Security Tools
MD5 Hash Generator
Generate MD5 hashes of text or files in your browser. Hex and Base64 output, lowercase or uppercase, no signup, no upload, RFC 1321 compliant.
The MD5 digest is computed in your browser. The text you type is never uploaded.
Source
0 characters
UTF-8 encoded for hashing
MD5 hash
Type or paste text above to see the MD5 digest update live.
MD5 is not for security
MD5 has been broken for collision resistance since 2004. Do not use it to hash passwords, sign messages, generate cryptographic tokens, or fingerprint untrusted content. It remains useful for non-adversarial checksums (file integrity from a trusted source, ETag-style cache keys, deduplication of your own data).
For modern security, use SHA-256 or HMAC-SHA-256 instead.
How to use
- Pick Hash text or Hash a file at the top of the tool.
- Type or paste text, or drop a file onto the upload area. The MD5 digest is computed in your browser.
- Read the 32-character hex MD5 and the Base64 form in the result panel.
- Toggle lowercase or UPPERCASE hex, then click Copy hex or Copy Base64 to grab the value.
- Compare the result against a published MD5 (md5sum, certutil, openssl, vendor release notes) to verify the file or string is unchanged.
About this tool
MD5 Hash Generator computes the 128-bit MD5 message digest of any text or file directly in your browser. Type or paste text and the hex and Base64 digest update live as you type, or drop a file (up to 50 MB) to get a checksum you can compare against a published hash. The implementation follows RFC 1321 byte for byte, so the output matches what you get from md5sum on Linux, the CertUtil hash command on Windows, the Get-FileHash MD5 cmdlet in PowerShell, the openssl dgst -md5 command, and the MD5 columns produced by tools like 7-Zip and HashCheck. Hashes are shown in lowercase or UPPERCASE hex and as Base64 (a 22-character padded form, useful for ETag-style cache keys, S3 Content-MD5 headers, and rsync style transfers). Useful for verifying that a download finished without corruption, sanity-checking a file you copied between drives, deduplicating photos or backup files, generating short stable IDs from canonical strings, comparing the MD5 a vendor publishes for a release artifact, and decoding the legacy MD5 columns still emitted by older databases, log pipelines, and CDN tools. MD5 has been broken for collision resistance since 2004, which means a determined attacker can craft two different inputs that hash to the same value. Do not use MD5 for password storage, signature verification, content authentication against an attacker, or any case where someone benefits from forging a match. For those use cases, use SHA-256 or HMAC-SHA-256 from the related tools below. Everything runs locally on your device, so the text and files you hash here never leave your browser tab.
Free to use. Works in your browser. No signup, no login.
Related tools
You may also like
SHA-256 Hash Generator
Hash text or files with SHA-1, SHA-256, SHA-384, and SHA-512.
Open tool
SecurityHMAC Generator
Generate and verify HMAC-SHA1, SHA-256, SHA-384, and SHA-512 signatures.
Open tool
DeveloperBase64 Encoder Decoder
Encode and decode Base64 with full Unicode.
Open tool
SecurityPassword Strength Checker
Live strength meter with entropy, crack times, and common-password detection.
Open tool