Free · Client-side · No upload
Analyze a WPA Handshake Capture
Drop your .cap / .pcap / .pcapng / .hccapx / .hc22000 file — we detect format and likely handshake markers before authoritative server validation. Everything runs locally in your browser; this page does not upload the file.
Drop your handshake file here
or
Choose Capture File
Analyzed entirely in your browser · .cap .pcap .pcapng .hccapx .hc22000
What this tool checks
- Format detection — via magic bytes (PCAP = D4 C3 B2 A1, PCAPNG = 0A 0D 0D 0A, HCCAPX = “HCPX”)
- SSID extraction — scans for 802.11 beacon frame SSID information elements (tag 0x00)
- EAPOL presence — detects 0x88 0x8E ethertype or WPA key type marker to confirm a 4-way handshake is captured
- Recovery marker check — estimates whether the capture is worth submitting to WiFi Password Recovery
This is an advisory pre-flight check. It does not prove that a capture is valid or recoverable; the server performs the authoritative validation.