WPA / WPA2 Handshake Cracker

Drop in a capture and a wordlist. Everything — parsing, PBKDF2, the MIC check — happens inside this tab. Nothing is uploaded, and there is no server to upload to.

WebGPU: checking… CPU: checking…
Measures throughput on a synthetic WPA2 target — no capture or wordlist needed.

1 Capture

No capture loaded yet.

2 Wordlist

Fill in what you know about the owner. Everything stays in this tab.

Generation options

Generates every 10-digit number in that area code — 10,000,000 candidates, produced on the fly so nothing is stored.

Rules optional — multiplies every candidate
More rule sets

No wordlist selected yet.

4 Team up — optional

Share this job with other phones and computers. Every device that joins takes a slice of the keyspace, so the combined rate adds up.

!
This is the one feature that leaves your device. Joining devices need the handshake to test passwords against it, so it is sent to them. It travels directly device-to-device, encrypted (WebRTC/DTLS). Our server only passes connection details between you — it never receives the capture, the wordlist or the passphrase. If a direct connection cannot be made, traffic falls back to relaying through that server, still encrypted with a key from the link's #fragment, which browsers never send to any server. Everything else in this page stays entirely local.

You can create the session and get devices connected first — load the capture and wordlist afterwards, then press Start and everyone begins at once.