Hunt
Skip to content

MD5 Hash Generator

Type text or choose a file to get its MD5 hash, the 32-character checksum still used by many download sites, storage APIs and legacy systems. Compare it with an expected value to check a file. Stronger SHA hashes are shown alongside. Everything is calculated in your browser.

Runs in your browser

Text

Text is hashed as UTF-8 bytes, exactly as typed: a trailing space or line break changes the hash.

Hashes

MD5not for security
SHA-1not for security
SHA-256
SHA-384
SHA-512

When MD5 is fine, and when it isn't

MD5 is broken as a security hash: since 2004 it has been easy to create two different inputs with the same MD5, and in 2012 that was used to forge a code-signing certificate. Never use it for passwords, signatures or anything an attacker could tamper with.

It's still fine for detecting accidental corruption: checking a download against a published MD5, comparing files, or deduplicating data you control. Some systems also require it, such as the Content-MD5 header and Amazon S3 ETags for simple uploads. For new checksums, prefer SHA-256.

How to use the MD5 Hash Generator

  1. Type or paste text, or switch to File and choose or drop a file.
  2. Read the MD5 hash (lowercase hex, as md5sum prints it).
  3. Paste an expected hash into Compare with to check it matches.

Examples

A short text

Input
hello world
Output
5eb63bbbe01eeed093cb22bb8f5acdc3

The same text with a line break

Input
hello world
Output
6f5902ac237024bdd0c176cb93063dc4

This is what echo "hello world" | md5sum gives; echo adds the line break.

Why MD5 isn't for passwords

Input
password
Output
5f4dcc3b5aa765d61d8327deb882cf99

Search the web for this hash and you'll find the password straight away: MD5s of common passwords are listed in public lookup tables.

Options

Hash
Text (hashed as UTF-8) or a file (hashed byte for byte).
Output
Lowercase hex, uppercase hex, or Base64 (as used by the Content-MD5 header).
Compare with
Paste a hash in hex or Base64 to see whether it matches.

Limitations

  • Files up to 500 MB, held in memory while they're hashed.
  • Text is hashed as UTF-8.

Frequently asked questions

Is my file uploaded?

No. The file is hashed in your browser and never leaves your device.

Can an MD5 hash be decrypted?

A hash can't be decrypted, but MD5s of short or common inputs can be looked up or guessed quickly. That's why an MD5 of a password offers almost no protection.

Why doesn't my MD5 match?

Usually a trailing line break or a different text encoding. For files, make sure the download completed: a single changed byte gives a completely different hash.