MD5 hash generator
Get the MD5 checksum of text or a file.
Runs in your browser. Your files never leave your device.
- Text or file input
- Compare with expected hash
- Nothing uploaded
How to generate an MD5 hash
- Paste text, or switch to file mode and drop a file.
- Read the MD5 hash, or paste an expected hash to compare.
- Copy the result.
MD5 at a glance
| Property | Value |
|---|---|
| Output length | 32 hex characters (128 bits) |
| Standard | RFC 1321 |
| Speed | Very fast, even on large files |
| Security status | Broken for security use since 2004 |
What MD5 is still fine for
- Checking that a large download did not get corrupted in transit.
- Quick deduplication of files by content, when nobody is trying to fake a match.
- Cache keys and checksums inside your own systems, where nobody untrusted controls the input.
What MD5 is not fine for
- Password storage. Use an algorithm built for that, such as bcrypt, scrypt or Argon2.
- Confirming a file came from a trusted source, since a matching MD5 hash can be forged.
- Digital signatures or anything else that assumes two different inputs cannot share a hash.
MD5 generator FAQ
What is MD5 used for today?
Mostly checking that a downloaded file was not corrupted. It is broken for security use such as passwords or signatures, since matching hashes can be created on purpose.
How long is an MD5 hash?
Always 32 hexadecimal characters (128 bits), no matter how big the input is.
Does changing one character change the hash completely?
Yes. A single different character produces a completely different hash, which is what makes it useful for spotting corruption.
Is my file uploaded to check the hash?
No. The hash is computed in your browser and your file never leaves your device.
Why do some downloads still publish an MD5 checksum?
Some older software and Linux distributions publish MD5 alongside SHA-256 for compatibility with older tooling. When both are given, trust the SHA-256 value over the MD5 one.
How is MD5 different from SHA-256 for checking a file?
MD5 always outputs 32 hex characters against SHA-256's 64, and both compute instantly here in your browser. The difference that matters is trust: MD5 offers no protection against someone deliberately crafting a second file with the same hash.
Can I verify a file against an MD5 published on a download page?
Yes, paste the published hash into Compare with expected hash. It checks instantly against the file's computed MD5, regardless of upper or lower case.
Does hashing the same content as text vs a file give the same result?
Only if the bytes match exactly. File mode hashes the raw file bytes, while text mode hashes whatever you typed, encoded as UTF-8. A text file with a different line ending or encoding will hash differently even if it looks identical on screen.