Hash Type Reference

Every hash format we recognise — 375 of them — with the exact Hashcat mode and John the Ripper format you need to crack it. Not sure which one you have? Run it through the Hash Identifier first.

Hash typeHashcat -mJohn --format
1Password(Agile Keychain)6600
1Password(Cloud Keychain)8200
7-zip116007z
Adler-32
AIX(smd5)6300aix-smd5
AIX(ssha1)6700aix-ssha1
AIX(ssha256)6400aix-ssha256
AIX(ssha512)6500aix-ssha512
Android Backup18900androidbackup
Android FDE ≤ 4.38800fde
Android PIN5800
Apache MD51600
Argon2dargon2
Argon2iargon2
Argon2id
bcrypt3200bcrypt
bcrypt(SHA-256)
BigCryptbcrypt
Bitcoin / Litecoin11300bitcoin
BitLocker22100bitlocker
Blake2600raw-blake2
BLAKE2-224
BLAKE2-256
BLAKE2-384
Blake2b-256
BLAKE2b-512600
Blowfish(OpenBSD)3200bcrypt
BSDi Crypt12400bsdicrypt
Cisco Type 4cisco4
Cisco Type 7
Cisco Type 89200cisco8
Cisco Type 99300cisco9
Cisco VPN Client(PCF-File)
Cisco-ASA(MD5)2410asa-md5
Cisco-IOS(MD5)500md5crypt
Cisco-IOS(SHA-256)5700
Cisco-PIX(MD5)2400pix-md5
Citrix Netscaler8100citrix_ns10
Clavister Secure Gateway
CRAM-MD510200
CRC-16
CRC-16-CCITT
CRC-24
CRC-3211500crc32
CRC-32B
CRC-64
CRC-96(ZIP)
Crypt16
CryptoCurrency(Adress)
CryptoCurrency(PrivateKey)
Dahuadahua
DES(Unix)1500descrypt
DEScrypt1500descrypt
Django(bcrypt)
Django(bcrypt-SHA256)
Django(DES Crypt Wrapper)
Django(MD5)
Django(PBKDF2-HMAC-SHA1)
Django(PBKDF2-HMAC-SHA256)10000django
Django(SHA-1)124
Django(SHA-256)
Django(SHA-384)
DNSSEC(NSEC3)8300
Domain Cached Credentials1100mscash
Domain Cached Credentials 22100mscash2
Double MD52600
Double SHA-14500
Drupal > v7.x7900drupal7
Eggdrop IRC Botbfegg
Electrum Wallet (Salt-Type 1-3)16600electrum
Electrum Wallet (Salt-Type 4)21700electrum
Electrum Wallet (Salt-Type 5)21800electrum
ELF-32
EPi123
EPiServer 6.x < v4141episerver
Ethereum Pre-Sale Wallet, PBKDF2-HMAC-SHA25616300ethereum-presale-opencl
Ethereum Wallet, PBKDF2-HMAC-SHA25615600ethereum-opencl
Fairly Secure Hashed Password
FCS-16
FCS-32
Fletcher-32
FNV-132
FNV-164
Fortigate(FortiOS)7000fortigate
FreeBSD MD5500md5crypt
GHash-32-3
GHash-32-5
GOST CryptoPro S-Box
GOST R 34.11-946900gost
GRUB 27200
Half MD55100
HAS-160
Haval-128haval-128-4
Haval-160
Haval-160 (3 rounds)6000dynamic_190
Haval-160 (4 rounds)6000dynamic_200
Haval-160 (5 rounds)6000dynamic_210
Haval-192
Haval-192 (3 rounds)6000dynamic_220
Haval-192 (4 rounds)6000dynamic_230
Haval-192 (5 rounds)6000dynamic_240
Haval-224
Haval-224 (4 rounds)6000dynamic_260
Haval-224 (5 rounds)6000dynamic_270
Haval-256 (3 rounds)dynamic_140
Haval-256 (4 rounds)dynamic_290
Haval-256 (5 rounds)dynamic_300
HMAC-MD5 (key = $pass)50hmac-md5
HMAC-MD5 (key = $salt)60hmac-md5
HMAC-SHA1 (key = $pass)150hmac-sha1
HMAC-SHA1 (key = $salt)160hmac-sha1
HMAC-SHA256 (key = $pass)1450hmac-sha256
HMAC-SHA256 (key = $salt)1460hmac-sha256
HMAC-SHA512 (key = $pass)1750hmac-sha512
HMAC-SHA512 (key = $salt)1760hmac-sha512
hMailServer1421hmailserver
IKE-PSK MD55300
IKE-PSK SHA15400
IP.Board ≥ v2+2811
IPMI2 RAKP HMAC-SHA17300
iSCSI CHAP Authentication4800chap
iTunes backup >= 10.014800itunes-backup
Joaat
Joomla ≥ v2.5.18400phpass
Juniper Netscreen/SSG(ScreenOS)22md5ns
JWT (JSON Web Token)16500
Keccak-22417700
Keccak-25617800
Keccak-38417900
Keccak-5121800
Keepass 1 AES / without keyfile13400
Keepass 1 Twofish / with keyfile13400
Keepass 2 AES / with keyfile13400
Keepass 2 AES / without keyfile13400
Kerberos 5 AS-REP etype 2318200krb5pa-sha1
Kerberos 5 AS-REQ Pre-Auth7500krb5pa-md5
Kerberos 5 TGS-REP etype 17 (AES128-CTS-HMAC-SHA1-96)19600
Kerberos 5 TGS-REP etype 18 (AES256-CTS-HMAC-SHA1-96)19700
Kerberos 5 TGS-REP etype 2313100krb5tgs
Kerberos 5, etype 17, Pre-Auth19800
Kerberos 5, etype 17, Pre-Auth (with salt)krb5pa-sha1
Kerberos 5, etype 18, Pre-Auth19900
Kerberos 5, etype 18, Pre-Auth (with salt)krb5pa-sha1
Lastpass6800
LDAP(SSHA-512)1711ssha512
Lineage II C4
LinkedIn190raw-sha1-linkedin
LM3000lm
Lotus Notes/Domino 58600lotus5
Lotus Notes/Domino 68700dominosec
Lotus Notes/Domino 89100
MangosWeb Enhanced CMS
MD2md2
MD4900raw-md4
md4($pass.$salt)dynamic_32
md4($salt.$pass)dynamic_31
md4(utf16($pass))dynamic_33
MD50raw-md5
MD5 Crypt500md5crypt
md5($pass.$salt)10
md5($pass.md5($salt))3720
md5($salt.$pass)20
md5($salt.$pass.$salt)3800
md5($salt.md5($pass))3710
md5($salt.md5($pass.$salt))4110
md5($salt.md5($salt.$pass))4010
md5($salt.pad16($pass))dynamic_39
md5($salt.unicode($pass))40
md5($username.0.$pass)4210
MD5(APR)1600
MD5(Chap)4800chap
md5(md4($pass))dynamic_34
md5(md5($pass).md5($salt))3910
md5(md5($salt).$pass)3610
md5(md5(md5($pass)))3500
md5(sha1($pass))4400
md5(unicode($pass).$salt)30
md5(uppercase(md5($pass)))4300
md5(utf16($pass))dynamic_29
md5apr11600
MediaWiki3711mediawiki
Microsoft MSTSC(RDP-File)
Microsoft Office 20079400office
Microsoft Office 20109500office
Microsoft Office 20139600office
Microsoft Office 2016 - SheetProtection25300
Microsoft Office ≤ 2003 (MD5+RC4)9700oldoffice
Microsoft Office ≤ 2003 (MD5+RC4) collider-mode #19710oldoffice
Microsoft Office ≤ 2003 (SHA1+RC4)9800oldoffice
Microsoft Office ≤ 2003 (SHA1+RC4) collider-mode #19810oldoffice
Microsoft Outlook PST
Minecraft(AuthMe Reloaded)20711
Minecraft(xAuth)
Moneromonero
MS Office 2016 - SheetProtection25300
MS Office ⇐ 2003 $0/$1, MD5 + RC4, collider #29720oldoffice
MS Office ⇐ 2003 $3, SHA1 + RC4, collider #29820oldoffice
MSSQL(2000)131mssql
MSSQL(2005)132mssql05
MSSQL(2008)132mssql05
MSSQL(2012)1731mssql12
MSSQL(2014)1731mssql12
MyBB ≥ v1.2+2811
MySQL Challenge-Response Authentication (SHA1)11200
MySQL323200mysql
MySQL4.1300mysql-sha1
MySQL5.x300mysql-sha1
net-md5dynamic_39
NetNTLMv1-VANILLA / NetNTLMv1+ESS5500netntlm
NetNTLMv25600netntlmv2
Netscape LDAP SHA101nsldap
Netscape LDAP SSHA111nsldaps
nsldaps111nsldaps
NTHash(FreeBSD Variant)
NTLM1000nt
Open Document Format (ODF) 1.2 (SHA-256, AES)18400
Oracle 11g/12c112oracle11
Oracle H: Type (Oracle 7+), DES(Oracle)3100
osCommerce21
OSX v10.4122xsha
OSX v10.5122xsha
OSX v10.6122xsha
OSX v10.71722xsha512
OSX v10.87100pbkdf2-hmac-sha512
OSX v10.97100pbkdf2-hmac-sha512
Palshop CMS
PANAMAdynamic_320
PBKDF2(Atlassian)
PBKDF2(Cryptacular)
PBKDF2(Dwayne Litzenberger)
PBKDF2-HMAC-SHA256(PHP)10900
PBKDF2-SHA1(Generic)20400
PBKDF2-SHA256(Generic)20300pbkdf2-hmac-sha256
PBKDF2-SHA512(Generic)20200
PDF 1.1 - 1.3 (Acrobat 2 - 4)10400pdf
PDF 1.1 - 1.3 (Acrobat 2 - 4), collider #110410pdf
PDF 1.1 - 1.3 (Acrobat 2 - 4), collider #210420
PDF 1.4 - 1.6 (Acrobat 5 - 8)10500pdf
PDF 1.7 Level 3 (Acrobat 9)10600pdf
PDF 1.7 Level 8 (Acrobat 10 - 11)10700pdf
PeopleSoft133
PHPass' Portable Hash400phpass
phpBB v3.x400phpass
PHPS2612phps
PKZIP (Compressed Multi-File)17220pkzip
PKZIP (Compressed)17200pkzip
PKZIP (Mixed Multi-File Checksum-Only)17230pkzip
PKZIP (Mixed Multi-File)17225pkzip
PKZIP (Uncompressed)17210pkzip
PKZIP Master Key20500
PKZIP Master Key (6 byte optimization)20510
PostgreSQL Challenge-Response Authentication (MD5)11100postgres
PostgreSQL MD5
PrestaShop11000
RACF8500racf
RAdmin v2.x9900radmin
RAR3-hp12500rar
RAR3-p (Compressed)23800rar
RAR3-p (Uncompressed)23700rar
RAR513000rar5
Redmine Project Management Web App4521
RIPEMD-128ripemd-128
RIPEMD-1606000ripemd-160
RIPEMD-256dynamic_140
RIPEMD-320dynamic_150
RSA/DSA/EC/OpenSSH Private Keys ($4$)22941
Salsa10
Salsa20
SAM(LM_Hash:NT_Hash)
SAP CODVN B (BCODE)7700sapb
SAP CODVN F/G (PASSCODE)7800sapg
SAP CODVN H (PWDSALTEDHASH) iSSHA-110300saph
SCRAM Hash
scrypt8900
SecureZIP AES-12823001securezip
SecureZIP AES-19223002securezip
SecureZIP AES-25623003securezip
SHA-1100raw-sha1
SHA-1 Crypt15100sha1crypt
SHA-1(Base64)101nsldap
SHA-1(Oracle)
SHA-2241300raw-sha224
SHA-2561400raw-sha256
SHA-256 Crypt7400sha256crypt
SHA-38410800raw-sha384
SHA-5121700raw-sha512
SHA-512 Crypt1800sha512crypt
sha1($pass.$salt)110
sha1($salt.$pass)120
sha1($salt.$pass.$salt)4710
sha1($salt.unicode($pass))140
sha1(md5($pass))4700
sha1(sha1(sha1($pass)))4600
sha1(unicode($pass).$salt)130
sha224($pass.$salt))dynamic_52
sha224($salt.$pass)dynamic_51
sha224($salt.sha224($pass))dynamic_56
sha224(sha224($pass))dynamic_53
sha224(sha224($pass).$salt)dynamic_55
sha224(sha224($pass).sha224($pass))dynamic_58
sha224(sha224($salt).sha224($pass))dynamic_57
sha224(sha224_raw($pass))dynamic_54
sha256($pass.$salt)1410dynamic_62
sha256($salt.$pass)1420dynamic_61
sha256($salt.sha256($pass))1420dynamic_66
sha256($salt.unicode($pass))1440
sha256(sha256($pass))1420dynamic_63
sha256(sha256($pass).$salt)1420dynamic_65
sha256(sha256($pass).sha256($pass))1420dynamic_68
sha256(sha256($salt).sha256($pass))1420dynamic_67
sha256(sha256_raw($pass)))1420dynamic_64
sha256(unicode($pass).$salt)1430
SHA3-22417300
SHA3-25617400dynamic_380
SHA3-384dynamic_390
SHA3-51217600raw-sha3
sha384($pass.$salt)dynamic_72
sha384($salt.$pass)dynamic_71
sha384($salt.sha384($pass))dynamic_76
sha384(sha384($pass))dynamic_73
sha384(sha384($pass).$salt)dynamic_75
sha384(sha384($pass).sha384($pass))dynamic_78
sha384(sha384($salt).sha384($pass))dynamic_77
sha384(sha384_raw($pass))dynamic_74
sha512($pass.$salt)1710
sha512($salt.$pass)1720
sha512($salt.unicode($pass))1740
sha512(unicode($pass).$salt)1730
Siemens-S7siemens-s7
SipHash10100
Skein-1024
Skein-1024(384)
Skein-1024(512)
Skein-224dynamic_330
Skein-256skein-256
Skein-256(128)
Skein-256(160)
Skein-256(224)
Skein-384dynamic_350
Skein-512skein-512
Skein-512(128)
Skein-512(160)
Skein-512(224)
Skein-512(256)
Skein-512(384)
Skype23
SMF ≥ v1.1121
Snefru-128snefru-128
Snefru-256snefru-256
SSHA-1(Base64)111nsldaps
SSHA-512(Base64)1711ssha512
Sun MD5 Crypt3300sunmd5
Sybase ASE8000sybasease
Telegram Desktop 1.3.9telegram
Telegram Desktop >= 2.1.14-beta / 2.2.0telegram
Telegram Mobile App Passcode (SHA256)22301Telegram
Tiger-128
Tiger-160
Tiger-192tiger
Traditional DES1500descrypt
vBulletin < v3.8.52611
Ventrilo
VNCvnc
WebEdition CMS3721
Whirlpool6100whirlpool
WinZip13600zip
Woltlab Burning Board 3.x8400wbb3
Woltlab Burning Board 4.x
Wordpress v2.6.0/2.6.1400phpass
Wordpress ≥ v2.6.2400phpass
WPA-PBKDF2-PMKID+EAPOL22000
XOR-32
xt:Commerce21
yescryptNot yet supported, see notes in summary.On systems that use libxcrypt, you may use --format=crypt to use JtR in passthrough mode which uses the system's crypt function.
ZipMonster

How to use this table

Identifying and cracking a hash is a two-step job. First you work out which algorithm produced it — a 32-character hex string could be MD5, NTLM, MD4 or LM — and then you tell your cracking tool which module to use. This page is the second step: a single lookup from an algorithm name to the exact Hashcat mode (-m) and John the Ripper (--format) it maps to.

For the first step, paste the unknown hash into the Hash Identifier. It matches the string against the same regex signatures used to build this reference and tells you the most likely algorithms, each linked back to its row here.

Frequently Asked Questions

How do I find the Hashcat mode for a hash?

Look the algorithm up in the table above and read the Hashcat -m column, then run hashcat -m <mode> hash.txt wordlist.txt. If you don't know which algorithm you have, paste the hash into the Hash Identifier first.

What does a dash (—) in a column mean?

A dash means that tool has no native module for that algorithm. Many checksums (CRC, Adler-32) are integrity checks, not password hashes, so neither Hashcat nor John the Ripper cracks them.

Is a Hashcat mode the same as a John the Ripper format?

No. Hashcat selects an algorithm with a numeric -m mode; John the Ripper uses a named --format. Both columns are listed for every algorithm so you can switch tools without re-identifying the hash.