Password Hash Identifier
Paste a hash to identify the likely algorithm — bcrypt, MD5, the SHA family, Argon2, and more — with a confidence level for each guess.
Hash
LocalPossible algorithms
About Password Hash Identifier
The Password Hash Identifier inspects a hash and suggests the likely algorithm — bcrypt, MD5, the SHA family, Argon2, and others — with a confidence level for each guess. It is for developers and analysts working out what produced an unfamiliar hash.
Identifying a hash by eye takes experience. Analysing its length and format locally narrows the candidates instantly, with the hash never uploaded.
Step by step
- Paste the hash you want to identify.
- The tool examines its length, characters, and any prefix.
- Review the ranked list of likely algorithms with confidence levels.
- Use the most probable match to guide your next step.
What it offers
- Algorithm guesses for common hash types
- Confidence level per candidate
- Recognises distinctive prefixes and formats
- Processed locally — Password Hash Identifier
Where it helps
- Working out which algorithm produced a stored hash
- Identifying a hash format during a security review
- Confirming whether a value is bcrypt or a fast hash
- Teaching how hash formats differ
Tips for best results
- Use the prefix as your strongest clue; bcrypt and Argon2 announce themselves clearly.
- Remember length alone is ambiguous, since different algorithms can share it.
- Identification is a starting point, not proof, and never implies the hash can be reversed.
Pitfalls to watch for
- Treating a guess as certain; several algorithms share the same length, so confidence is not proof.
- Assuming a hash is reversible once identified — identification does not mean it can be decrypted.
- Ignoring a recognisable prefix, which is often the strongest clue to the algorithm.
Why people use it
Quick narrowing
Reduces many possibilities to a ranked few.
Confidence levels
Shows how sure each guess is.
Format-aware
Reads prefixes and structure, not just length.
Private
The hash is analysed on your device.
Common questions
This runs entirely in your browser
No file or text you enter here is uploaded. Encoding and decoding happen on your device using native browser APIs — close the tab and nothing remains on a server.