MD5 Hash Generator
Type text or choose a file to get its MD5 hash, a 32-character fingerprint. Paste a published checksum to check it matches.
Add this calculator to your website
Copy the code and paste it into your page's HTML. It's free; please keep the credit link.
What MD5 is
MD5 (RFC 1321, 1992) turns any input into a 128-bit value, written as 32 hexadecimal characters. Change a single character of the input and the hash changes completely. The hash of an empty input is d41d8cd98f00b204e9800998ecf8427e, a value you'll recognise in logs once you've seen it.
Web browsers don't include MD5 in their built-in crypto because it's no longer secure, so this page computes it with its own implementation, checked against the RFC 1321 test suite. SHA-1 and the SHA-2 family come from the browser's Web Crypto API.
Hash lengths
| Algorithm | Bits | Hex characters | Status |
|---|---|---|---|
| MD5 | 128 | 32 | Broken (checksums only) |
| SHA-1 | 160 | 40 | Broken (checksums only) |
| SHA-256 | 256 | 64 | Secure |
| SHA-384 | 384 | 96 | Secure |
| SHA-512 | 512 | 128 | Secure |
Frequently asked questions
Can an MD5 hash be decrypted?
No. A hash is one-way: there's no key that turns it back into the input. Sites that “decrypt” MD5 just look the hash up in huge tables of common words and passwords, which is why MD5 must never be used to store passwords.
Is MD5 still safe to use?
Not for security. Since 2004 researchers can create two different files with the same MD5 on purpose. It's still fine for spotting accidental corruption, cache keys and deduplication.
Why doesn't my MD5 match another tool's?
Usually the input differs by something invisible: a trailing newline, Windows line endings (\r\n) or a different text encoding. This tool hashes exactly what's in the box, encoded as UTF-8.
Is what I paste sent to a server?
No. This tool runs entirely in your browser with JavaScript and the built-in Web Crypto API. Nothing you type, paste or open is uploaded or stored.