Free Online Hash Identifier & Algorithm Analyzer

An online hash identifier is a cryptographic diagnostic tool that analyzes unknown hash digest strings by length, character set, encoding format, and signature prefixes to identify potential candidate algorithms (such as MD5, SHA-256, NTLM, bcrypt, or Argon2).

Paste an unknown hash string into ScanSuite's hash identifier to instantly analyze its bit length, character set, and structural prefix, returning a ranked list of candidate algorithms with confidence scores and security recommendations.

Cryptographic hashes are widely used across threat intelligence, incident response, vulnerability management, and database auditing. However, when inspecting raw log files or unknown IOC lists, hash strings rarely state their underlying algorithm explicitly.

ScanSuite's hash identifier analyzes string characteristics — including character length, hexadecimal vs Base64 encoding, and prefix signatures (like `$2a for bcrypt or `$argon2id ) — to classify unknown hashes across 50+ algorithm standards in seconds. Results include security strength ratings so you can prioritize migration away from weak legacy algorithms.

ScanSuite's free online hash identifier analyzes unknown hash strings by length, encoding, and prefix signatures. Detect MD5, SHA-256, bcrypt, NTLM, and 50+ algorithm candidate formats instantly in your browser.

Frequently Asked Questions

What is a hash identifier?

A diagnostic tool that analyzes unknown hash strings by length, character set, and prefix to identify candidate algorithms.

Can a hash identifier reverse or crack my hash?

No. The identifier determines WHICH algorithm created the hash, not WHAT original plaintext was used.

Why do MD5 and NTLM look identical?

Both produce 128-bit digests formatted as 32 hexadecimal characters.

How do I identify a bcrypt password hash?

bcrypt hashes begin with `$2a , `$2b , or `$2y followed by a cost factor (e.g. `$2b$12 ).

How do I identify an Argon2 hash?

Argon2 hashes use structured PHC string format starting with `$argon2i , `$argon2d , or `$argon2id .

Are my hash strings sent to ScanSuite servers?

No. All analysis runs locally in client browser memory for complete privacy.