Security Analysis

Hash Identifier

Paste a hash and see which algorithms could have produced it. Hash identification is pattern matching, not proof -- but knowing whether you are looking at MD5, NTLM or bcrypt tells you immediately how a system stores credentials and how urgent an exposure is.

Identification is pure pattern matching in your browser. The hash you paste is never uploaded, logged or cracked.

Why identification matters

  • It tells you the exposure severity: leaked MD5 or NTLM password hashes are crackable at scale, bcrypt and Argon2 are not.
  • It guides the next investigative step -- which reputation service or which format a forensic tool expects.
  • Two algorithms can share a digest length, so treat every result as a candidate rather than a verdict.

Security note

This tool does not crack hashes and never will. If you find real password hashes during an engagement, handle them as sensitive credentials: keep them inside the authorised scope and do not paste them into third-party services.