Skip to content
Hash Identifier

$ hash --identify

Identify any hash, then crack it.

Paste a hash below. We detect its type in your browser and hand you ready-to-run hashcat and John the Ripper commands.

Analyzed entirely in your browser with WebAssembly — your hash is never uploaded.
Try an example:

Hash type reference · 159

Blog

Read the blog
Argon2 vs bcrypt vs scrypt: picking a password KDF in 2026
Memory hardness is the real defense against GPUs and ASICs. How argon2id, bcrypt, scrypt and PBKDF2 compare, how to tune them, and which one to actually pick.
argon2bcryptscryptpbkdf2
AS-REP Roasting: cracking accounts that skipped Kerberos preauth
How AS-REP roasting lets an unauthenticated attacker pull a crackable krb5asrep hash from accounts with preauth disabled, and how defenders catch it.
as-rep roastingactive directorykerberoshashcat
Brute-forcing JWT HS256 secrets with hashcat
An HS256 token carries everything an attacker needs to verify a guessed secret offline. How weak HMAC keys fall to hashcat -m 16500, and how to forge tokens after.
jwthashcathmacauthentication