Regex and cron

Regex for UUIDs (Versions 1–8)

Validate UUIDs properly: layout, version digit and variant bits, case-insensitively.

  • Free foreverNo trial, no paywall, no usage limits.
  • No sign-upOpen the page and start. We never ask for an email to use a tool.
  • PrivateEverything runs in your browser. Your input is never uploaded or stored on our servers.
  • Works offlineOnce the page has loaded, the tool keeps working without a connection.

Pattern

/^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i
  • i ignore caseCase-insensitive: /abc/i also matches "ABC" and "aBc".

Regular expression

JavaScript syntax, run by your browser's own engine in a background worker. Press / anywhere to jump here.
Reset to the original pattern and examplesShow cheat sheet: click any token to insert itCopy pattern
Find every match instead of stopping at the first. Needed for matchAll() and for replacing all occurrences.Case-insensitive: /abc/i also matches "ABC" and "aBc".^ and $ match at the start and end of every line, not just the whole string. Use it to test one value per line.Lets . match line breaks too. Without it, . stops at \n and \r.Treats the pattern as Unicode code points: enables \p{…} property escapes and \u{…}, makes emoji count as one character, and rejects sloppy escapes.Only matches starting exactly at lastIndex (position 0 here), never further along. Useful for tokenizers that consume input piece by piece.Records the start and end index of every capture group (match.indices). The tester always shows group positions, so this only changes your code.The upgraded unicode mode (ES2024): set operations like [\p{L}--[a-z]] and [A&&B], string properties like \p{RGI_Emoji}. Cannot be combined with u.
4 matches4 matches

Test string

Matches are highlighted as you type, in alternating colors. Click inside a match (or hover its row below) to color its capture groups.
4 matchesClear test string

Explanation

Every part of the pattern in plain English. Hover a row to highlight that part of the pattern.
Copy explanation

Loading the explainer…

Every match with its position and capture groups.Preview a replacement with $1, $<name> and $& references, then copy the result.Copy a ready-to-run snippet for JavaScript, Python, Go, C#, PHP or Dart.

Matches

Named groups are shown by name. undefined means the group did not take part in that match.
Copy matches as JSONDownload matches.csv
#MatchPosition
1550e8400-e29b-41d4-a716-4466554400000–36
201890a5d-ac96-774b-bcce-b302099a805737–73
3123e4567-e89b-12d3-a456-42661417400074–110
4F47AC10B-58CC-4372-A567-0E02B2C3D479111–147

Need a secure web app built around this? Talk to our team

Quick answer

A UUID regex is ^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$ with the i flag. It checks the 8-4-4-4-12 layout of 32 hex digits, that the version digit (first of the third group) is 1 to 8, and that the variant digit (first of the fourth group) is 8, 9, a or b as RFC 9562 requires. Use [4] or [7] in place of [1-8] to accept one version only.

  • Tested examples
  • Token-by-token breakdown
  • Code in 5 languages
  • Live tester

How to use the UUID regex

  1. 1Copy the pattern with Copy pattern in the tester, or take a ready-made snippet for your language from the code section below.
  2. 2Check the sample lines in Test string: every line the UUID regex accepts is highlighted, rejected lines stay plain.
  3. 3Paste your own values one per line to see which pass, and read Explanation for what each part of the pattern does.
  4. 4Open the Code tab for JavaScript, Python, Go, C#, PHP or Dart with the pattern translated and escaped.
  5. 5Validate again on the server: client-side checks give users quick feedback, not security.

How does the UUID regex work?

Read it left to right. Each piece below matches one part of the input:

  • ^[0-9a-f]{8} 8 hex digits. With the i flag, A–F are accepted too.
  • -[0-9a-f]{4} A hyphen and 4 hex digits.
  • -[1-8][0-9a-f]{3} The version digit (1–8) and 3 more hex digits. Version 4 is random, version 7 is time-ordered.
  • -[89ab][0-9a-f]{3} The variant: the first digit is 8, 9, a or b, the RFC 9562 layout.
  • -[0-9a-f]{12}$ 12 hex digits and the end of the string.

Flags: i (ignore case).

Which strings does the UUID regex match?

The whole input must match, from the first character to the last. Every row below is checked against the pattern by our automated test suite before each release.

InputMatches?Why
550e8400-e29b-41d4-a716-446655440000YesVersion 4 (random).
01890a5d-ac96-774b-bcce-b302099a8057YesVersion 7 (time-ordered).
123e4567-e89b-12d3-a456-426614174000YesVersion 1 (time and node).
F47AC10B-58CC-4372-A567-0E02B2C3D479YesUppercase hex, thanks to the i flag.
550e8400e29b41d4a716446655440000NoNo hyphens (see the variant below).
550e8400-e29b-41d4-a716-44665544000NoThe last group has only 11 digits.
550e8400-e29b-41d4-c716-446655440000NoVariant c is the legacy Microsoft layout, not RFC 9562.
550e8400-e29b-91d4-a716-446655440000NoThere is no version 9.
00000000-0000-0000-0000-000000000000NoThe nil UUID has version 0. Check for it separately if you allow it.
{550e8400-e29b-41d4-a716-446655440000}NoBraces, as Windows registry tools print them.

How do I match only UUID v4 or v7?

Replace the version class:

AcceptThird group starts with
Version 4 only4
Version 7 only7
Versions 4 and 7[47]
Any of 1–8 (this page)[1-8]

Version 7 (RFC 9562, 2024) puts a millisecond timestamp in the first 48 bits, so v7 IDs sort by creation time and index well in databases. Version 4 is 122 random bits. To generate either, use the UUID generator; for an even more compact time-sortable ID, see ULID.

What about the nil UUID, max UUID and other spellings?

RFC 9562 defines two special values that this pattern rejects because their version digit is not 1–8: the nil UUID 00000000-0000-0000-0000-000000000000 and the max UUID ffffffff-ffff-ffff-ffff-ffffffffffff. Allow them explicitly if they are meaningful in your system.

Other spellings you may meet:

  • No hyphens (550e8400e29b41d4a716446655440000): ^[0-9a-f]{12}[1-8][0-9a-f]{3}[89ab][0-9a-f]{15}$.
  • Braces or a urn:uuid: prefix: strip them before validating.
  • Uppercase: valid input, but RFC 9562 says to output lowercase, so normalize before storing to keep comparisons exact.

How do I use the UUID regex in JavaScript, Python, Go, C# and PHP?

The pattern is translated for each engine rather than pasted as is: named groups, anchors, escapes, shorthand classes and flags are adjusted so each snippet behaves as closely to the JavaScript version as its engine allows. Differences that remain (Go's RE2 has no lookarounds or backreferences, for example) are called out under each one. The Code tab in the tester above also exports Dart, and updates as you edit the pattern.

JavaScript and TypeScript

const regex = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;

function isValid(value) {
  return regex.test(value);
}

console.log(isValid("550e8400-e29b-41d4-a716-446655440000"));

Python

import re

pattern = re.compile(r"^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}\Z", re.IGNORECASE)

def is_valid(value: str) -> bool:
    return pattern.search(value) is not None

print(is_valid("550e8400-e29b-41d4-a716-446655440000"))
  • JavaScript's $ only matches at the very end of the string. Python's $ also matches before a trailing newline, so the pattern uses \Z instead.

Go

package main

import (
	"fmt"
	"regexp"
)

func main() {
	re := regexp.MustCompile(`(?i)^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$`)
	fmt.Println(re.MatchString("550e8400-e29b-41d4-a716-446655440000"))
}

C#

using System;
using System.Text.RegularExpressions;

// The timeout stops a pathological input from hanging the thread (ReDoS).
var regex = new Regex(@"^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}\z", RegexOptions.IgnoreCase, TimeSpan.FromSeconds(1));
Console.WriteLine(regex.IsMatch("550e8400-e29b-41d4-a716-446655440000"));
  • JavaScript's $ only matches at the very end of the string. .NET's $ also matches before a trailing newline, so the pattern uses \z instead.

PHP

<?php

$pattern = '/^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/iD';

function isValid(string $value, string $pattern): bool
{
    return preg_match($pattern, $value) === 1;
}

var_dump(isValid('550e8400-e29b-41d4-a716-446655440000', $pattern));
  • The D modifier makes $ match only at the very end, like JavaScript (PCRE's $ also matches before a trailing newline).

Browse all 25 patterns in the regex pattern library, or build your own in the regex tester.

Frequently asked questions

Look at the first character of the third group. In 550e8400-e29b-41d4-a716-446655440000 it is 4, so the UUID is version 4. The first character of the fourth group shows the variant.
UUIDs are case-insensitive when read, so use the i flag. The standard asks for lowercase when you write them, which keeps database comparisons simple.
No. The regex checks the format only. Uniqueness comes from how the UUID was generated, and from a unique index if you store them in a database.

Last updated by the Playxoft engineering team.

From the engineers who built this tool

Building something bigger than a quick fix?

Auth, payments, dashboards and security are where web apps get hard. We have shipped them many times. Share your idea and we will map out a realistic plan and estimate, free and with no obligation.

More free tools

See all tools

Regex Tester

Test regex live with highlighted matches, plain-English explanations and code export.

Open tool

Cron Expression Generator

New

Build and explain cron schedules, see the next runs in any time zone, copy platform snippets.

Open tool

SQL Formatter

Beautify or minify SQL in 12 dialects, with keyword case, indent and line:column errors.

Open tool

cURL to Python Converter

New

Convert cURL commands into Python requests or httpx code with params, json, files and auth.

Open tool

cURL to Fetch Converter

New

Turn any cURL command into JavaScript fetch() code with headers, JSON, forms and auth.

Open tool

cURL to Axios Converter

New

Convert cURL commands into an Axios request config with params, data, auth and timeouts.

Open tool