Join the Official Discord

Hash generator and cracker

Type text to hash it. Paste a hash to identify it and check it against common words.

Have a hash? Identify and crack it

Original text

What a hash is

A hash function turns any input, a word or a whole book, into a fixed-length fingerprint. The same input always gives the same hash. Change one letter and the hash changes completely. And there's no way to run it backwards: the original can't be calculated from the hash.

That makes hashes ideal for checking an answer without revealing it. A puzzle can publish the hash of its solution, and you'll know you're right when your guess, hashed the same way, matches exactly.

Which hash is it?

Written in hexadecimal, the common hashes are recognisable by length:

  • MD5: 32 characters. Old and broken for security, but still everywhere in puzzles.
  • SHA-1: 40 characters.
  • SHA-256: 64 characters. The modern default.
  • SHA-384 and SHA-512: 96 and 128 characters.

“Cracking” a hash

Since a hash can't be reversed, the only way back is to guess and check. The cracker hashes 20,000 common English words in lowercase, Capitalised and UPPERCASE, and compares each to yours. If the answer is an ordinary word, that finds it in seconds. If it isn't, try hashing your own guesses in the box at the top. Watch the details: Treasure, treasure and treasure with a trailing space all hash differently, and puzzle setters vary on capitals and spaces.

Everything runs in your browser. The SHA hashes use the browser's built-in cryptography, MD5 is computed by this page, and nothing you type is sent anywhere.

Questions

Can a hash be decrypted?

No. A hash is a one-way fingerprint, and the original can't be calculated back from it. What you can do is guess: hash likely candidates and see if one matches. That's what the cracker here does, with 20,000 common words in lowercase, Capitalised and UPPERCASE.

Why do puzzles use hashes?

To let you check an answer without giving it away. A puzzle can print the MD5 of the solution, and you know you're right when your guess hashes to the same thing.

Which hash is which?

Mostly by length in hex: MD5 is 32 characters, SHA-1 40, SHA-256 64, SHA-384 96 and SHA-512 128. The tool identifies them automatically.

Is my text sent anywhere?

No. Hashing and cracking both run in your browser, using the browser's built-in cryptography for the SHA family.

More cipher tools

See all cipher tools →