Hash Type Identifier
Identify a hash type from its format: bcrypt, Argon2, $6$ SHA-512 crypt, LDAP {SSHA}, Django PBKDF2, MySQL, or MD5/SHA by hex length, with hashcat modes.
Identification is a guess based on length, character set and prefix: many algorithms produce digests of the same length, so a plain hex string can never be identified with certainty.
What is Hash Identifier?
Analyses a hash string and lists the algorithms that could have produced it, with a confidence label and the matching hashcat mode. Self-describing formats such as $2b$ (bcrypt), $argon2id$, $6$ (SHA-512 crypt), {SSHA} or pbkdf2_sha256$ are identified with certainty; plain hex or Base64 digests are matched by length.
How to use Hash Identifier
- Paste the hash into Hash to identify.
- Read the detected format and the list of candidates, ordered from most likely to merely possible.
- Use the hashcat mode or the algorithm name to verify the guess with the original software or a hash generator.
Example
5d41402abc4b2a76b9719d911017c592
32 hexadecimal characters (128 bits). Possible algorithms: MD5 (most likely, hashcat -m 0), NTLM (most likely, hashcat -m 1000), MD4, MD2, RIPEMD-128, LM
When to use Hash Identifier
Use it when you find a hash in a database dump, configuration file or CTF challenge and need to know what produced it. A plain hex digest can never be identified with certainty – many algorithms share a length – so confirm by hashing a known input. The tool does not crack or reverse hashes.
How Hash Identifier works
The input is first checked against about 35 prefix patterns of crypt(3), LDAP, Django, Werkzeug, passlib, phpass, MySQL and MSSQL formats; a match names the algorithm exactly. Otherwise hex strings are classified by length (32 hex characters = 128 bits → MD5, NTLM, MD4…; 64 → SHA-256, SHA3-256, BLAKE2s, BLAKE3…), and Base64 strings by their decoded byte length. The first candidate of a length group is the most common in practice; the others are listed as possible.
Common Use Cases
- Find out how passwords are stored in a legacy database before migrating
- Pick the right hashcat mode during an authorised password audit
- Recognise LDAP
{SSHA}or/etc/shadowformats - Solve CTF challenges that start with an unknown hash
Security Note
Hashes are analysed locally. Only analyse hashes you are authorised to handle.
FAQs
Why does it list several algorithms?
Many hash functions produce digests of the same length (MD5, NTLM and MD4 are all 128 bits), and their output looks identical. Only prefixed formats are unambiguous.
How can I confirm the algorithm?
Hash a known input (for example the password you set) with the candidate algorithms in the Hash Generator and compare.
Can it decrypt or crack the hash?
No. Hashes are one-way. The tool only identifies the format.
What does "certain" mean?
The hash carries an algorithm identifier, such as $2b$ for bcrypt or {SSHA} for salted SHA-1, so there is no ambiguity.