How to use the Hash Identifier
- 1. Paste the hashCopy the hash value exactly, with any $ prefixes.
- 2. IdentifyPress the button to compare it with known formats.
- 3. Use the contextPick between candidates using where the hash came from.
How identification works
Most hashes do not say what they are, so the identifier uses three clues. Prefixes are certain: $2b$ is bcrypt, $argon2id$ is Argon2, $6$ is SHA-512 crypt from Linux /etc/shadow. Length narrows plain hex digests: 32 hex characters are 128 bits, 40 are 160 bits, 64 are 256 bits. Character set separates hex from Base64.
Worked example: 5d41402abc4b2a76b9719d911017c592 has 32 hex characters, so the most likely type is MD5 (it is the MD5 of "hello"). NTLM, MD4 and LM produce the same length, so they are listed as possible. A bcrypt hash like $2b$12$… is identified with certainty and its cost factor of 12 is shown.
Using it responsibly
- Forensics and incident response: work out which algorithm protected leaked credentials.
- CTFs and labs: pick the right mode before using a cracking tool on practice data.
- Code reviews: spot weak password storage, such as plain MD5 or SHA-1 hashes in a database.
This page only identifies; it never cracks or looks hashes up. Only test cracking on data you own or are authorised to assess. If you find MD5, SHA-1 or unsalted SHA-256 used for passwords, recommend Argon2id, bcrypt or scrypt instead. A 64-hex string could still be SHA3-256 or BLAKE2s, so confirm with the source system. Compute hashes yourself with the file hash checker or create a proper password hash with the bcrypt generator.
Frequently asked questions
Can it tell MD5 from NTLM for sure?
No. Both are 32 hex characters. Context decides: Windows systems use NTLM, many web apps used MD5.
Is my hash sent anywhere?
No. Identification runs in your browser.
Is the Hash Identifier free?
Yes, the Hash Identifier is free. The first time you identify your first hash, you are asked for your name and WhatsApp number once. After that, this and every other Uncodemy tool opens straight away without the form.