MD5 Generator

MD5 produces a 128-bit (32 hex-character) digest of any input, text, file, stream. It’s still the standard for quick integrity checks (package download verification, de-duplication fingerprinting, git blob naming in some places) even though it’s been broken for cryptographic purposes since 2004. Paste text or drop a file and the generator returns the hex digest locally, without uploading anything.

How to generate an MD5 hash

  1. 1

    Pick input

    Text box for arbitrary string, or file picker for any size up to ~2 GB.

  2. 2

    The tool computes MD5 locally

    Files are streamed in chunks so large files don't blow up memory.

  3. 3

    Read the hex digest

    32 hexadecimal characters: the canonical MD5 representation.

  4. 4

    Copy or compare

    Compare to an expected hash (like a package author's published MD5) or copy for your records.

What MD5 is: and isn’t

  • Deterministic. The same input always produces the same 128-bit output.
  • Fixed length. Any input size, one byte or a gigabyte, produces 32 hex characters.
  • One-way. Given an MD5 digest, you can’t invert it to recover the input (except for tiny inputs where rainbow tables exist).
  • BROKEN as a cryptographic hash. Collisions are trivially computable. Do NOT use MD5 for:
    • Password storage (use bcrypt, scrypt, Argon2).
    • Digital signatures (use SHA-256 or SHA-3).
    • TLS certificate signing (rejected by modern browsers).
    • Any security-sensitive integrity claim an attacker could exploit.

Where MD5 is still fine

  • Non-adversarial integrity checks. Confirming a file wasn’t corrupted in transit.
  • De-duplication. Fingerprinting identical blobs in storage systems.
  • ETag generation on low-churn static assets.
  • Cache keys and content-addressable hashing.

Worked examples

Input text MD5 digest
(empty string) d41d8cd98f00b204e9800998ecf8427e
a 0cc175b9c0f1b6a831c399e269772661
abc 900150983cd24fb0d6963f7d28e17f72
The quick brown fox jumps over the lazy dog 9e107d9d372bb6826bd81d3542a419d6
The quick brown fox jumps over the lazy dog. (trailing period) e4d909c290d0fb1ca068ffaddf22cbd0

Notice how one character (the trailing period) completely changes the digest, the avalanche property.

MD5 vs. SHA family

Function Output size Collision-broken? Typical use today
MD5 128 bits Yes (2004) Integrity, de-dup, ETags
SHA-1 160 bits Yes (2017) Legacy; avoid for new work
SHA-256 256 bits No TLS, commits, general crypto
SHA-3 224–512 bits No Modern alternative to SHA-2
BLAKE3 256 bits No Fast SHA-2 replacement

Frequently Asked Questions

No. MD5 is trivial to brute-force on modern GPUs and has been broken since 2004. Use a password hashing function: Argon2, scrypt or bcrypt.

For casual integrity (did the download complete) yes. For adversarial integrity (did someone swap the file for a malicious version) no, use SHA-256.

No. Hashing runs in your browser via WebCrypto and typed arrays. Files never leave your device, which matters when hashing something private or under NDA.

Modern browsers handle ~2 GB of streamed input comfortably. Very large files (tens of GB) are better hashed by a CLI tool like md5sum or openssl dgst -md5.

The spec doesn’t prescribe case. Most Unix tools output lowercase; some Windows tools uppercase. When comparing, normalize case on both sides.

Related Tools

Tool available in other languages