MD5 Hash Generator
Generate MD5 hashes of text or files instantly. Verify legacy checksums, compute HMAC-MD5 and hash lists line by line — all calculated on your device, nothing uploaded.
| Other hashes of your input appear here. |
What Is MD5?
A fast 128-bit hash that is still everywhere — for checksums, not security.
MD5 (RFC 1321) converts any input into a 128-bit fingerprint, written as 32 hexadecimal characters. It is extremely fast and still widely used to detect accidental corruption: file checksums, cache keys and ETags, deduplication, database sharding, Gravatar URLs and S3 Content-MD5 headers.
Text is hashed as exact UTF-8 bytes, so the result matches md5sum, PHP md5(), Python hashlib.md5 and MySQL MD5().
MD5 is cryptographically broken. Collisions — two different inputs with the same hash — can be generated in seconds on a laptop, so MD5 must not be used for passwords, digital signatures, certificates or any integrity check that an attacker could tamper with.
Browsers don't offer MD5 in Web Crypto, so this tool uses its own compact implementation, verified against the official RFC 1321 test vectors.
Where MD5 Is Still OK (and Where It Isn't)
Know when a checksum is enough and when you need a secure hash.
OK: accidental corruption
Checking a download or copy wasn't damaged in transit, comparing files, deduplicating data and building cache keys.
OK: legacy compatibility
Matching an existing system's IDs, ETags, S3 Content-MD5 headers or Gravatar hashes.
Never: passwords
MD5 can be brute-forced at billions of guesses per second. Use Argon2, bcrypt or scrypt.
Never: signatures & tamper-proofing
Attackers can craft colliding files. Use SHA-256 or SHA-512 for anything security-sensitive.
How to Use the MD5 Hash Generator
Get your result in under ten seconds.
Type text or drop a file
Text is hashed as you type. Switch to File mode to get the MD5 checksum of any file.
Choose format and options
Pick hex, uppercase HEX or Base64 (for Content-MD5). Enable HMAC or Each line if needed.
Copy, download or verify
Copy the hash, download an md5sum-compatible file, or paste an expected checksum to compare.
Why Use the MD5 Hash Generator on Developers Web Tools
Fast, accurate and private — built for developers.
Private by design
Everything is computed on your device. Text and files are never uploaded.
Fast on big files
A tuned implementation hashes around 50–100 MB per second in a background worker, so the page stays responsive.
Verified correct
Checked against the RFC 1321 test suite and Python's hashlib, including edge cases at block boundaries.
Checksum verify
Paste the published MD5 and see an instant match or mismatch.
HMAC-MD5
Compute HMAC-MD5 for legacy APIs that still require it.
Upgrade path
SHA-1, SHA-256, SHA-384 and SHA-512 of the same input are shown alongside.
Frequently Asked Questions
No — MD5 is a one-way hash, not encryption. Websites that "decrypt" MD5 simply look the hash up in huge tables of pre-hashed common strings, which is why MD5 must never be used for passwords.
No. Practical collision attacks have existed since 2004 and were used to forge a real certificate authority certificate. It is still useful for detecting accidental corruption, but not against deliberate tampering.
Usually a hidden character: echo adds a newline (use echo -n), files may have CRLF line endings, or the text uses a different encoding. This tool hashes your text exactly as UTF-8. Browsers always use LF line endings in text boxes, so to hash a CRLF file byte-for-byte, use File mode.
Drop the file and choose Base64. S3 expects the Base64 encoding of the raw 16-byte digest, not the hex string — that's exactly what this output is.
d41d8cd98f00b204e9800998ecf8427e. If you see this value unexpectedly, the input you hashed was empty.
No. Files are read and hashed locally. Nothing is sent over the network or stored.