openssl-passwd(1ssl)

openssl-passwd1ssl

Compute password hashes

Usage

openssl passwd [-help] [-1] [-apr1] [-aixmd5] [-5] [-6] [-salt string] [-in file] [-stdin] [-noverify] [-quiet] [-table] [-reverse] [-rand files] [-writerand file] [-provider name] [-provider-path path] [-provparam [name:] key=value] [-propquery propq] [password]

Overview

This command computes the hash of a password typed at run-time or the hash of each password in a list. The password list is taken from the named file for option -in, from stdin for option -stdin, or from the command line, or from the terminal otherwise.

Options

-help

Print out a usage message.

-1

Use the MD5 based BSD password algorithm 1 (default).

-apr1

Use the apr1 algorithm (Apache variant of the BSD algorithm).

-aixmd5

Use the AIX MD5 algorithm (AIX variant of the BSD algorithm).

-5
-6

Use the SHA256 / SHA512 based algorithms defined by Ulrich Drepper. See <https://www.akkadia.org/drepper/SHA-crypt.txt>.

-salt string

Use the specified salt. When reading a password from the terminal, this implies -noverify.

-in file

Read passwords from file.

-stdin

Read passwords from stdin.

-noverify

Don't verify when reading a password from the terminal.

-quiet

Don't output warnings when passwords given at the command line are truncated.

-table

In the output list, prepend the cleartext password and a TAB character to each password hash.

-reverse

When the -table option is used, reverse the order of cleartext and hash.

-rand files, -writerand file

See "Random State Options" in openssl(1) for details.

-provider name
-provider-path path
-provparam [name:]key=value
-propquery propq

See "Provider Options" in openssl(1), provider(7), and property(7).

Examples

  % openssl passwd -1 -salt xxxxxxxx password
  $1$xxxxxxxx$UYCIxa628.9qXjpQCjM4a.
  % openssl passwd -apr1 -salt xxxxxxxx password
  $apr1$xxxxxxxx$dxHfLAsjHkDRmG83UXe8K0
  % openssl passwd -aixmd5 -salt xxxxxxxx password
  xxxxxxxx$8Oaipk/GPKhC64w/YVeFD/

Releases

6 releases since Debian 9 (Stretch); the text changed 5 times.

  1. 9
  2. 10
  3. 11
  4. 12
  5. 13
  6. Arch

-5 since Debian 10 (Buster); -6 since Debian 10 (Buster); -aixmd5 since Debian 10 (Buster); -propquery since Debian 12 (Bookworm); -provider since Debian 12 (Bookworm); -provider-path since Debian 12 (Bookworm); -provparam since Debian 13 (Trixie); -rand since Debian 10 (Buster); -reverse since Debian 12 (Bookworm); -writerand since Debian 12 (Bookworm).

-crypt until Debian 11 (Bullseye).

History

The -crypt option was removed in OpenSSL 3.0.

From openssl 3.6.5-1 in Arch Linux 2026-11-01. Parsed by carta from the page's man source.