Hidden Konami JS

A modified konami-js with custom input patterns obfuscated by hash to keep them and the easter egg function secret

View the Project on GitHub rorosaurus/hidden-konami-js

Want help creating a pattern?

Key Touch
Your input is recorded as a pattern below

Here's the raw string for your pattern
Pattern String:

Here are the values you'll need
Pattern Hash:

Pattern Length:

JS File Name:

JS Function Name:


On a keyboard? Type: iamimpatient. On a touch device? Tap four times.

Whoa cool! It did a thing! That thing was hidden until just now, and you wouldn't have known what to do if I didn't tell you. Sweet!


The original konami-js is a nice little library that lets you add a secret function to your website which is called when you type in the Konami Code!

I love using this to sneak little easter eggs into my projects, but I've always had a few complaints.

This fork aims to solve these complaints by:


You want your website to do something special, but you don't want it to be immediately obvious what the desired pattern is upon inspection of the source. The only way to find the secret is to spread it by word of mouth! (or by finding the website owner and buying a $5 wrench)

Using the MD5 hash is cheap and good enough for this. It also comes with the added bonus of seeing if anyone cares about your secret enough to try and find a collision just to find an acceptable pattern!


There is a live demo over at https://rorosaurus.github.io/hidden-konami-js/

Can you find all the secret input patterns? Go ahead! Open the developer tools! Inspect the page source! The only info you have is konami.js and something in the HTML document like:

<script>var easter_egg = new KeyKonami("0a75e752070ffe5ed283de6d81efb3db", 20);</script>

So you have an MD5 hash of the desired input pattern and it's length. Not too much to go on. So unless the site owner tells you something like:

Hey you should type 'hello' and see what happens.

Then you are in a tough place, unless you want to start searching for MD5 collisions. :)

Hint: It becomes easy once you realize the demo site contents are public on the GitHub pages branch. Of course, this project is actually useful on private webservers which don't allow visitors to view the directory contents. ;)


On the left sidebar of the demo site, I've created a quick tool to help you generate the values you'll need for setup! Once you settle on a good input pattern, you can save the relevant values. They are downloaded as a .txt for security reasons, but the file can be renamed and used as the .js file you'll use in step 3!

Note: The Pattern String isn't needed, but I include it so you don't forget your pattern. For keyboard input, the Pattern String is the KeyboardEvent keyCode. For touch input, the Pattern String is a comma separated string describing the swipes/taps.


Step 1: First, you need to add the script to your page. Make sure you add the MD5 script too!

<script type="text/javascript" src="konami.js"></script>
<script type="text/javascript" src="md5.min.js"></script>

Step 2: Next, attach the easter egg to your site by adding the tag below to your HTML. You'll need two of the generated values from earlier: the pattern hash and the pattern length. Create a KeyKonami for a pattern that uses keyboard presses and use TouchKonami for a pattern that uses touch input.

<script>var easter_egg = new KeyKonami("pattern_hash", pattern_length);</script>

Step 3: Finally, you need to create a new js_filename.js file (or reuse the file you downloaded from my generator). Create a function with the name that was generated - then add your easter egg code! You're done!

function function_name(){
    alert("Your secret code goes here!");


This is not secure

Nor is it meant to be. Please do not use this to secure anything actually important. This is just meant to be a simple way to make some dumb secret jokes on your website, which can (mostly) only be discovered or spread by word-of-mouth. This does not actually protect anything and, as previously mentioned, can be defeated by a determined adversary.


Original konami-js repo: https://github.com/snaptortoise/konami-js

MD5 library repo: https://github.com/blueimp/JavaScript-MD5

Licensed under the MIT License (http://opensource.org/licenses/MIT)