Hash Identifier: Detect bcrypt, Argon2, MD5, SHA and HMAC Formats
Identify which algorithm produced a hash from its prefix, length and character set, and learn whether that algorithm is still safe to use. It explains formats only — it never attempts to crack anything.
Quick answer
Hash Identifier (bcrypt, Argon2, SHA) is a free online tool that identify which algorithm produced a hash from its prefix, length and character set, and learn whether that algorithm is still safe to use. It explains formats only — it never attempts to crack anything.
- Cost: free, no signup or limits.
- Privacy: runs 100% in your browser; text is never uploaded.
- Works on: desktop and mobile browsers, offline once loaded.
- Category: Writer & Dev.
Likely algorithms
- bcrypthigh
Blowfish-based password hash. The number after the second $ is the cost factor (work factor).
Algorithm reference
| Algorithm | Type | Output | Verdict |
|---|---|---|---|
| MD5 | Fast digest | 128-bit / 32 hex | Broken — checksums only |
| SHA-1 | Fast digest | 160-bit / 40 hex | Deprecated |
| SHA-256 | Fast digest | 256-bit / 64 hex | Recommended for integrity |
| SHA-512 | Fast digest | 512-bit / 128 hex | Recommended for integrity |
| HMAC-SHA256 | Keyed MAC | 256-bit / 64 hex | Recommended for message authentication |
| PBKDF2 | Password KDF | Configurable | Acceptable with high iteration count |
| bcrypt | Password hash | 60-char $2b$ string | Good |
| scrypt | Password hash | Configurable | Good |
| Argon2id | Password hash | $argon2id$ string | Best current default |
How to Use
- 1.Paste the hash string you want to identify.
- 2.Read the ranked list of likely algorithms and their confidence.
- 3.Check the reference table to see whether the algorithm is still recommended.
FAQ
Can this crack or reverse a hash?
No, and it never will. Secure hashes are one-way by design; this tool only explains formats.
Why do several algorithms match?
Different algorithms can produce identical output lengths — SHA-256, SHA3-256 and BLAKE2s are all 64 hex characters.
Which password hash should I use?
Argon2id is the current recommendation, with bcrypt and scrypt as solid alternatives. Never store passwords with plain MD5 or SHA.