MD5 Hash Generator

Type or paste text to get its MD5 hash as you type — the 32-character hex fingerprint used for checksums, cache keys and legacy systems — with SHA-256 alongside for anything security-related.

Runs in your browserUpdated
Hash a file — choose or drop it here.
Processed locally, never uploaded (up to 512 MB).
Output
AlgorithmHash

Your data never leaves your computer. All processing happens 100% locally in your browser.

How to use the MD5 Hash Generator

  1. Type or paste your text — the MD5 hash updates as you type.
  2. Choose hex or Base64 output and uppercase if needed.
  3. Copy the hash, or paste another hash in the compare box to check that they match.

What is an MD5 hash?

MD5 turns any input into a fixed 128-bit value, written as 32 hexadecimal characters. The same input always gives the same hash, and changing a single character changes it completely: “hello world” hashes to 5eb63bbbe01eeed093cb22bb8f5acdc3. That makes MD5 handy for checksums, de-duplication, cache keys and ETags.

Don’t use MD5 for passwords or security

MD5 is broken for security: collisions — two different inputs with the same hash — can be produced in seconds, and common passwords can be looked up in precomputed tables. Use SHA-256 for integrity checks against tampering, and a slow password hash such as bcrypt or Argon2 for passwords. The SHA-256 result is shown right below MD5 for that reason.

MD5 of files

To check a downloaded file against a published MD5 checksum, use your system tools: certutil -hashfile file.zip MD5 on Windows, md5 file.zip on macOS or md5sum file.zip on Linux. Hashing text here is the same algorithm applied to the text’s UTF-8 bytes.

Tools that pair well with the MD5 Hash Generator

  • SHA-256 Hash Generator — Type or paste text to get its SHA-256 hash — the 64-character fingerprint used for integrity checks, signatures and APIs — with HMAC-SHA256 for signing webhooks and requests.
  • HMAC Generator — Compute keyed HMAC signatures for API requests and webhooks, and check whether a received signature is valid — using your browser’s Web Crypto API.
  • JWT Decoder — Paste a JSON Web Token to inspect its header and payload, check when it expires and verify its signature.
  • Htpasswd Generator — Generate user:hash lines for HTTP Basic Authentication in Apache, Nginx, Traefik and Caddy — with bcrypt by default and nothing sent to a server.

Frequently asked questions

Can an MD5 hash be decrypted?
No. A hash is one-way. “MD5 decrypters” only look up hashes of common words they have already computed — another reason not to use MD5 for passwords.
Is MD5 still safe to use?
For checksums and cache keys against accidental changes, yes. For passwords, signatures or anything an attacker could manipulate, no — use SHA-256 or bcrypt.
Why is my MD5 different from another tool’s?
Usually because of invisible differences: a trailing newline, spaces or a different text encoding. This tool hashes exactly what is in the box as UTF-8.
Can I install MD5 Hash Generator as a web app and use it offline?
Yes. MD5 Hash Generator is an installable web app (PWA) — installed from your browser, not downloaded from an app store. Click Install app at the top of this page in Chrome or Edge (Windows, macOS, Linux, ChromeOS) or on Android, use Share → Add to Home Screen on iPhone and iPad, or File → Add to Dock in Safari 17+ on a Mac. It then opens in its own window with its own icon, and because it runs entirely in your browser it keeps working offline. Firefox on desktop can’t install web apps. How installing works.

Related tools