Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Is there any way to enable/convert an NTLM hash for a user account on Windows 7 to a LM hash? I know it's not secure, but I am trying to test something. Is it even possible?

share|improve this question
up vote 3 down vote accepted

NT hashes are NTLM hashes.

If you meant LM hashes, you can enable them via Group Policy (secpol.msc), but the changes will only apply after setting a new password – you cannot convert an existing hash to a weaker one. (This should be somewhat obvious, since the hashing would be entirely pointless if that was possible.)

share|improve this answer
Where would I go in the Group Policy? – Matt Sep 27 '11 at 18:50
Under Local Policies → Security, set "Network security: Do not store LAN Manager hash" to "Disabled". Optionally, adjust "Network security: LAN Manager authentication level" to accept and/or send LM in addition to NTLM. (Note that this is very insecure and must be reverted after tests.) – grawity Sep 27 '11 at 18:57

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.