.

Each Submission constitutes a fresh, independent acceptance of these Terms as in force at the time of that Submission. Continued use of the Service following any modification of these Terms constitutes acceptance of the revised Terms.

3. Description of Service

OnlineHashCrack provides GPU-accelerated password hash recovery and file password recovery (including, without limitation, Microsoft Office documents, PDF files, and WPA/WiFi capture files) for authorized security testing, forensic analysis, incident response, law enforcement, and personal password recovery purposes. A full list of supported hash formats and file types is available at hash-acceptance.

Submission processing is automated. Tier 3 access requests undergo manual review. Account verification does not establish authorization for each individual submission. The Service cannot verify the origin, ownership, legal status, or authorization basis of any Submission. This technical limitation does not diminish the User's legal obligations under Section 6 and Section 8.

The Service does not guarantee recovery of any password. Recovery success depends on the hash algorithm, password complexity, and available attack configurations. The absence of a result is not grounds for a refund of consumed GPU Resources.

The Service is not a hacking tool. It is strictly a neutral technical infrastructure for authorized password recovery and security strength testing.

OnlineHashCrack has an established track record of supporting law enforcement agencies, forensic professionals, and incident response teams. Law enforcement agencies are invited to contact OnlineHashCrack directly via contact-us for dedicated access arrangements, cooperation protocols, and applicable pricing.

4. Eligibility and Account Registration

To use the Service, you must:

  • Be at least 18 years of age;
  • Have full legal capacity to enter into a binding contract under the laws of your jurisdiction;
  • Provide accurate, complete, and current registration information;
  • Not be subject to any legal prohibition from using the Service in your jurisdiction.

You are solely responsible for maintaining the confidentiality of your account credentials. You agree to notify OnlineHashCrack immediately of any unauthorized use of your account. OnlineHashCrack is not liable for any loss arising from your failure to secure your credentials.

OnlineHashCrack reserves the right to reject, suspend, or terminate any account registration at its sole discretion, without obligation to provide reasons.

5. Tiered Verification System

Access to Service features is governed by three account verification and access levels. Tier status is assigned at OnlineHashCrack's sole discretion and may be modified, downgraded, or revoked at any time without notice or refund.

Tier 1 - Email Verification (mandatory for all users): Required at registration. Grants access to basic hash submission and recovery functions. The email address must be valid, accessible, and non-disposable. Accounts not verified within 7 days of registration will be permanently deleted.

Tier 2 - Phone Number or Payment Verification: Verification via valid phone number or a confirmed Stripe payment. Unlocks access to additional algorithms and enhanced Service features. Tier 2 status does not modify any legal obligations under these Terms.

Tier 3 - Organizational / Domain Validation: Available to verified organizations, penetration testing firms, forensic professionals, and law enforcement agencies. Grants full platform access, including the most resource-intensive algorithms. Requires active vetting by OnlineHashCrack and confirmation of organizational legitimacy. Law enforcement agencies with an active mandate are encouraged to contact OnlineHashCrack directly via contact-us - dedicated access tiers, cooperation protocols, and preferential arrangements are available.

Tier access restrictions are enforced by the platform. OnlineHashCrack may modify tier boundaries, requirements, or associated features at any time. OnlineHashCrack may require additional verification before enabling or continuing access to advanced algorithms, bulk submissions, API access, custom attacks, or high-volume processing features.

6. Authorized Use and User Representations

By making each and every Submission, you represent, warrant, and certify that one or more of the following is true at the time of submission:

  • You are the lawful owner of the system, account, or credential from which the submitted hash or file was derived; OR
  • You have received explicit, documented, prior authorization from the lawful owner of that system, account, or credential to submit that data for recovery or testing; OR
  • You have another valid legal basis authorizing the Submission, recovery, or testing, including an applicable lawful mandate for a forensic or law enforcement investigation, and act within its scope and all applicable laws.

These representations are a material inducement for OnlineHashCrack to provide the Service. Providing false or inaccurate representations constitutes a material breach of these Terms, may expose you to civil and criminal liability under applicable law, and entitles OnlineHashCrack to immediately terminate your account without refund.

Examples of authorized use include, without limitation:

  • Penetration testing conducted under a signed engagement letter or statement of work with the system owner;
  • Recovery of a password to a file or account that you personally own (e.g., a forgotten password on your own encrypted document);
  • Forensic investigation conducted by a qualified professional under a lawful mandate;
  • Password strength testing of credentials that your organization controls;
  • Law enforcement investigations conducted under appropriate legal authority.
Acceptance, queuing, processing, prioritization, or successful recovery of any Submission by the Service does not constitute approval, validation, authorization, endorsement, or confirmation that the Submission is lawful or authorized.

7. Prohibited Uses and Acceptable Use Policy

You must not use the Service for any of the following purposes:

  • Submitting hashes or files without authorization from the lawful owner or another valid legal basis, including an applicable lawful mandate;
  • Recovering credentials to access systems, accounts, or data you are not authorized to access;
  • Conducting or facilitating unauthorized access, intrusion, exploitation, or compromise of any system, network, or account;
  • Submitting data obtained through illegal interception, unlawful surveillance, or unauthorized data extraction;
  • Distributing, selling, or commercializing Outputs in a manner that infringes the rights of the affected credential owner;
  • Circumventing rate limits, access controls, tier restrictions, or any other technical measure of the Service;
  • Providing false or misleading information during registration, tier verification, or any interaction with OnlineHashCrack;
  • Facilitating, enabling, or assisting any third party in any of the above.

Enforcement: Violation of this Acceptable Use Policy may result in immediate account termination without notice or refund, referral to law enforcement authorities, civil proceedings, and disclosure of User identity and Submission data to the extent required by law or court order.
OnlineHashCrack reserves the right to cooperate fully with competent authorities in connection with any investigation of illegal activity.

OnlineHashCrack may refuse, pause, cancel, or decline to process any Submission at any time where it determines or suspects, in its sole discretion, that processing may create legal, regulatory, security, reputational, or operational risk. Where GPU Resources have not yet been consumed, OnlineHashCrack may refund, cancel, or credit the relevant payment at its discretion, except where the refusal results from suspected fraud, abuse, unlawful use, sanctions risk, chargeback risk, or breach of these Terms. Except for the incorrect-password unlock refund in Section 9, no refund is owed where GPU Resources have already been allocated or consumed.

8. Submission of Data and User Responsibility

By submitting any hash, file, or data to the Service - whether via the website interface or the API - you irrevocably accept sole and full legal responsibility for the lawfulness of that Submission and for any consequence arising from it.

The Service is a neutral technical infrastructure provider. The Service cannot and does not verify the origin, ownership, or legal basis of Submissions. This technical limitation does not constitute any validation or endorsement of any Submission by OnlineHashCrack.

YOU MUST ENSURE THAT ALL FILES AND HASHES SENT TO THE SERVICE ARE LEGALLY OBTAINED AND THAT YOU HAVE ALL NECESSARY RIGHTS AND AUTHORIZATIONS TO SUBMIT THEM.

Applicable laws that govern authorized use of the Service include, without limitation:

  • Computer Fraud and Abuse Act (CFAA), 18 U.S.C. § 1030 - United States;
  • Computer Misuse Act 1990 - United Kingdom;
  • EU Directive 2013/40/EU on attacks against information systems, as implemented in applicable EU member state law;
  • All applicable national laws governing unauthorized computer access, interception, data protection, and privacy in your jurisdiction.

OnlineHashCrack does not guarantee that use of the Service is lawful in your jurisdiction. Compliance with all applicable laws is your exclusive responsibility. All legal consequences arising from unauthorized, unlawful, or abusive use are borne exclusively by the User.

9. Payment, Refund and Delivery Policy

Full pricing details are available at about-pricing. The following rules apply in all cases:

  • Unlock fees (payment to reveal a recovered cleartext password): If the unlocked password we deliver is incorrect for the submitted hash, we refund the unlock fee in full.
  • Priority queue fees: Non-refundable once the Submission has entered the priority processing queue, regardless of recovery outcome.
  • Custom wordlist and brute-force job fees: Non-refundable once GPU Resources have been consumed, regardless of whether a password was recovered. These fees compensate consumed infrastructure time, not guaranteed results.
  • General rule: Except for the incorrect-password unlock refund above, no refund is available for any service where GPU Resources have been consumed. OnlineHashCrack reserves the right to decline or cancel any payment at its discretion.

OnlineHashCrack may modify pricing at any time without prior notice. Payments are processed by Stripe. OnlineHashCrack does not store or have access to payment card data.

10. Intellectual Property

All source code, software, algorithms, trademarks, trade names, logos, and website content of OnlineHashCrack are the exclusive property of OnlineHashCrack or its licensors. All intellectual property rights are reserved.

You are granted a limited, non-exclusive, non-transferable, revocable license to access and use the Service solely for the purposes described in these Terms. This license does not include any right to sublicense, copy, modify, reverse-engineer, decompile, or create derivative works of any component of the Service.

User-submitted data remains your property. By submitting data, you grant OnlineHashCrack a limited, non-exclusive license to process that data solely to the extent necessary to deliver the Service to you. This license terminates upon account deletion or expiry of the applicable data retention period.

11. Disclaimers and No Warranty

THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTY OF ANY KIND, WHETHER EXPRESS, IMPLIED, STATUTORY, OR OTHERWISE.

OnlineHashCrack expressly disclaims all warranties, including but not limited to:

  • Any implied warranty of merchantability, fitness for a particular purpose, or non-infringement;
  • Any representation or guarantee that password recovery will succeed for any given Submission;
  • Any guarantee of service availability, uptime, error-free operation, or data integrity;
  • Any representation that the Service is fit for any regulatory, compliance, or certification purpose;
  • Any representation that use of the Service is lawful in your jurisdiction.

You assume full responsibility for verifying the legality and suitability of the Service for your intended use.

The Service is not intended as the sole means of access recovery for mission-critical, safety-critical, emergency, legal-deadline, or business-critical systems. The User remains solely responsible for maintaining independent backups, alternative access methods, and appropriate incident response procedures. OnlineHashCrack accepts no liability for any consequence arising from the User's failure to maintain such alternatives.

12. Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW:

  • Aggregate cap: OnlineHashCrack's total aggregate liability to you for any and all claims arising from or related to the Service shall not exceed the total amount actually paid by you to OnlineHashCrack in the thirty (30) calendar days immediately preceding the date on which the relevant claim first arose.
  • Excluded damages: OnlineHashCrack shall not be liable for any indirect, incidental, consequential, punitive, special, or exemplary damages, including but not limited to: loss of profits, loss of revenue, loss of data, loss of goodwill, business interruption, or cost of procuring substitute services - regardless of whether OnlineHashCrack had been advised of the possibility of such damages and regardless of the theory of liability.
  • Scope: This limitation applies to all claims, whether arising in contract, tort (including negligence), strict liability, statute, or any other legal theory.

Some jurisdictions do not permit the exclusion of certain warranties or limitation of certain liabilities. In such jurisdictions, the above limitations and exclusions apply to the fullest extent permitted by applicable law.

13. Indemnification

You agree to defend, indemnify, and hold harmless OnlineHashCrack and any of its officers, directors, employees, agents, successors, and assigns from and against any and all third-party claims, actions, proceedings, damages, demands, liabilities, costs, and expenses (including reasonable legal fees) arising out of or in connection with:

  • Your access to or use of the Service;
  • Any Submission you make, including any claim that such Submission was unauthorized, unlawful, or infringed any right of a third party;
  • Your violation of these Terms, any applicable law, or any third-party right;
  • Any representation you made in connection with these Terms that was false, inaccurate, or misleading.

OnlineHashCrack reserves the right to assume exclusive control of any matter subject to indemnification by you, at your expense. You agree to cooperate fully with OnlineHashCrack's defense of any such claim.

14. Account Suspension and Termination

OnlineHashCrack reserves the right to suspend, restrict, or permanently terminate any account at any time, without prior notice and without refund, if OnlineHashCrack, in its reasonable discretion, based on security, legal, regulatory, fraud, abuse, reputational, or operational risk, determines or suspects that:

  • The User has violated or is at risk of violating these Terms or any applicable law;
  • The User has submitted data obtained without authorization;
  • The account is being used for fraudulent, abusive, illegal, or harmful purposes;
  • The User has provided false or misleading information during registration or tier verification;
  • Continued service poses legal, regulatory, reputational, or technical risk to the Service or to third parties.

Automatic deletion: Accounts inactive for 12 or more consecutive calendar months will be permanently and automatically deleted, including all associated data (hashes, task history, wordlists, and Outputs), without prior notice, to minimize long-term data exposure.

Non-activated accounts (email not verified within 7 days of registration) will be permanently deleted without notice.

Termination does not release you from any obligation incurred prior to termination, including payment obligations for GPU Resources already consumed.

15. Data Protection Summary (GDPR)

OnlineHashCrack processes personal data as a data controller in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and other applicable data protection law.

Lawful basis: Personal data is processed on the basis of contract performance (Article 6(1)(b) GDPR) for account management and service delivery, and legitimate interest (Article 6(1)(f) GDPR) for security, fraud prevention, and service improvement.

Data retention:

  • Active account data: retained for the duration of the account and for up to 12 months following account deletion or last activity;
  • Submitted hashes and task data: retained for up to 12 months from the date of submission for active accounts;
  • Recovered passwords (Outputs): retained for up to 12 months from the date of recovery, accessible only to the submitting User;
  • Source files (encrypted Office documents, PDF files, WPA/WiFi captures): deleted immediately and automatically upon hash extraction - OnlineHashCrack does not retain source files beyond the extraction operation;
  • Custom wordlists: retained for the duration of the account;
  • Non-activated accounts: automatically deleted 7 days after registration;
  • Inactive accounts (no login for 12 consecutive months): permanently deleted, including all associated data.

Notwithstanding the retention periods above, OnlineHashCrack may preserve logs, Submissions, Outputs, account information, payment identifiers, IP addresses, and related metadata for as long as reasonably necessary for abuse prevention, security investigations, legal defense, enforcement of these Terms, or compliance with lawful requests from competent authorities.

Your rights: You have the right to access, rectify, erase, restrict processing of, and obtain portability of your personal data. To exercise any of these rights, contact OnlineHashCrack via contact-us.

California residents (CCPA/CPRA): OnlineHashCrack does not sell or share personal information with third parties for commercial purposes. California residents may submit requests to know, delete, or correct their personal information via the contact form and will not be discriminated against for doing so. Rights substantially equivalent to those under CCPA are already available to all Users under the GDPR framework above.

For full details see the Privacy Policy.

16. API Usage Terms

Access to the OnlineHashCrack API is provided solely for authorized password recovery and security testing purposes. All provisions of these Terms apply in full to API usage.

By making any API call that includes a Submission, you confirm independent acceptance of these Terms in their entirety, as if you had manually accepted them at that moment. Automated submissions do not diminish, qualify, or waive any representation or obligation under Section 6 or Section 8.

  • All Submissions via the API carry identical legal obligations to web-based Submissions;
  • The API is subject to rate limits. Requests over the quota are temporarily blocked until the limit resets; abusive attempts to bypass limits may result in account suspension;
  • API credentials are personal and non-transferable; sharing API keys with third parties is a material breach of these Terms;
  • OnlineHashCrack may modify, restrict, or discontinue API access at any time without notice or liability;
  • Unauthorized reverse-engineering of the API, probing of API infrastructure, or circumvention of access controls is strictly prohibited.

17. Sanctions Compliance

The User represents that they are not located in, organized under the laws of, or ordinarily resident in any country or territory subject to comprehensive international sanctions, and are not listed on any applicable sanctions or restricted-party list (including OFAC, EU, or UN lists). Use of the Service in violation of applicable sanctions law is strictly prohibited and constitutes immediate grounds for account termination.

OnlineHashCrack applies automated geolocation-based access controls intended to restrict use of the Service from jurisdictions subject to comprehensive or sectoral EU or US sanctions, or to applicable export-control restrictions. These controls are applied on a reasonable-efforts basis and are not represented as exhaustive or infallible; the User remains solely responsible for the representation set out above and for compliance with all sanctions law applicable to them. Circumvention of these controls, including through the use of proxies, VPNs, or anonymising networks, constitutes a material breach of these Terms and grounds for immediate termination without refund.

18. Governing Law and Jurisdiction

These Terms are governed by the laws of the EU Member State where the Service operator has its principal establishment, and by applicable European Union law where it takes precedence, without regard to conflict-of-law rules. In the event of a dispute arising out of or in connection with these Terms or the use of the Service, the parties shall first attempt resolution through good-faith written negotiation for a period of thirty (30) days from the date on which either party gives notice of the dispute.

For Users acting in a professional or business capacity, disputes shall be subject to the competent courts of the EU Member State where the Service operator has its principal establishment, unless mandatory applicable law provides otherwise. For consumers, this clause does not deprive them of any mandatory consumer protection or jurisdictional rights. Nothing in this clause limits OnlineHashCrack's right to seek injunctive or other equitable relief in any court of competent jurisdiction to protect its rights or prevent imminent harm.

If any provision of these Terms is found unenforceable in a given jurisdiction, that provision shall be modified to the minimum extent necessary to make it enforceable, and the remaining provisions shall continue in full force and effect.

19. Changes to Terms

OnlineHashCrack reserves the right to modify these Terms at any time. The revised Terms will be published at this URL with an updated "Last updated" date. Your continued use of the Service following any modification constitutes your acceptance of the revised Terms. It is your responsibility to review these Terms periodically. Where required by applicable law, OnlineHashCrack will provide advance notice of material changes.

20. Contact Information

For legal notices, data protection inquiries, account matters, or any other communication with OnlineHashCrack:

Contact form: contact-us

OnlineHashCrack will endeavour to respond to inquiries within a reasonable time. Legal notices require written confirmation via the contact form to be effective.