piapia123
en

Hash Type Identifier

Web

Everything runs locally in your browser — nothing is uploaded

Input
Drop a file here to load its contents
Output

Given a hash, the first question is usually “which algorithm made this?”. This tool lists the algorithms it might be, based on length and character set, covering MD5, the SHA family, SHA3, BLAKE, RIPEMD, CRC and formats like bcrypt, argon2, scrypt, the crypt family, MySQL and Django — over 40 in all. ⚠️ Note carefully that it gives candidates, not a verdict: a 32-character hex string could be MD5, NTLM, MD4 or LM, and since they share a length and a character set, the string alone can never tell you which. The only formats that can be identified for sure are the prefixed ones (`$2b$` is bcrypt, `$argon2` is argon2, `*` plus 40 hex digits is MySQL 4.1) because the prefix is part of the format. To be certain, you have to know where the value came from, or hash the original text with each algorithm and compare. Everything runs in your browser — the hashes you paste never leave this page.

Features

  • Identification by length plus character set, 40+ algorithms
  • Handles hex, Base64, Base64URL and hyphenated UUID lines mixed together
  • Prefixed formats (bcrypt, argon2, scrypt, crypt, Django, MySQL) are matched by prefix, never by length
  • Candidates ranked likely / possible / unlikely and colour-coded
  • States plainly that same-length algorithms cannot be told apart
  • Choose names only, or show the evidence for each candidate
  • Copy one line, or copy everything

How to use

  1. Paste one hash per line (several are fine)
  2. The result shows length, character set and candidate algorithms
  3. Leave “Show the evidence” ticked to see why each candidate is listed
  4. Switch to “Names only” for a compact list

FAQ

Can it tell me for sure this is MD5?
No, and no tool can — as long as the length and character set match, MD5, NTLM, MD4 and LM produce identical-looking output, and neither a person nor a program can tell them apart from the string itself. So this gives a ranked list of candidates. The only formats that can be identified for sure are the prefixed ones (bcrypt, argon2, crypt, Django, MySQL 4.1).
How do I actually determine the algorithm?
Two ways: look at where the value came from (the database column, the export notes, the function your code calls), or hash the original plaintext with each algorithm and compare — that comparison is the only reliable test.
Why is a digits-only string treated as a hash?
Because a string of digits of even length is both valid hex (matching some digest lengths) and the shape of a Cisco type 7 password. Both are listed — another reminder that identical shapes cannot be told apart.
Are my hashes uploaded?
No. Identification is done entirely in your browser, purely from string length and character set. Nothing is queried and no request is made.

Related tools