How MD5 works — and what it's still good for
MD5 (Message-Digest Algorithm 5, published as RFC 1321 in 1992) takes input of any length and condenses it into a fixed 128-bit digest, conventionally written as 32 hexadecimal characters. The same input always produces the same hash, and flipping a single bit of the input scrambles the entire output — the “avalanche effect”. That makes MD5 a fast, compact fingerprint: instead of comparing two files byte by byte, you compare two 32-character strings.
Text and files are hashed slightly differently. Text is first encoded to bytes — this tool uses UTF-8, the standard on the web — so encoding details matter: hello and hello (with a trailing space or newline) hash differently, and a file saved with Windows CRLF line endings hashes differently from the same text with Unix LF endings. Files are hashed from their raw bytes, so the result is independent of the filename, date or location — renaming a file never changes its MD5.
Example MD5 hashes
| Input (UTF-8 text) | MD5 hash |
|---|---|
| (empty string) | d41d8cd98f00b204e9800998ecf8427e |
abc | 900150983cd24fb0d6963f7d28e17f72 |
The quick brown fox jumps over the lazy dog | 9e107d9d372bb6826bd81d3542a419d6 |
When to use SHA-256 instead
Reach for MD5 only when nobody is trying to fool you: spotting accidental corruption, deduplicating files, cache keys, or matching a legacy checksum a vendor still publishes. The moment an attacker enters the picture — passwords, signatures, certificates, software integrity against tampering — MD5's collision weakness disqualifies it. Use the SHA-256 hash generator for a modern 256-bit digest, or the file checksum verifier to compare a downloaded file against a published checksum in one step.
Frequently asked questions
- What is an MD5 hash?
- An MD5 hash is a 128-bit fingerprint of data, written as 32 hexadecimal characters. Feed any text or file through the MD5 algorithm and you always get the same 32-character output; change even one byte of the input and the hash changes completely. That makes it a quick way to tell whether two files or strings are identical without comparing them byte by byte.
- Can an MD5 hash be decrypted or reversed?
- No. MD5 is a one-way hash function, not encryption — there is no key and no inverse operation, and infinitely many different inputs map to every possible output. Sites that claim to “decrypt MD5” are really lookup tables: they have pre-computed the hashes of billions of common strings and simply search for a match. The hash of anything not already in their table cannot be recovered.
- Is MD5 secure?
- Not for security purposes. Practical collision attacks have existed since 2004, meaning attackers can deliberately craft two different inputs that share the same MD5 hash. Never use MD5 for passwords, digital signatures or certificates. It remains perfectly fine for non-adversarial jobs such as checksums, detecting accidental corruption, deduplicating files and cache keys.
- What is the difference between MD5 and SHA-256?
- Both are hash functions, but SHA-256 produces a 256-bit digest (64 hex characters) and has no known practical collisions, while MD5 produces 128 bits (32 hex characters) and is cryptographically broken. MD5 is slightly faster and its hashes are shorter, which is why it survives in checksums and legacy systems, but any new security-sensitive design should use SHA-256.
- How do I verify a file’s MD5 checksum?
- Drop the file into this tool and compare the 32-character result with the checksum published by the download source. If the two strings match exactly — letter case does not matter — the file arrived intact. You can cross-check on the command line with certutil -hashfile yourfile MD5 on Windows, md5sum on Linux or md5 on macOS.
- Is my text or file uploaded to a server?
- No. The MD5 algorithm is implemented in JavaScript and runs entirely in your browser — text and files are hashed on your own device and never transmitted anywhere. You can load the page, disconnect from the internet and keep generating hashes.