Security

NTLM

NTLM is Microsoft's older challenge-response authentication protocol for Windows. The client proves it knows the password by answering a server challenge with a value derived from the password hash, which attackers can capture, crack offline or relay.

Deep dive

Learn Article

What Is an NTLM Hash Leak and How Attackers Use It

An NTLM hash leak sends a Windows user's authentication response to an attacker's server. Learn how it happens and how to limit the damage.

beginner 4 min read

Back to glossary