Alternatives to John the Ripper
The long-running password auditing tool, whose community jumbo build supports hundreds of hash and cipher types. The listings below can replace it for an important use case. Each note says what changes if you switch.
The original
John the Ripper
The long-running password auditing tool, whose community jumbo build supports hundreds of hash and cipher types.
Replacements
Listings that take over the same core job as John the Ripper.
hashcat
A GPU password recovery tool used for auditing how weak the password hashes in your own systems actually are.
Hashcat is built around GPU cracking with CUDA, HIP, Metal and OpenCL backends and 590+ hash modes, but supports fewer obscure formats and needs a capable GPU.
Similar software
Related functionality, not a direct replacement.
Name That Hash
Identify likely algorithms behind a hash string.
Hydra
Network logon testing tool that checks credentials across many protocols.
CeWL
Builds a custom wordlist by spidering a target website.
SecLists
Find reusable test data for authorized security assessments.
hcxdumptool
Captures wireless authentication material for offline analysis.
Specops Password Auditor
A free Windows tool that audits Active Directory passwords for weak, reused and compromised credentials.
