Security
Hash Identifier
Not sure what kind of hash you're looking at? Identify likely algorithms from its length and format.
A best guess from length and format alone. Several algorithms share output lengths, so treat this as a shortlist, not an answer.
Related: the hash generator if you need to create one instead of identify one.
Runs entirely in your browser. Nothing you paste is sent anywhere.
Learn about identifying hashes
How this narrows down an algorithm
A hash's output length and character set are fixed for a given algorithm, so a lot can be inferred just from those two things alone, without knowing anything about what was actually hashed.
Common lengths
| Format | Likely algorithm |
|---|---|
| 32 hex characters (128-bit) | MD5, or NTLM (same length, different algorithm) |
| 40 hex characters (160-bit) | SHA-1 |
| 64 hex characters (256-bit) | SHA-256 |
| 128 hex characters (512-bit) | SHA-512 |
Starts with $2a$, $2b$, or $2y$ | bcrypt |
Starts with $1$ | MD5-crypt (Unix) |
Common questions
Why does it show multiple possible algorithms for one hash? Several algorithms happen to produce the same output length. MD5 and NTLM both being 32 hex characters is the classic example, so length and format alone can't always settle it with certainty. Where the hash actually came from usually resolves the ambiguity.
Can this crack or reverse the hash? No, this only identifies the likely algorithm from its shape. Hashing is designed to be one-way, so identifying an algorithm and reversing its output are completely different problems.
Why does the same input give different length hashes on different sites? Different sites use different algorithms, whether by design or just the age of their codebase, so the same password produces a completely different, unrelated-looking hash under MD5 versus SHA-256.