Hash Identifier Online
Paste any hash and instantly find out what it is — MD5, SHA-1, SHA-256, SHA-512, bcrypt, NTLM and 100+ more hash types. Verify passwords against hashes, generate digests, or identify hashes in batch. Everything runs in your browser. Nothing is ever uploaded.
Verification recomputes the digest locally with every matching algorithm (MD5, SHA-1/256/384/512) and compares — your guess never leaves the browser.
Why this hash identifier?
🎯 300+ hash types
The largest pattern database of any hash identifier, web or CLI — from MD5 and SHA-2 to bcrypt, scrypt, Argon2, WordPress, Django, LDAP and database hashes.
⚡ Verify, don't guess
Most identifiers only name candidates. Ours recomputes digests locally to prove which algorithm produced your hash.
🔑 Hashcat-ready
Every result shows its Hashcat mode number (-m), so security professionals can go straight from identification to auditing.
🛡️ Verifiably private
No server, no analytics on your input, no signup. Don't trust the badge — check the Network tab yourself.
How to identify a hash type
- Paste the hash into the Identify tab above.
- Read the ranked matches. Short distinctive patterns (like
$2y$for bcrypt) rank first; plain hex lengths (32 chars = MD5/NTLM, 64 = SHA-256) list every possible algorithm. - Verify (optional). If you have a password guess, the Verify tab recomputes the digest and confirms the exact algorithm.
Quick rule of thumb: 32 hex chars → MD5 family · 40 → SHA-1 · 64 → SHA-256 · 128 → SHA-512. Anything starting with $ is a modular crypt format — the prefix names the algorithm.
Supported hash algorithms loading…
The full pattern database this tool checks against:
| Algorithm | Category | Hashcat | Pattern |
|---|
Frequently asked questions
What is a hash identifier?
A hash identifier analyzes a hash string's structure — its length, character set, and any prefixes — and tells you which algorithm likely produced it. For example, a 32-character hex string is probably MD5, while anything starting with $2y$ is bcrypt.
How can I tell if a hash is MD5 or SHA-256?
Count the hexadecimal characters: MD5 digests are 32 characters, SHA-256 digests are 64. This tool automates the check across 300+ types, including ambiguous cases where several algorithms share a length.
Can this tool identify bcrypt, WordPress or Django hashes?
Yes. Prefixed formats are the easiest to identify precisely: $2a$/$2b$/$2y$ for bcrypt, $P$ for WordPress, pbkdf2_sha256$ for Django, $S$ for Drupal 7, and many more.
Is it safe to paste password hashes here?
Yes. All identification, verification and generation run 100% client-side in JavaScript. Nothing is sent to any server — open your browser's DevTools Network tab to confirm zero requests.
What is the Hashcat mode in the results?
It's the numeric ID Hashcat uses for each algorithm (e.g. -m 0 for MD5, -m 3200 for bcrypt, -m 1000 for NTLM), letting security professionals move straight from identification into auditing workflows.
Can I check whether a password matches a hash?
Yes — use the Verify tab. Enter the hash and your password guess; the tool recomputes the digest locally with each candidate algorithm and reports which one matches. Your guess never leaves the browser.
Why do some hashes match multiple algorithms?
Because different algorithms can produce identical-looking output — e.g. any 32-char hex string could be MD5, NTLM, MD4 or LM. The tool ranks distinctive prefixed formats first and lists every possibility for ambiguous lengths, so you can verify to narrow it down.
Does it work offline?
Yes. Once the page loads, everything runs locally with no network dependency. Bookmark it for incident-response work without connectivity.