Recover Forgotten Passwords & Crack Hashes
InCracker is a free, focused Windows tool for recovering your own forgotten archive, document and hash passwords — now including encrypted 7-Zip archives. Split out of InCyter to keep that platform strictly defensive; this is the recovery specialist.
Real Screenshots, Not Mockups
Every image below is the current build running on Windows 11.
From Locked File to Recovered Password
Drop a file or paste a hash — InCracker figures out the format and gives you three ways to crack it.
Drop a File or Paste a Hash
Drag-and-drop an encrypted ZIP, 7z, Office or PDF file — or paste a hash directly. InCracker confirms the file really is encrypted before it starts, and asks you when a hash could be more than one type.
Pick a Recovery Mode
1,374 built-in common passwords for an instant attempt, your own wordlist, or a mask that describes the shape of the password when you remember part of it.
Crack, Export, Repeat
Watch live progress with a rate and an estimate. For the heavy jobs, export a Hashcat hash in one click and let a graphics card finish it.
Two Tools, One Focused App
Each one does a different job, and they hand work to each other in a single click.
Password Cracker
Tests common or custom passwords against encrypted archives and documents.
- ✓Three modes: Offline, Wordlist, Mask Attack
- ✓1,374 built-in common passwords for instant offline attempts
- ✓Load your own .txt wordlist or browse an online repository
- ✓Character-set brute force per position with Mask Attack
- ✓Drag-and-drop for ZIP, 7z, Office and PDF
- ✓Quick test a single password without a full run
- ✓Export Hash for GPU cracking — Office, PDF and 7-Zip
Hash Cracker
Identifies and cracks the hash types you actually meet in the field.
- ✓MD5, SHA-1, SHA-224, SHA-256, SHA-384, SHA-512, SHA3-256, NTLM and bcrypt
- ✓Auto-detects the algorithm, and asks you when a hash is ambiguous
- ✓Four modes: Quick Local, Quick Online, Wordlist, Mask Attack
- ✓Salt support with prepend or append placement
- ✓One-click Hashcat GPU integration — auto-download, no setup
- ✓“Import from Password Cracker” one-click handoff
It Never Guesses On Your Behalf
Some hashes look identical whatever produced them. A tool that silently assumes one and reports “not cracked” hands you a wrong answer dressed up as a definitive one.
- Ambiguous types are flagged, not guessed — MD5 or NTLM, SHA-256 or SHA3-256, you choose.
- Your choice is tied to that hash. Paste a different one and it asks again, so an answer never carries over.
- Verified, not assumed. When it says a password is correct, it has confirmed it against the file itself.
- Honest about effort. Formats that are slow to attack say so before you start, not four hours in.
Hand The Heavy Jobs To A Graphics Card
One button turns a file into a Hashcat hash. Copy it, save it, or send it straight to the Hash Cracker. No Hashcat installed? InCracker downloads and unpacks it for you.
| Format | Hashcat mode |
|---|---|
| 7-Zip | 11600 |
| Office 2013+ | 9600 |
| Office 2010 | 9500 |
| Office 2007 | 9400 |
| PDF AES-256 | 10700 |
| PDF AES / RC4-128 | 10500 |
| PDF RC4-40 | 10400 |
What Is New
017-Zip Support
Encrypted .7z archives in all three attack modes, plus Hashcat mode 11600 export for the GPU.
02Ambiguous Hashes Flagged
MD5 versus NTLM, SHA-256 versus SHA3-256 — InCracker asks rather than assuming, once per hash.
03NTLM & bcrypt Fixed
Both now work correctly. NTLM in particular used to report a clean “not found” on every password.
04Terms On First Run
A one-time authorised-use agreement, re-readable any time from Settings.
05Faster PDF Cracking
The document is parsed once per run instead of on every single attempt.
06Interface Polish
Opens centred on screen, and every dialog now carries the app icon and the dark theme.
A Real App, Not a Script
Everything you would expect from a finished Windows application.
Settings & Shortcuts
Desktop shortcut management from within Settings — set up once, launch anywhere.
Encrypted Activity Log
Records what ran against what, never the contents of your files. Sealed with a key only your Windows account can unseal, keeping 30 days.
Auto-Update Checker
Checks GitHub releases automatically and verifies every download against its published SHA-256 before installing.
Native Installer
No Python, no dependencies. A native Windows installer that just works out of the box.
Hashcat GPU Mode
One-click auto-download and install of Hashcat. Office, PDF and 7-Zip export straight to the right mode, including 11600 for 7-Zip.
Cracker Handoff
Move between Password Cracker and Hash Cracker without re-entering anything.
Authorised Use Only
Use it only on what you own, or are permitted to test
Recovering a password is lawful in some circumstances and a criminal offence in others, and the difference is authorisation. Use InCracker only on files, archives, documents, hashes, systems and accounts that you own, or that you have explicit, current permission from the owner to test.
Being able to recover a password does not entitle you to it. Unauthorised access to a computer system or to data is a criminal offence in most jurisdictions.
Typical legitimate uses: recovering your own forgotten archive or document passwords, authorised penetration testing and red-team engagements, password-strength assessment on systems you administer, security research, education, and CTF competitions.
Start Recovering Passwords
InCracker is free forever and installs in under a minute. No account, no subscription — just a focused recovery tool that runs entirely on your own machine.
Some antivirus and EDR products block unsigned installers on download. InCracker is not code-signed yet, so if the .exe is blocked, grab the ZIP version instead.