Hash Identifier
Paste one or more hashes to see the likely types, from MD5 and SHA-2 to bcrypt and Argon2, with an honest note on how sure the guess is.
Worked examples
A 32 character hex hash
5d41402abc4b2a76b9719d911017c592
Most likely MD5. Also possible: NTLM, MD4.
This is the MD5 hash of the word hello.
About Hash Identifier
A hash is a short fixed-length fingerprint of some data, and the plain ones carry no label. If you find a string of 32 or 64 characters in a database, a log or a leaked list, the only clues to how it was made are its length, the characters it uses and sometimes a prefix. A hash identifier compares what you paste with the known shapes and gives you a short list of likely types.
Prefixed password hashes are the easy cases, because the prefix names the method and holds its settings. A string starting with $2b$ and a cost number is bcrypt, and one starting with $argon2id$ is Argon2id. Plain hex hashes are harder. A 32 character string is most often MD5 but could be NTLM, and a 64 character string is most often SHA-256 but could be SHA3-256. The tool lists the possibilities in order of likelihood, adds a note on whether each is considered weak, and says so clearly when what you pasted is not a hash at all.
How to use Hash Identifier
- Paste one hash, or several with one on each line.
- Read the length and shape the tool detected.
- Look at the list of possible types, with the most likely first.
- Use where the hash came from to pick between the possibilities.
Common uses
- Working out how a legacy system stored its passwords
- Checking whether stored password hashes use a slow, suitable method
- Identifying a checksum copied from a download page
- Learning to recognise the common hash formats
Frequently asked questions
Can this tell me exactly which hash it is?
Only for hashes with a prefix. For plain hex hashes the length narrows it to a few types, but several methods give the same length. The source of the hash, such as the software that made it, is a better clue than the hash itself.
Does it reverse the hash?
No. A hash cannot be reversed. This tool identifies the likely type only and does not try to recover the original text.
Which hashes are suitable for passwords?
bcrypt, Argon2, scrypt and PBKDF2 are made for passwords because they are deliberately slow and use a salt. Plain MD5, SHA-1 and SHA-256 are fast, which helps an attacker who has stolen the hashes, so they should not be used alone for passwords.
What does a salt look like?
In the formats with a prefix the salt is built into the string. Some systems store a plain hash and the salt separately, joined by a colon, and the tool recognises that layout.
Why does it say my string is not a hash?
It may be a signed token, an encoded value or an identifier. A string that starts with eyJ and has two dots is usually a signed token. The tool names such cases so you do not waste time on them.