5f4dcc3b5aa765d61d8327deb882cf9932 characters·hex
MD5
medium confidenceRaw hashNTLM
medium confidenceNetwork / authMD4
low confidenceRaw hashLM
low confidenceNetwork / authLM is usually seen as two 16-character halves
Hash IdentifierFree
Free online hash identifier
Detect likely hash algorithms from their prefix, length and character set. Get matching hashcat modes and John the Ripper formats without uploading a single value.
Free · No signup
Runs locally in your browser
100+ hash formats
Hash identification workspace
Format analysis only · No crackingDuplicate and empty lines are removed automatically. Your input never leaves this page.
5
Analyzed
5
Identified
3
High confidence
0
Unknown
Likely formats
Candidates are ordered by confidence
2aae6c35c94fcfb415dbe95f408b9ce91ee846ed40 characters·hex
SHA-1
medium confidenceRaw hashMySQL 4.1+ (without leading *)
low confidenceDatabaseRIPEMD-160
low confidenceRaw hashHAS-160
low confidenceRaw hashHaval-160 / Tiger-160
low confidenceRaw hash$2b$12$KIXQhYwM1D.7cs3N6BqtXOqgiNdYYp2F0te0B0cnPA9NDlBiVQp5y60 characters·crypt·structured or salted
bcrypt
high confidenceUnix crypt$argon2id$v=19$m=65536,t=3,p=4$c29tZXNhbHQ$RdescudvJCsgt3ub+b+dWRWJTmaaJObG75 characters·crypt·structured or salted
Argon2
high confidenceUnix crypt*94BDCEBE19083CE2A1F959FD02F964C7AF4CFC2941 characters·mixed
MySQL 4.1+ (SHA-1 twice)
high confidenceDatabaseUse hash tooling only for credentials and systems you own or are explicitly authorized to audit. Identifying a format does not grant permission to recover the value behind it.
Six hash families, more than 100 formats
One paste is enough. Every line is matched against the prefixes, lengths and character sets used by the formats you meet in real credential exports.
Raw digests
MD4, MD5, SHA-1, the SHA-2 family, SHA-3, RIPEMD and other fixed-length hexadecimal or Base64 digests.
Modern password hashes
Bcrypt, scrypt and Argon2 values, including the variant, version, memory, iteration and parallelism settings they embed.
Unix crypt formats
Traditional DES crypt, MD5-crypt and SHA-256 or SHA-512 crypt entries as they appear in shadow files.
Application and CMS hashes
WordPress phpass, Django PBKDF2, Drupal, Joomla and similar framework formats with salts and iteration counts.
Database hashes
MySQL, MSSQL, Oracle and PostgreSQL authentication values, recognized by their typical prefixes and lengths.
Network and checksum values
LDAP, Kerberos and NetNTLM authentication captures next to CRC and other short checksum formats.
Private by design
A hash identifier that never sees your values
No account, no upload and no database lookup—only local format analysis in your own browser tab.
100%
Local processing
Every hash is analyzed by your browser. Nothing is uploaded to DorkPlus and no value is sent to an external service.
01
100+
Detected formats
Raw digests, password hashing schemes, Unix crypt, application, database and network authentication formats.
02
0
Limits and accounts
No login, no line cap and no queue. Paste a list, read the candidates and copy or export them instantly.
03How to identify a hash type
A hash identifier compares a value with the syntax used by known algorithms and applications. It narrows the possibilities from visible evidence—length, allowed characters, separators, prefixes, embedded cost parameters and salt structure.
01
Paste one hash per line
Analyze a single value or an entire list. Duplicate and empty lines are removed automatically and every remaining line is examined on its own.
5f4dcc3b5aa765d61d8327deb882cf9902
Let the rules…759 tokens truncated… no upload and no request to the domains you paste—only text processing in your own browser tab.
Each value is measured by length, character set, separators and known prefixes. Structured formats are recognized by their markers, including embedded cost parameters and salts.
$2b$12$KIXQhYwM1D.7cs3N6BqtXO…03
Compare the ranked candidates
Results are ordered by confidence. A high label means the format carries an unambiguous marker, while raw hexadecimal digests return several realistic candidates because MD5, NTLM and MD4 share the same visible shape.
04
Copy a format code or export the set
Copy the hashcat mode or John the Ripper format for a candidate, export one hash type as TXT, or download an organized ZIP. Verify the candidate against the application, database or export that produced the value before any authorized audit.
hashcat -m 0Handled automatically
Raw hexadecimal digests
Base64 encoded digests
Prefixed formats such as $2b$
Salted and structured hashes
Database and network exports
Duplicate and empty lines
hashcat mode suggestions
John the Ripper formats
Copy, TXT and ZIP export
Why it matters
Why one hash can match several algorithms
Raw hexadecimal hashes are the most ambiguous values you can be handed. A 32-character hexadecimal string is commonly MD5, but NTLM and MD4 have exactly the same visible shape. Without information about the source system, no identifier can separate those algorithms from the digest alone.
Structured password hashes provide stronger clues. Bcrypt starts with prefixes such as $2b$, while Argon2 embeds its variant, version, memory, iteration and parallelism settings. Unix crypt, WordPress phpass, Django PBKDF2, database formats and network captures also carry recognizable markers.
- Several realistic candidates instead of one invented answer
- Confidence labels, so ambiguity stays visible
- hashcat and John references for authorized recovery
Common use cases
Authorized password audits
Pick the right hashcat mode before an approved recovery run.
Incident response triage
Classify credential material found in an investigation export.
Application security review
Check which hashing scheme an application actually stores.
CTF and training labs
Recognize a challenge value without guessing the algorithm.
Hash identifier questions
Understand what format detection can and cannot tell you.
More free utilities
Need hash lookup at scale?
DorkPlus Dehasher searches a large hash database when identification alone is not enough for your authorized recovery workflow.
DorkPlus has been around for over three years. It started as a Google proxyless scraper and grew into an all-in-one pentesting solution, evolving week after week.
Modules
Utilities
System status
Copyright © 2026 DorkPlus