Hash Identifier
Paste a hash and get likely algorithms, guessed from its length and character set.
Before you can crack or verify a hash you have to know what it is, and the strongest clues are length and shape. This page reads those clues and tells you the likely candidates — the same first step a cracking workflow starts with.
How to use it
- Paste a hash.
- Read the candidate algorithms, ordered by likelihood.
- Note the length — it is the single most informative feature.
What to take away
Length narrows it fast
32 hex characters suggests MD5, 40 suggests SHA-1, 64 suggests SHA-256. Those lengths are shared by other algorithms too, so treat the answer as a shortlist.
Prefixes are decisive when present
Strings starting $2a$ or $2b$ are bcrypt, $6$ is SHA-512-crypt, $argon2id$ is Argon2. A prefix beats any length guess.
Identification is not cracking
Knowing a hash is bcrypt tells you it will be slow and expensive to attack — which is exactly why bcrypt is chosen.
Frequently asked questions
Why can one hash match several algorithms?
Because different algorithms can produce the same output length. MD5 and NTLM are both 32 hex characters, so context — where you found it, what system produced it — decides between them.
Can this tool crack the hash?
No, it only identifies the likely format. Try the Password Cracking Lab to see what actually happens when a dictionary attack meets a real hash.
What does the $ prefix mean?
It is Modular Crypt Format, which stores the algorithm, cost parameters and salt alongside the digest. It is a good sign — it means the system is using a proper password hash rather than a bare digest.
Where this fits in the course
This security tool pairs with Path 06 — Cryptography — see all 26 learning paths.
It runs entirely in your browser: nothing is uploaded, no account is needed, and it is free.
Related
- Hash Generator — SHA-1, SHA-256, SHA-384, SHA-512 of any text, via the browser's crypto engine.
- Password Cracking Lab — Four hashed passwords, one wordlist. See exactly which ones fall to a dictionary attack and which survive it — and why.
- Entropy Calculator — Shannon entropy of any text — a genuine static-analysis signal for spotting packed or encrypted data.
- Password Strength — Rough entropy and crack-time estimate for a password, with feedback.