Skip to content
app.shubraj.com

Hash Identifier

Paste a hash string to identify its algorithm type. Detects MD5, SHA variants, bcrypt, Argon2, and more based on length and format.

Hash or hashes

Try an example:

Paste a hash to see what it is, how strong it is, and what to use instead.

Identification uses length, character set and format prefixes, so look-alike hashes (like MD5 and NTLM) are ranked by how common they are. A hash can’t be reversed to reveal the original text.

Identify Hash Algorithms from Hash Strings

Determine which hash algorithm produced a given hash string by analyzing its length, format, and character patterns. Useful when working with legacy systems, debugging authentication issues, or verifying hash formats.

How Hash Identification Works

  • Length analysis: Each hash algorithm produces outputs of specific lengths (e.g., MD5 = 32 hex chars, SHA-256 = 64 hex chars).
  • Format patterns: Some hashes have distinctive prefixes (like bcrypt's $2a$) or structures.
  • Character sets: Hex hashes use a-f0-9, while Base64-encoded hashes include A-Za-z0-9+/=.

Common Hash Types

  • MD5: 32 hex characters — fast but cryptographically broken, still common in checksums.
  • SHA-256: 64 hex characters — widely used for file verification and Git commits.
  • SHA-512: 128 hex characters — stronger variant for sensitive applications.
  • bcrypt: 60 characters starting with $2a$, $2b$, etc. — designed for password hashing.
  • Argon2: Variable length with $argon2 prefix — modern password hashing standard.

Limitations

  • Some hashes (like MD5 and NTLM) share the same length and format; context helps distinguish them.
  • Base64-encoded hashes may require decoding to confirm the underlying algorithm.
  • Custom or non-standard hashes may not be identified.

Frequently asked questions

How accurate is hash identification?

Very accurate for standard algorithms based on length and format. Some hashes (like MD5/NTLM) share formats and require context.

Can I identify salted hashes?

Salted hashes (like bcrypt, Argon2) are identified by their distinctive format prefixes and structure.

What if my hash isn't identified?

The tool shows the hash length and format. Check if it's a custom algorithm or encoded in an unexpected format.