MD5 hash generator

MD5 hash any text and get the 128-bit digest as 32 lowercase hex characters. MD5 is a one-way function: the same input always produces the same digest, but you cannot recover the input from the digest. The hash runs in your browser; nothing uploads. MD5 is broken for collision-resistance and unsuitable for password storage. For modern integrity hashing, use SHA-256.

Input
Line 1:1 LF cloud_done Saved locally
Result MD5 Hash
0 lines 0 chars

MD5 hashing, 128-bit one-way digest

MD5 (Message-Digest Algorithm 5, RFC 1321) is a hash function that produces a 128-bit digest from any byte input. The output is a fixed 32 hex character string regardless of input length. The same input always yields the same hash; even a single bit flip in the input produces a completely different hash (the avalanche effect). This makes MD5 useful for content fingerprinting, ETag generation, and detecting accidental file corruption.

MD5 is a hash, not encryption. The transform is one-way: there is no md5_decode. People sometimes find an input for a known short hash by trying every candidate (rainbow tables, dictionary lookups for common passwords), but the algorithm itself is not reversible. If you need an encryption format you can decode, use base64 or URL encode instead.

MD5 is cryptographically broken. Researchers have published methods for finding two different inputs with the same hash (collision attacks). Do not use MD5 for password storage, digital signatures, or anywhere a malicious party can choose the input. For those use cases, prefer SHA-256 or a password-specific function like Argon2 or bcrypt. MD5 remains useful where you only need a quick non-adversarial fingerprint: deduplication, cache keys, ETags.

How to use md5 hash generator

  1. 1Paste or type the text you want to hash into the input panel.
  2. 2The 32-character MD5 hex digest appears in the output panel as you type.
  3. 3Click Copy in the output header to copy the hash.
  4. 4Compare the hash to a known reference if you are verifying integrity.
  5. 5For password storage or anywhere a malicious party picks the input, use a stronger function instead.

Keyboard shortcuts

Drive TextResult without touching the mouse.

Shortcut Action
Ctrl FOpen the find & replace panel inside the input Plus
Ctrl ZUndo the last input change
Ctrl Shift ZRedo
Ctrl Shift EnterToggle fullscreen focus on the editor Plus
EscClose find & replace, or exit fullscreen
Ctrl KOpen the command palette to jump to any tool Plus
Ctrl SSave current workflow draft Plus
Ctrl PRun a saved workflow Plus

What this tool actually does

Fixed 128-bit / 32 hex character output

Every input, regardless of length, produces exactly 32 hex characters. "" hashes to d41d8cd98f00b204e9800998ecf8427e; a one-megabyte file hashes to another 32-char string. Output uses lowercase hex.

Deterministic and avalanche-sensitive

The same input always produces the same digest. A one-bit change to the input changes about half the bits of the digest, so visually similar inputs produce visually unrelated hashes. Useful for fingerprinting and dedup.

One-way, NOT encryption

There is no inverse operation. The function is designed to be hard to invert. MD5 is a hash, not a cipher. To reverse-encode, you would need a different format like base64.

UTF-8 byte input

Text is widened to UTF-8 bytes before hashing. So café hashes the bytes 63 61 66 C3 A9, which matches the output of printf "café" | md5sum on Linux/macOS.

Known-broken for collision resistance

Practical collision attacks exist (Wang 2004, Stevens 2009). Two different inputs can be crafted to produce the same hash. Do not use MD5 for digital signatures, password storage, or any setting where an attacker chooses the input. Use SHA-256 for those.

Worked example

32 hex characters of digest, lowercase. Pasting Hello, world! into the same tool tomorrow produces the same hash, byte-for-byte. For modern integrity hashing, see SHA-256.

Input
Hello, world!
Output
65a8e27d8879283831b664bd8b7f0ad4

Settings reference

Behaviour Effect on output
Output format Always 32 lowercase hex characters (128 bits).
Output length Fixed regardless of input size. Empty input still produces 32 hex characters.
Empty input Hashes to d41d8cd98f00b204e9800998ecf8427e (the canonical empty MD5).
Non-ASCII text Widened to UTF-8 bytes before hashing. Matches md5sum on UTF-8 systems.
Whitespace and newlines Hashed as their literal byte values. Trailing newline changes the digest.
Determinism Same input always produces the same hash, on every browser, every device.
Reversibility None. MD5 is a one-way function.

FAQ

Can I decrypt an MD5 hash back to the original text?
No. MD5 is a one-way hash, not encryption. There is no inverse. Some sites publish lookup tables for common short inputs (rainbow tables), which is a different thing: pre-computing hashes of common strings and matching yours against the table. The algorithm itself is not reversible.
Is MD5 safe for password hashing?
No. MD5 is fast (which is bad for passwords), and collisions are findable. Use a password-specific function like Argon2, bcrypt, or scrypt for password storage. SHA-256 on its own is also too fast for password use without a slow KDF wrapper.
Why does the MD5 differ from another tool I tried?
Most often a UTF-8 vs UTF-16 mismatch, a trailing newline, or whitespace difference. TextResult hashes the UTF-8 byte stream of the input, which matches md5sum on Linux/macOS. Confirm there is no trailing newline (the status bar at the bottom of the input shows the byte length).
How long is the output?
Always 32 hex characters (128 bits). Whether you hash one character or one megabyte, the output is the same length. Empty input hashes to d41d8cd98f00b204e9800998ecf8427e.
Is the input sent anywhere?
No. Hashing runs entirely in your browser. Nothing is uploaded, nothing is logged.