Free · Client-side · No upload
Analyze a WPA Handshake Capture
Drop your .cap / .pcap / .pcapng / .hccapx / .hc22000 file — we detect the format, list captured SSIDs, and verify whether the EAPOL 4-way handshake is present. Everything runs locally in your browser, the file is never uploaded to any server.
Drop your handshake file here
or
Choose Capture File
Analyzed entirely in your browser · .cap .pcap .pcapng .hccapx .hc22000
What this tool checks
- Format detection — via magic bytes (PCAP = D4 C3 B2 A1, PCAPNG = 0A 0D 0D 0A, HCCAPX = “HCPX”)
- SSID extraction — scans for 802.11 beacon frame SSID information elements (tag 0x00)
- EAPOL presence — detects 0x88 0x8E ethertype or WPA key type marker to confirm a 4-way handshake is captured
- Ready for mode 22000 — tells you if the capture can be recovered by WiFi Password Recovery
This is a pre-flight check before submitting to recovery — save money on failed jobs by verifying your capture is valid first.