Migrate HCCAPX to HC22000
HCCAPX is a deprecated binary format associated with Hashcat mode 2500. Modern WPA/WPA2 work uses the text-based HC22000 format, which can represent both EAPOL handshakes and PMKIDs.
Online conversion is unavailable
WiFiPassword.org does not convert HCCAPX on the server and does not accept it for recovery. Use the official hcxtools workflow below, then submit the resulting HC22000 file.
Choose the correct source path
You still have CAP, PCAP or PCAPNG
Use the raw capture. It preserves more information and is the preferred input for hcxpcapngtool.
You only have HCCAPX
Current hcxtools can import the deprecated file through hcxhashtool --hccapx-in. Preserve the original file.
Linux migration workflow
hcxtools is maintained for Linux. Install the package supplied by your distribution or build the current release from the official hcxtools repository. Check the installed version's help before processing customer or forensic material.
Keep an untouched source copy
Do not merge, clean, or overwrite the only copy of a capture. Work on a duplicate.
Convert a raw capture
Replace the input filename with your CAP, PCAP, or PCAPNG file.
hcxpcapngtool -o converted.hc22000 capture.pcapngImport a legacy HCCAPX file
Current hcxtools releases support deprecated HCCAPX input. Confirm the exact options with hcxhashtool --help.
hcxhashtool --hccapx-in=legacy.hccapx -o converted.hc22000Check before submission
Use the browser pre-check for format markers. The recovery backend still performs the authoritative full-file validation.
Continue with HC22000
A browser marker check is advisory. A valid submission must still pass full server validation before recovery begins.
Common migration problems
The output file is empty
The source may not contain usable EAPOL/PMKID material, or the capture may be incomplete. Review the hcxtools console output before retrying.
The file is detected as HCCAPX after migration
Make sure the output option creates HC22000 text and that you selected the new output file, not the original binary source.
The browser detects a marker but the server rejects it
The browser performs only an advisory bounded scan. Server validation examines the complete capture and remains authoritative.
You cannot install hcxtools
Ask the network administrator who created the capture to re-export the original CAP/PCAP/PCAPNG source as HC22000 in a supported Linux environment.
hcxtools is independent open-source software. WiFiPassword.org provides this migration guide but does not operate, audit, or guarantee third-party tooling.