Hash Identifier

How it is calculated

The tool never decodes or cracks anything; it only looks at the text you paste, after trimming spaces. If it starts with $2a$, $2b$ or $2y$ followed by two digits and another $, it reports bcrypt. Otherwise, if every character is hexadecimal (0-9, a-f, either case), it matches the length: 32 characters MD5, NTLM or MD4; 40 SHA-1; 56 SHA-224 or SHA3-224; 64 SHA-256 or SHA3-256; 96 SHA-384 or SHA3-384; 128 SHA-512, SHA3-512 or Whirlpool. Any other length or a non-hex character gives Unknown hash type with the length and charset. Several algorithms share one length, so the result is a list of candidates, not proof.

Common mistakes

• Treating the answer as certain: a 32-character hash may be MD5, NTLM or MD4, and a 64-character one SHA-256 or SHA3-256, so context is needed to choose.
• Pasting a hash with a prefix or extra text such as 0x, a username, a colon or a salt: only a clean hex string or a bcrypt string is recognised, and anything else comes back as unknown.
• Expecting salted formats such as $1$ or $6$ crypt strings, or Base64-encoded digests, to be named: only bcrypt is detected by prefix, so these return unknown.
• Pasting an HMAC or a truncated hash and trusting the match: a digest cut to 32 characters looks exactly like MD5, because only length and charset are checked.