OPENSSL-PASSWD(1SSL)

🌸 NAME 🌸

okay so bestie, welcome to openssl-passwd β€” it is THE tool for computing password hashes. that's it. that's the whole job. and it eats it every single time. πŸ’…


✨ SYNOPSIS ✨

openssl passwd [-help] [-1] [-apr1] [-aixmd5] [-5] [-6] [-salt string]
[-in file] [-stdin] [-noverify] [-quiet] [-table] [-reverse] [-rand
files] [-writerand file] [-provider name] [-provider-path path]
[-provparam [name:]key=value] [-propquery propq] [password]

πŸ’– DESCRIPTION πŸ’–

so like. this command computes the hash of a password that you type in at run-time, OR it hashes every single password in a list like the overachiever it is. 🫢

where does that password list come from, you ask? pick your fighter:

  • the file you named with the -in option πŸ“„
  • stdin, if you used -stdin πŸ’»
  • the command line
  • or the terminal otherwise, iykyk 🧚

πŸŽ€ OPTIONS πŸŽ€

  • -help β€” prints out a usage message. classic. iconic. the little "what do I do now" button.
  • -1 β€” uses the MD5 based BSD password algorithm 1. also it's the default, so if you do nothing, this is what you get. ✨
  • -apr1 β€” uses the apr1 algorithm (that's the Apache variant of the BSD algorithm). 🌈
  • -aixmd5 β€” uses the AIX MD5 algorithm (the AIX variant of the BSD algorithm). πŸ“
  • -5, -6 β€” use the SHA256 / SHA512 based algorithms defined by Ulrich Drepper. See <https://www.akkadia.org/drepper/SHA-crypt.txt>. πŸ“š
  • -salt string β€” use the specified salt. ngl, when you're reading a password from the terminal, this one implies -noverify. πŸ§‚
  • -in file β€” read passwords from file. πŸ“‚
  • -stdin β€” read passwords from stdin. πŸ’»
  • -noverify β€” don't verify when reading a password from the terminal. no double-checking, we trust you. 🀝
  • -quiet β€” don't output warnings when passwords given at the command line are truncated. shhh. 🀫
  • -table β€” in the output list, prepend the cleartext password and a TAB character to each password hash. πŸ“Š
  • -reverse β€” when the -table option is used, reverse the order of cleartext and hash. πŸ”„
  • -rand files, -writerand file β€” see "Random State Options" in openssl(1) for details. 🎲
  • -provider name, -provider-path path, -provparam [name:]key=value, -propquery propq β€” see "Provider Options" in openssl(1), provider(7), and property(7). πŸ‘‘

πŸ”₯ EXAMPLES πŸ”₯

watch her work. no cap. πŸ’…

% openssl passwd -1 -salt xxxxxxxx password
$1$xxxxxxxx$UYCIxa628.9qXjpQCjM4a.

% openssl passwd -apr1 -salt xxxxxxxx password
$apr1$xxxxxxxx$dxHfLAsjHkDRmG83UXe8K0

% openssl passwd -aixmd5 -salt xxxxxxxx password
xxxxxxxx$8Oaipk/GPKhC64w/YVeFD/

πŸ’€ HISTORY πŸ’€

the -crypt option was removed in OpenSSL 3.0. gone. not coming back bestie. 😭


Copyright 2000-2021 The OpenSSL Project Authors. All Rights Reserved.

Licensed under the Apache License 2.0 (the "License"). You may not use this file except in compliance with the License. You can obtain a copy in the file LICENSE in the source distribution or at <https://www.openssl.org/source/license.html>.


okay that's the whole page, you ate it, no crumbs left πŸ“βœ¨ this was OPENSSL-PASSWD(1SSL) from the OpenSSL fam, version 4.0.3, dated 2026-09-29. go hash something responsibly, bestie. mwah. πŸ’–πŸ¦‹πŸ’…

πŸ“¦ where this page comes from