← ALL TOOLS
// HASHING & CRYPTO · BROWSER

Hash Identifier

Guess the algorithm behind a hash from its length, alphabet and format (MD5, SHA, bcrypt, NTLM and more).

CRYPTO · IN YOUR BROWSER

Runs in your browser; nothing you type leaves this page. Too long to share as a link.

HISTORY

Your last 5 runs appear here for 7 days, on this device only.

RESULT

Fill in the form and run the tool; the result appears here.

Hash Identifier inspects a hash string's length, character set and any prefix markers, and lists which algorithms it could plausibly be, such as MD5, SHA-1, SHA-256, NTLM or bcrypt. This is a reasoned guess, not a verification: nothing about a hash's format proves its algorithm with certainty.

How to read the result

The candidate list shows every format the input fits, with formats that carry a distinguishing prefix listed before those matched on length alone: a string beginning $2b$ or $2y$ is a strong signal for bcrypt, while a 32-character hex string fits MD5 and NTLM equally. Each candidate shows the reasoning, not just the name, and a JSON Web Token pasted by mistake is pointed out. It runs in your browser.

Defender tips

  • During a migration or audit, use this to prioritise: anything that identifies as unsalted MD5, SHA-1 or plain NTLM should be re-hashed with a modern password hash as soon as possible.
  • Do not treat a single candidate as certain; when the format is ambiguous (several algorithms share a length), corroborate with where the hash came from before acting on it.

FAQ

Can this tool crack the hash?

No. It only reasons about which algorithm produced a given format; it does not attempt to recover the original input.

Why does it list multiple candidates for one hash?

Several algorithms share the same output length and character set (several 32-character hex hashes, for example), so length and charset alone cannot always identify one algorithm uniquely.

What do prefixes like $2b$ or $6$ mean?

Many modern hash formats (bcrypt, sha512crypt and others) encode the algorithm and its parameters directly in a prefix, which is a far more reliable signal than length alone when present.