Hash Speed Calculator
Estimate hashing throughput and brute-force crack time for a given hash algorithm.
About Hash Speed Calculator
Different cryptographic hash algorithms have dramatically different computational costs by design: fast general-purpose digests like MD5 and SHA-256/512 are optimized for speed (useful for checksums and data integrity) and can be computed at multiple gigabytes per second on modern GPU hardware, which is precisely why they are unsuitable for password storage — an attacker with the same hardware can attempt billions of guesses per second. Purpose-built password-hashing algorithms like bcrypt are deliberately slow (measured in mere tens of thousands of hashes per second even on capable hardware) and tunable via a work-factor/cost parameter, trading throughput for resistance against brute-force and GPU-accelerated cracking attempts.
Formula
Estimated processing time
time_seconds = data_bytes / (throughput_bytes_per_sec × device_count) [or count / (hashes_per_sec × device_count) for bcrypt]
- D
- data size (bytes) or hash count
- R
- per-device throughput
- n
- number of parallel devices
Worked example
With the default values below, Hash Speed Calculator returns Effective Aggregate Throughput of 3 GB/s (aggregate across 1 device). Change any input above and every figure here is recalculated in your browser.
Inputs used
- Hash Algorithmone of MD5 (~10 GB/s per modern GPU), SHA-256 (~3 GB/s per modern GPU), SHA-512 (~2 GB/s per modern GPU), bcrypt (~50K hashes/sec per modern GPU)
- SHA-256 (~3 GB/s per modern GPU)
- Data to Hash (MB) — ignored for bcryptminimum 0
- 1,024
- Number of Hashes (for bcrypt / password cracking estimate)minimum 1
- 1,000,000
- Number of GPUs/Devices in Parallelminimum 1
- 1
Results
- Effective Aggregate Throughput
- 3 GB/s (aggregate across 1 device)
- Estimated Time (seconds)
- 0.333333
- Estimated Time (milliseconds)
- 333.333
Step by step
- 1Values used
- 2Estimated processing time
- 3Effective Aggregate Throughput= 3 GB/s (aggregate across 1 device)
- 4Estimated Time (seconds)= 0.333333
- 5Estimated Time (milliseconds)= 333.333
Assumptions and limits
- The result is derived only from the 4 inputs listed above. Anything not among them is not part of the calculation.
- In particular, this calculator does not take inflation, tax, fees or charges or compounding frequency into account.
- Figures are rounded for display to 6 decimal places, so totals built from several rounded parts can differ slightly from the unrounded arithmetic.
How these calculators are built and tested is described on the Methodology page. If a figure looks wrong, please report it.
Frequently Asked Questions
Why is bcrypt so much slower than SHA-256 by design?
bcrypt deliberately incorporates a tunable cost factor and memory-access patterns designed to resist parallelization on GPUs and ASICs, unlike general-purpose hashes optimized purely for raw speed — this intentional slowness is the entire point for password storage, since it makes brute-force attacks proportionally more expensive even with powerful cracking hardware.
Should I ever use MD5 or SHA-256 for password hashing?
No — neither is designed for password storage. Use a purpose-built password hashing algorithm such as bcrypt, scrypt, or Argon2, all of which include deliberate computational or memory cost and, ideally, a per-password salt; MD5/SHA-256/512 remain appropriate for data integrity checksums, not credential storage.
How accurate are these GB/s and hashes/sec figures?
They're representative order-of-magnitude figures for capable modern GPU hardware and vary by specific device, driver, and implementation (e.g. actual hashcat/John the Ripper benchmarks differ by GPU model and algorithm mode) — use this calculator for rough capacity/risk estimation, and consult tool-specific benchmark output (`hashcat -b`) for hardware-accurate numbers.