SHA-1 hash for « superuser »

What is a SHA-1 hash?

SHA-1 (Secure Hash Algorithm, 1st version) is an algorithm which converts a given sequence of characters into another unique sequence of characters, with a fixed length, called "hash". For instance, the SHA-1 hash of the word password is 5baa61e4c9b93f3f0682250b6cf8331b7ee68fd8.

These hashes are mostly used to validate file integrity, to encrypt sensitive data (like passwords), and to generate unique identifiers.

Is it secure?

SHA-1 hashes are theoretically impossible to reverse directly, ie, it is not possible to retrieve the original string from a given hash using only mathematical operations.

Most web sites and applications store their user passwords into databases with SHA-1 encryption. This method appears to be safe as it seems impossible to retrieve original user passwords if, say, a hacker manages to have a look at the database content.

Unfortunately, there is a way to decrypt a SHA-1 hash, using a dictionary populated with strings and their SHA-1 counterpart. As most users use very simple passwords (like "123456", "password", "abc123", etc), SHA-1 dictionaries make them very easy to retrieve.

This website uses a SHA-1 reverse dictionary containing several millions of entries, which you can use with SHA-1 hashes from your application.

If some of the hashes you enter can be reversed, consider using another way of generating hashes, like using stronger algorithms (SHA-2, Whirlpool, etc), combining algorithms, and using a "salt".