What is a cryptographic hash?
A cryptographic hash turns any input into a fixed-size digest (32 bytes for SHA-256) such that the same input always gives the same digest, a one-character change gives a completely different one, and the input cannot be recovered from the output. Hashes verify file integrity, fingerprint content and underpin signatures and HMAC. SHA-256 and the SHA-2 family are current; MD5 and SHA-1 are broken against deliberate collisions and should only be used as checksums.
Security note: A plain hash is not a password store. Passwords need a slow, salted algorithm — Argon2id, scrypt or bcrypt — because SHA-256 and MD5 can be tried billions of times per second.
How to use MD5 Generator
- Type or paste the text to hash.
- Choose the output format.
- Optionally paste a known hash to compare.
- Copy the digest.
MD5 Generator features
- Pure-TypeScript MD5 (RFC 1321) verified against the official test vectors
- Hex (lower/upper), Base64, Base64url and binary output
- Compare with an expected hash — case-insensitive, hex or Base64
- Trim option to avoid trailing-newline mismatches with command-line tools
- Live hashing of UTF-8 text as you type
MD5 Generator example
MD5 of a pangram
Input:
The quick brown fox jumps over the lazy dogOutput:
9e107d9d372bb6826bd81d3542a419d6Frequently asked questions about MD5 Generator
Is MD5 still safe to use?
Not for security. Collisions can be produced in seconds, so MD5 must not be used for passwords, signatures or integrity of untrusted data. It remains fine for non-adversarial checksums, cache keys and matching legacy systems.
Why does my hash differ from the command line?
echo adds a trailing newline, so "echo hello | md5sum" hashes "hello\n". Use printf or enable "Trim whitespace" here. Encoding also matters: this tool hashes the UTF-8 bytes of your text.
Can MD5 be reversed?
No hash can be reversed mathematically, but MD5 of short or common inputs is trivially found in rainbow tables. That is another reason not to use it for passwords.
How is MD5 computed without WebCrypto support?
Browsers do not expose MD5 in crypto.subtle, so this tool ships a small pure-TypeScript implementation of RFC 1321, verified against the official test vectors.
Technical notes
MD5 produces a 128-bit digest by processing each 512-bit block in four rounds of 16 operations (64 steps in total). Browsers do not implement MD5 in WebCrypto because it is cryptographically broken, so this tool includes a compact implementation of the reference algorithm. It processes the UTF-8 bytes of the input.
References
- FIPS 180-4: Secure Hash Standard (SHS)The US federal standard that specifies the SHA-1 and SHA-2 family of hash functions.
- RFC 6234: US Secure Hash Algorithms (SHA and SHA-based HMAC and HKDF)Reference descriptions and code for SHA-1, SHA-224/256/384/512 and their use in HMAC.
- RFC 1321: The MD5 Message-Digest AlgorithmThe original MD5 definition. MD5 is now considered broken for signatures and passwords; it remains useful only as a checksum.