I study this article: How to Hack a Mac Password Without Changing It and get interested in what hash algorithm is used for hashing user accounts passwords in macOS 10.12+?

My hypothesis is that it is PBKDF-SHA512.

  • $\begingroup$ Your question has an answer in apple.stackexchange $\endgroup$ – kelalaka Jan 28 at 10:26
  • $\begingroup$ Yeah, I 've seen it but in that question people discussed 10.11 version and I think, that something may be has been changed in latest versions of macOS 10.12+. $\endgroup$ – Setplus Jan 28 at 10:31
  • $\begingroup$ Well, the answer at the beginning says valid in OS 10.8 and newer $\endgroup$ – kelalaka Jan 28 at 10:32

As @kelalaka said, the answer is still valid as described in this question, so a PBKDF2-SHA512 hash with a large salt and iteration count in the 100000's, usually.

  • $\begingroup$ Is there any documentation about hashing user accounts passwords in macOS? for example how macOS choose number of iterations for hashing algorithm or generate random salt? $\endgroup$ – Setplus Jan 28 at 10:55
  • $\begingroup$ @Setplus part of it will be in the Unix part of the source code Apple releases, I think. $\endgroup$ – Henno Brandsma Jan 28 at 11:09
  • $\begingroup$ So, there are not any official documentation on number of iterations and random generator? $\endgroup$ – Setplus Jan 28 at 11:31
  • $\begingroup$ @Setplus not that I’m aware of. Only this which doesn’t mention the hashing I believe. $\endgroup$ – Henno Brandsma Jan 28 at 11:48
  • 1
    $\begingroup$ @kelalaka the count depends on the machine. $\endgroup$ – Henno Brandsma Jan 28 at 11:53

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.