~/tools $ ./hashid

Hash Identifier

Paste a hash to get its likely type and the matching Hashcat and John the Ripper modes.

Runs entirely in your browser. Nothing you paste is sent anywhere.

Length is a clue, not an answer

A 32 character hex string could be MD5, NTLM, or half a dozen rarer formats. Context decides: a hash pulled from a Windows lab is almost certainly NTLM, while one from a web app database is more likely MD5. Prefixed formats like$6$ or $2b$ identify themselves.

Before you crack

  • Run hashcat --identify hash.txt to cross-check against hashcat's own detection.
  • Slow hashes (bcrypt, sha512crypt, yescrypt) are built to resist cracking. Start with a short, targeted wordlist and rules, not a giant list.
  • Only crack hashes from systems you own or are authorized to test, and handle recovered passwords as sensitive data.