Contact

Tools  /  Security  /  Hash Identifier

SECURITY

Hash Identifier

Identify a hash format by its prefix or length -- with the matching hashcat mode and John the Ripper format name.

More Security tools

Password Entropy Calculator Hash Generator Password Generator JWT Decoder & Generator HMAC Generator Random Token Generator

What this tool does

Paste a hash (or several, one per line) and see every plausible algorithm it could be, based on its prefix, length and character set — plus, for each candidate, the exact hashcat -m mode number and John the Ripper format name you'd actually need to crack or test it, since looking those up by hand is half the work when you're starting a CTF challenge or an authorized password audit.

Why there's often more than one answer

A hash alone doesn't encode which algorithm produced it — a 32-character hex string could be MD5, NTLM, or MD4, since all three produce a 128-bit digest and MD5/MD4 render identically in hex. This tool is honest about that: results are split into Most likely (the hash has a distinctive prefix, like $2a$ for bcrypt or $argon2id$ for Argon2, that narrows it to one real answer) and Possible (the hash only matched by length and character set, so several algorithms are equally plausible) — never a single falsely confident guess.

Using the hashcat / John references

Once you know (or suspect) the algorithm, hashcat needs a mode number (hashcat -m 0 -a 0 hash.txt wordlist.txt for MD5, for instance) and John the Ripper needs a format name (--format=raw-md5). Both are shown next to every candidate that has one, so you don't need a separate lookup table — this is deliberately the same information Name-That-Hash and hashID provide, in the same browser tab you're already working in.

Batch mode

Paste several hashes, one per line — a leaked dump, a CTF challenge file, a password list — and each gets identified independently in its own result block.

Privacy and scope

Identification is pure pattern matching against known hash formats — nothing is sent anywhere, and nothing is actually cracked or brute-forced by this tool. It only tells you what a hash probably is, which is the first step before using a real cracking tool like hashcat or John the Ripper, which this tool deliberately is not.

FAQ

Frequently asked questions

Is my hash uploaded anywhere?
No. Identification is local pattern matching against known hash formats -- nothing is sent to a server, and this tool does not attempt to crack or brute-force anything.
Why does it show multiple possible algorithms for one hash?
Many hash algorithms produce the same output length and use the same hex or Base64 character set, so a hash alone doesn't prove which one produced it. Results are split into "Most likely" (a distinctive prefix narrows it to one answer) and "Possible" (length-only matches, genuinely ambiguous) rather than guessing confidently.
What do the hashcat and John the Ripper badges mean?
The exact -m mode number hashcat needs, and the --format name John the Ripper needs, to actually attack a hash of that type -- shown so you don't have to look them up separately once you know what you're dealing with.
Can I identify more than one hash at a time?
Yes -- paste multiple hashes, one per line, and each is identified independently in its own result block.
It said my input looks like a JWT, not a hash -- what does that mean?
A JWT (JSON Web Token) is a structured, three-part token, not a hash -- it just happens to be a long string of letters and numbers too. This tool detects the giveaway "eyJ" prefix and two dots, and points you to the JWT Decoder & Generator tool instead.
Does this tool actually crack hashes?
No -- it only identifies what format a hash is likely in. Actually cracking a hash (with a wordlist, brute force, or rainbow table) requires a real tool like hashcat or John the Ripper, run against hardware you control, on data you're authorized to test.
Theme Accent