EthicalFusion

MD5 Hash Generator

Generate the MD5 hash of any text.

Was this tool helpful?

Thanks for the feedback!

This MD5 Hash Generator returns the MD5 digest of the text you enter as 32 hexadecimal characters. MD5 is still widely used for checksums, cache keys and matching records across systems, so developers and data teams regularly need to reproduce a hash that another program produced.

Examples to check against

InputMD5
hello5d41402abc4b2a76b9719d911017c592
Hello8b1a9953c4611296a827abf8c47804d7
(empty)d41d8cd98f00b204e9800998ecf8427e

Changing one character changes the whole digest. "The quick brown fox jumps over the lazy dog" hashes to 9e107d9d372bb6826bd81d3542a419d6; add a full stop and it becomes e4d909c290d0fb1ca068ffaddf22cbd0. This avalanche effect is why a hash works as a fingerprint.

Why your hash may not match

  • A hidden newline. On Linux, echo hello | md5sum gives b1946ac92492d2347c6235b4d2611184, because echo adds a line break. Use echo -n hello to hash just the word.
  • Trimmed edges. This tool runs PHP's md5() on the server after surrounding spaces and line breaks are removed, so you can't reproduce the hash of text that deliberately ends in a newline here.
  • Case and encoding. MD5 works on bytes, so "Hello" and "hello" differ, and text in Hindi or with ₹ is hashed as UTF-8. A program that uses UTF-16 or a legacy code page will produce a different digest.
  • Upper-case hex. Some tools print the same value in capitals. 5D41… and 5d41… are identical hashes.

How MD5 works, briefly

MD5, published as RFC 1321 in 1992, pads the message and appends its length so the total is a multiple of 512 bits, then pushes each 512-bit block through 64 steps of bitwise operations (four rounds of 16) that update a 128-bit state. That state, written as 32 hex digits, is the digest. The process is deterministic and one-way: the same input always gives the same output, and there is no formula to run it backwards.

Where MD5 is fine and where it isn't

It remains acceptable for detecting accidental corruption, building cache or deduplication keys, and comparing records, for example hashing email addresses so two lists can be matched without exchanging the raw addresses. It is broken for security. Researchers have produced collisions (two different inputs with the same MD5) since 2004, and RFC 6151 says it should not be used where collision resistance matters, such as digital signatures. For passwords it is doubly wrong because it is fast and unsalted, and common passwords can be looked up in precomputed tables. Use the Bcrypt Hash Generator for passwords and the SHA-256 Hash Generator for integrity checks.

This page hashes typed text, not files. For a download, run certutil -hashfile file.zip MD5 on Windows or md5sum file.zip on Linux. Your input is sent to the EthicalFusion server to compute the hash.

Frequently asked questions

Can an MD5 hash be decrypted?
No. MD5 is a one-way function. Short or common inputs can be found by looking them up in precomputed tables, which is why MD5 must not protect passwords.
Why does my MD5 differ from the one on the command line?
The command probably included a trailing newline, as echo does by default. Use echo -n, and remember this tool trims whitespace at both ends.
Is MD5 safe for storing passwords?
No. It is fast, unsalted and has known collisions. Use a slow password hash such as bcrypt or Argon2.
How long is an MD5 hash?
Always 128 bits, shown as 32 hexadecimal characters, whatever the length of the input.
Can I get the MD5 of a file here?
No, only of text you type or paste. For files, use certutil on Windows, md5sum on Linux or md5 on macOS.

Related tools

Embed this tool on your site

Paste it into any blog or website. Free, with a credit link.