Hash Type Identifier

About this tool

Paste a hash and this tool guesses its algorithm from length and format, MD5, SHA-1, SHA-256, SHA-512, bcrypt, and others.

Example

Input: 5d41402abc4b2a76b9719d911017c592

Output: MD5 or NTLM (32 hex)

Privacy

This tool runs entirely in your browser. Your data is processed locally and never uploaded to a server.

How to use this tool

1. Paste the hash string into the input box.
2. Check that you copied the full value, including any prefix like $2b$ for bcrypt.
3. Run the lookup to let the tool inspect the hash length and format.
4. Read the suggested algorithm and compare it with the source system or code that produced it.

Step by step, what happens

1. The tool reads the text you paste and looks at visible patterns such as length, character set, and common prefixes.
2. It compares those details against known hash formats like MD5, SHA-1, SHA-256, SHA-512, bcrypt, and other common variants.
3. If the string matches a known format closely, the tool returns the most likely algorithm.
4. If the string is ambiguous or nonstandard, it gives a best guess based on the available clues.
5. You use the result as a starting point, then confirm it against the application or database that generated the hash.

Worked example

Suppose you copied a bcrypt password hash from a database and want to confirm what algorithm it uses.

Input: $2b$10$abcdefghijklmnopqrstuv

1. You paste the hash into the tool exactly as stored, including the $2b$ prefix.
2. The tool recognizes the bcrypt-style prefix and checks the overall format.
3. It returns the most likely algorithm based on that pattern.

Tips and common mistakes

• Paste the full hash, not a shortened version, because many algorithms are identified by length and prefix.
• Do not strip characters like $2b$ or remove separators, since those often tell the tool which algorithm was used.
• If the tool is unsure, the hash may be truncated, salted in a custom way, or generated by a less common algorithm.
• A match from this tool is a strong guess, not a password recovery result, so always verify it against the source system.

Frequently asked questions