Terms, Conditions and Acceptable Use

Last updated: 06 May 2026

The following definitions apply throughout these Terms and Conditions:

• "OnlineHashCrack": the legal entity operating the platform at onlinehashcrack.com, responsible for these Terms and all rights and obligations arising from them.
• "Service" or "the Service": the GPU-accelerated password recovery and security testing platform operated by OnlineHashCrack.
• "User", "You", "Your": any natural or legal person accessing or using the Service in any capacity, including via the API.
• "Submission": any password hash, encrypted file, WPA capture, or other data uploaded to the Service via the website interface or the API.
• "Output": any result produced by the Service in response to a Submission, including a recovered cleartext password, a weakness report, or a negative result.
• "API": the programmatic interface provided by OnlineHashCrack for automated Submissions and integrations.
• "Tier": one of three identity verification levels (Tier 1, Tier 2, Tier 3) governing access to Service features, as defined in Section 5.
• "GPU Resources": computational infrastructure consumed by the Service to process a Submission, including priority queue slots, brute-force job time, and custom wordlist processing.

By accessing, registering for, or using the Service in any capacity, you agree to be legally bound by these Terms in their entirety. If you do not agree, you must immediately cease all use of the Service.

Use of the Service by a legal entity constitutes acceptance on behalf of that entity, and the individual accepting these Terms represents that they have full authority to bind that entity.

Each Submission constitutes a fresh, independent acceptance of these Terms as in force at the time of that Submission. Continued use of the Service following any modification of these Terms constitutes acceptance of the revised Terms.

OnlineHashCrack provides GPU-accelerated password hash recovery and file password recovery (including, without limitation, Microsoft Office documents, PDF files, and WPA/WiFi capture files) for authorized security testing, forensic analysis, incident response, law enforcement, and personal password recovery purposes. A full list of supported hash formats and file types is available at hash-acceptance.

The Service is fully automated and does not manually review Submissions. The Service cannot verify the origin, ownership, legal status, or authorization basis of any Submission. This technical limitation does not diminish the User's legal obligations under Section 6 and Section 8.

The Service does not guarantee recovery of any password. Recovery success depends on the hash algorithm, password complexity, and available attack configurations. The absence of a result is not grounds for a refund of consumed GPU Resources.

The Service is not a hacking tool. It is strictly a neutral technical infrastructure for authorized password recovery and security strength testing.

OnlineHashCrack has an established track record of supporting law enforcement agencies, forensic professionals, and incident response teams. Law enforcement agencies are invited to contact OnlineHashCrack directly via contact-us for dedicated access arrangements, cooperation protocols, and applicable pricing.

To use the Service, you must:

• Be at least 18 years of age;
• Have full legal capacity to enter into a binding contract under the laws of your jurisdiction;
• Provide accurate, complete, and current registration information;
• Not be subject to any legal prohibition from using the Service in your jurisdiction.

You are solely responsible for maintaining the confidentiality of your account credentials. You agree to notify OnlineHashCrack immediately of any unauthorized use of your account. OnlineHashCrack is not liable for any loss arising from your failure to secure your credentials.

OnlineHashCrack reserves the right to reject, suspend, or terminate any account registration at its sole discretion, without obligation to provide reasons.

Access to Service features is governed by a three-tier identity verification system. Tier status is assigned at OnlineHashCrack's sole discretion and may be modified, downgraded, or revoked at any time without notice or refund.

Tier 1 - Email Verification (mandatory for all users): Required at registration. Grants access to basic hash submission and recovery functions. The email address must be valid, accessible, and non-disposable. Accounts not verified within 15 days of registration will be permanently deleted.

Tier 2 - Phone Number or Payment Verification: Verification via valid phone number or a confirmed Stripe payment. Unlocks access to additional algorithms and enhanced Service features. Tier 2 status does not modify any legal obligations under these Terms.

Tier 3 - Organizational / Domain Validation: Available to verified organizations, penetration testing firms, forensic professionals, and law enforcement agencies. Grants full platform access, including the most resource-intensive algorithms. Requires active vetting by OnlineHashCrack and confirmation of organizational legitimacy. Law enforcement agencies with an active mandate are encouraged to contact OnlineHashCrack directly via contact-us - dedicated access tiers, cooperation protocols, and preferential arrangements are available.

Tier access restrictions are enforced by the platform. OnlineHashCrack may modify tier boundaries, requirements, or associated features at any time. OnlineHashCrack may require additional verification before enabling or continuing access to advanced algorithms, bulk submissions, API access, custom attacks, or high-volume processing features.

By making each and every Submission, you represent, warrant, and certify that one or more of the following is true at the time of submission:

• You are the lawful owner of the system, account, or credential from which the submitted hash or file was derived; OR
• You have received explicit, documented, prior authorization from the lawful owner of that system, account, or credential to submit that data for recovery or testing; OR
• The Submission is made in the context of a lawful penetration test, security audit, incident response engagement, forensic investigation, or law enforcement activity, conducted in full compliance with all applicable laws and any applicable contractual authorization.

These representations are a material inducement for OnlineHashCrack to provide the Service. Providing false or inaccurate representations constitutes a material breach of these Terms, may expose you to civil and criminal liability under applicable law, and entitles OnlineHashCrack to immediately terminate your account without refund.

Examples of authorized use include, without limitation:

• Penetration testing conducted under a signed engagement letter or statement of work with the system owner;
• Recovery of a password to a file or account that you personally own (e.g., a forgotten password on your own encrypted document);
• Forensic investigation conducted by a qualified professional under a lawful mandate;
• Password strength testing of credentials that your organization controls;
• Law enforcement investigations conducted under appropriate legal authority.

Acceptance, queuing, processing, prioritization, or successful recovery of any Submission by the Service does not constitute approval, validation, authorization, endorsement, or confirmation that the Submission is lawful or authorized.

You must not use the Service for any of the following purposes:

• Submitting hashes or files obtained without lawful authorization from the credential owner;
• Recovering credentials to access systems, accounts, or data you are not authorized to access;
• Conducting or facilitating unauthorized access, intrusion, exploitation, or compromise of any system, network, or account;
• Submitting data obtained through illegal interception, unlawful surveillance, or unauthorized data extraction;
• Distributing, selling, or commercializing Outputs in a manner that infringes the rights of the affected credential owner;
• Circumventing rate limits, access controls, tier restrictions, or any other technical measure of the Service;
• Providing false or misleading information during registration, tier verification, or any interaction with OnlineHashCrack;
• Facilitating, enabling, or assisting any third party in any of the above.

Enforcement: Violation of this Acceptable Use Policy may result in immediate account termination without notice or refund, referral to law enforcement authorities, civil proceedings, and disclosure of User identity and Submission data to the extent required by law or court order.
OnlineHashCrack reserves the right to cooperate fully with competent authorities in connection with any investigation of illegal activity.

OnlineHashCrack may refuse, pause, cancel, or decline to process any Submission at any time where it determines or suspects, in its sole discretion, that processing may create legal, regulatory, security, reputational, or operational risk. Where GPU Resources have not yet been consumed, OnlineHashCrack may refund, cancel, or credit the relevant payment at its discretion, except where the refusal results from suspected fraud, abuse, unlawful use, sanctions risk, chargeback risk, or breach of these Terms. No refund is owed where GPU Resources have already been allocated or consumed.

By submitting any hash, file, or data to the Service - whether via the website interface or the API - you irrevocably accept sole and full legal responsibility for the lawfulness of that Submission and for any consequence arising from it.

The Service is a neutral technical infrastructure provider. The Service cannot and does not verify the origin, ownership, or legal basis of Submissions. This technical limitation does not constitute any validation or endorsement of any Submission by OnlineHashCrack.

YOU MUST ENSURE THAT ALL FILES AND HASHES SENT TO THE SERVICE ARE LEGALLY OBTAINED AND THAT YOU HAVE ALL NECESSARY RIGHTS AND AUTHORIZATIONS TO SUBMIT THEM.

Applicable laws that govern authorized use of the Service include, without limitation:

• Computer Fraud and Abuse Act (CFAA), 18 U.S.C. § 1030 - United States;
• Computer Misuse Act 1990 - United Kingdom;
• EU Directive 2013/40/EU on attacks against information systems, as implemented in applicable EU member state law;
• All applicable national laws governing unauthorized computer access, interception, data protection, and privacy in your jurisdiction.

OnlineHashCrack does not guarantee that use of the Service is lawful in your jurisdiction. Compliance with all applicable laws is your exclusive responsibility. All legal consequences arising from unauthorized, unlawful, or abusive use are borne exclusively by the User.

Full pricing details are available at about-pricing. The following rules apply in all cases:

• Unlock fees (payment to reveal a recovered cleartext password): A refund may be issued at OnlineHashCrack's sole discretion if the submitted hash was demonstrably invalid.
• Priority queue fees: Non-refundable once the Submission has entered the priority processing queue, regardless of recovery outcome.
• Custom wordlist and brute-force job fees: Non-refundable once GPU Resources have been consumed, regardless of whether a password was recovered. These fees compensate consumed infrastructure time, not guaranteed results.
• General rule: No refund is available for any service where GPU Resources have been consumed. OnlineHashCrack reserves the right to decline or cancel any payment at its discretion.

OnlineHashCrack may modify pricing at any time without prior notice. Payments are processed by Stripe. OnlineHashCrack does not store or have access to payment card data.

All source code, software, algorithms, trademarks, trade names, logos, and website content of OnlineHashCrack are the exclusive property of OnlineHashCrack or its licensors. All intellectual property rights are reserved.

You are granted a limited, non-exclusive, non-transferable, revocable license to access and use the Service solely for the purposes described in these Terms. This license does not include any right to sublicense, copy, modify, reverse-engineer, decompile, or create derivative works of any component of the Service.

User-submitted data remains your property. By submitting data, you grant OnlineHashCrack a limited, non-exclusive license to process that data solely to the extent necessary to deliver the Service to you. This license terminates upon account deletion or expiry of the applicable data retention period.

THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTY OF ANY KIND, WHETHER EXPRESS, IMPLIED, STATUTORY, OR OTHERWISE.

OnlineHashCrack expressly disclaims all warranties, including but not limited to:

• Any implied warranty of merchantability, fitness for a particular purpose, or non-infringement;
• Any representation or guarantee that password recovery will succeed for any given Submission;
• Any guarantee of service availability, uptime, error-free operation, or data integrity;
• Any representation that the Service is fit for any regulatory, compliance, or certification purpose;
• Any representation that use of the Service is lawful in your jurisdiction.

You assume full responsibility for verifying the legality and suitability of the Service for your intended use.

The Service is not intended as the sole means of access recovery for mission-critical, safety-critical, emergency, legal-deadline, or business-critical systems. The User remains solely responsible for maintaining independent backups, alternative access methods, and appropriate incident response procedures. OnlineHashCrack accepts no liability for any consequence arising from the User's failure to maintain such alternatives.

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW:

• Aggregate cap: OnlineHashCrack's total aggregate liability to you for any and all claims arising from or related to the Service shall not exceed the total amount actually paid by you to OnlineHashCrack in the thirty (30) calendar days immediately preceding the date on which the relevant claim first arose.
• Excluded damages: OnlineHashCrack shall not be liable for any indirect, incidental, consequential, punitive, special, or exemplary damages, including but not limited to: loss of profits, loss of revenue, loss of data, loss of goodwill, business interruption, or cost of procuring substitute services - regardless of whether OnlineHashCrack had been advised of the possibility of such damages and regardless of the theory of liability.
• Scope: This limitation applies to all claims, whether arising in contract, tort (including negligence), strict liability, statute, or any other legal theory.

Some jurisdictions do not permit the exclusion of certain warranties or limitation of certain liabilities. In such jurisdictions, the above limitations and exclusions apply to the fullest extent permitted by applicable law.

You agree to defend, indemnify, and hold harmless OnlineHashCrack and any of its officers, directors, employees, agents, successors, and assigns from and against any and all third-party claims, actions, proceedings, damages, demands, liabilities, costs, and expenses (including reasonable legal fees) arising out of or in connection with:

• Your access to or use of the Service;
• Any Submission you make, including any claim that such Submission was unauthorized, unlawful, or infringed any right of a third party;
• Your violation of these Terms, any applicable law, or any third-party right;
• Any representation you made in connection with these Terms that was false, inaccurate, or misleading.

OnlineHashCrack reserves the right to assume exclusive control of any matter subject to indemnification by you, at your expense. You agree to cooperate fully with OnlineHashCrack's defense of any such claim.

OnlineHashCrack reserves the right to suspend, restrict, or permanently terminate any account at any time, without prior notice and without refund, if OnlineHashCrack, in its reasonable discretion, based on security, legal, regulatory, fraud, abuse, reputational, or operational risk, determines or suspects that:

• The User has violated or is at risk of violating these Terms or any applicable law;
• The User has submitted data obtained without authorization;
• The account is being used for fraudulent, abusive, illegal, or harmful purposes;
• The User has provided false or misleading information during registration or tier verification;
• Continued service poses legal, regulatory, reputational, or technical risk to the Service or to third parties.

Automatic deletion: Accounts inactive for 12 or more consecutive calendar months will be permanently and automatically deleted, including all associated data (hashes, task history, wordlists, and Outputs), without prior notice, to minimize long-term data exposure.

Non-activated accounts (email not verified within 15 days of registration) will be permanently deleted without notice.

Termination does not release you from any obligation incurred prior to termination, including payment obligations for GPU Resources already consumed.

OnlineHashCrack processes personal data as a data controller in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and other applicable data protection law.

Lawful basis: Personal data is processed on the basis of contract performance (Article 6(1)(b) GDPR) for account management and service delivery, and legitimate interest (Article 6(1)(f) GDPR) for security, fraud prevention, and service improvement.

Data retention:

• Active account data: retained for the duration of the account and for up to 12 months following account deletion or last activity;
• Submitted hashes and task data: retained for up to 12 months from the date of submission for active accounts;
• Recovered passwords (Outputs): retained for up to 12 months from the date of recovery, accessible only to the submitting User;
• Source files (encrypted Office documents, PDF files, WPA/WiFi captures): deleted immediately and automatically upon hash extraction - OnlineHashCrack does not retain source files beyond the extraction operation;
• Custom wordlists: retained for the duration of the account;
• Non-activated accounts: automatically deleted 15 days after registration;
• Inactive accounts (no login for 12 consecutive months): permanently deleted, including all associated data.

Notwithstanding the retention periods above, OnlineHashCrack may preserve logs, Submissions, Outputs, account information, payment identifiers, IP addresses, and related metadata for as long as reasonably necessary for abuse prevention, security investigations, legal defense, enforcement of these Terms, or compliance with lawful requests from competent authorities.

Your rights: You have the right to access, rectify, erase, restrict processing of, and obtain portability of your personal data. To exercise any of these rights, contact OnlineHashCrack via contact-us.

California residents (CCPA/CPRA): OnlineHashCrack does not sell or share personal information with third parties for commercial purposes. California residents may submit requests to know, delete, or correct their personal information via the contact form and will not be discriminated against for doing so. Rights substantially equivalent to those under CCPA are already available to all Users under the GDPR framework above.

For full details see the Privacy Policy.

Access to the OnlineHashCrack API is provided solely for authorized password recovery and security testing purposes. All provisions of these Terms apply in full to API usage.

By making any API call that includes a Submission, you confirm independent acceptance of these Terms in their entirety, as if you had manually accepted them at that moment. Automated submissions do not diminish, qualify, or waive any representation or obligation under Section 6 or Section 8.

• All Submissions via the API carry identical legal obligations to web-based Submissions;
• The API is subject to rate limits; exceeding these limits constitutes abuse and will result in immediate suspension without notice or refund;
• API credentials are personal and non-transferable; sharing API keys with third parties is a material breach of these Terms;
• OnlineHashCrack may modify, restrict, or discontinue API access at any time without notice or liability;
• Unauthorized reverse-engineering of the API, probing of API infrastructure, or circumvention of access controls is strictly prohibited.

The User represents that they are not located in, organized under the laws of, or ordinarily resident in any country or territory subject to comprehensive international sanctions, and are not listed on any applicable sanctions or restricted-party list (including OFAC, EU, or UN lists). Use of the Service in violation of applicable sanctions law is strictly prohibited and constitutes immediate grounds for account termination.

These Terms are governed by the laws of the EU Member State where the Service operator has its principal establishment, and by applicable European Union law where it takes precedence, without regard to conflict-of-law rules. In the event of a dispute arising out of or in connection with these Terms or the use of the Service, the parties shall first attempt resolution through good-faith written negotiation for a period of thirty (30) days from the date on which either party gives notice of the dispute.

For Users acting in a professional or business capacity, disputes shall be subject to the competent courts of the EU Member State where the Service operator has its principal establishment, unless mandatory applicable law provides otherwise. For consumers, this clause does not deprive them of any mandatory consumer protection or jurisdictional rights. Nothing in this clause limits OnlineHashCrack's right to seek injunctive or other equitable relief in any court of competent jurisdiction to protect its rights or prevent imminent harm.

If any provision of these Terms is found unenforceable in a given jurisdiction, that provision shall be modified to the minimum extent necessary to make it enforceable, and the remaining provisions shall continue in full force and effect.

OnlineHashCrack reserves the right to modify these Terms at any time. The revised Terms will be published at this URL with an updated "Last updated" date. Your continued use of the Service following any modification constitutes your acceptance of the revised Terms. It is your responsibility to review these Terms periodically. Where required by applicable law, OnlineHashCrack will provide advance notice of material changes.

For legal notices, data protection inquiries, account matters, or any other communication with OnlineHashCrack:

Contact form: contact-us

OnlineHashCrack will endeavour to respond to inquiries within a reasonable time. Legal notices require written confirmation via the contact form to be effective.