MD5 Hash Generator
Generate the MD5 hash of any text or file as you type, with SHA-1, SHA-256, and SHA-512 alongside it. Everything is calculated in your browser, so your text and files are never uploaded.
The file is read in your browser and never uploaded.
Why This Tool Matters
Most people reach for an MD5 hash to answer one question: is this the same data I expected? A project publishes an MD5 or SHA-256 next to a download, and you want to confirm the ISO you fetched wasn't truncated or corrupted. A migration copies thousands of files between servers, and comparing checksums shows which ones differ. A legacy API asks for the MD5 of a payload as a signature field, or a cache layer keys entries by the hash of their content. Pasting the value here gives you the answer in one step, without opening a terminal and remembering whether the command is md5sum, md5, or certutil.
Because the file option reads the file locally, you can hash private documents, backups, or unreleased builds without sending them anywhere. The extra SHA rows are there for when a checksum page lists a stronger algorithm, and the case toggle matches whatever format the other side expects. Keep in mind that MD5 only protects against accidents, not attackers; for anything security-sensitive use the SHA-256 row instead.
How to Use
- 01
Choose Text or File
Type or paste text, or switch to File and pick a file from your device.
- 02
Read the hashes
MD5 appears instantly, with SHA-1, SHA-256, and SHA-512 listed below it.
- 03
Copy the one you need
Pick lowercase or UPPERCASE hex, then copy any row with its own button.
More Text Tools
Frequently Asked Questions
Is MD5 secure?
No. MD5 is cryptographically broken: researchers can deliberately craft two different inputs with the same MD5 hash (a collision), and modern GPUs can test billions of MD5 guesses per second. Do not use it to store passwords or to sign anything. For passwords use a purpose-built algorithm such as bcrypt, scrypt, or Argon2.
Can an MD5 hash be "decrypted"?
No, because MD5 is a one-way hash, not encryption. There is no key and no reverse operation; many different inputs map to the same 128-bit output. "MD5 decrypt" sites simply look up hashes of common words in big precomputed tables, which is why short or common inputs get "cracked" and anything unique does not.
What is MD5 still good for?
Checksums. MD5 is fast and still reliably catches accidental corruption, so it is widely used to confirm a download or file copy arrived intact, to detect duplicate files, and as a cache key or ETag. It is not suitable when someone might tamper with the file on purpose, since a malicious party can craft a colliding file.
What is the difference between MD5 and SHA-256?
MD5 produces a 128-bit (32 hex character) hash and is broken against deliberate attacks. SHA-256 produces a 256-bit (64 character) hash and has no known practical collisions, so it is the safer default for integrity checks, signatures, and anything security-related. SHA-1 (160-bit) is also considered broken for collision resistance. SHA-256 is somewhat slower, but rarely enough to matter.
Is my text or file uploaded anywhere?
No. MD5 is computed by a small JavaScript library running in your browser, and SHA-1, SHA-256, and SHA-512 use your browser's built-in Web Crypto API. Files are read locally with FileReader and never leave your device, so it is safe to hash private documents. Very large files are limited by your browser's memory; this tool caps them at 500 MB.