MD5 hash of text or a file, for checksums and legacy systems
Runs in your browser. Nothing you type is sent anywhere. Updated on 24 Oct 2026.MD5 still turns up everywhere: download mirrors list it, old databases store it, and many APIs use it as an ETag or a cache key. Type text or choose a file to get its 32-character MD5. It is fine for spotting accidental corruption, but it is broken as a security measure, so never use it to store passwords or to prove a file has not been tampered with.
The page opens with only MD5 selected; it is marked weak because it is not safe for security.
Type or paste text into the box, or choose File and pick a file.
Read the 32-character MD5 below, turning on Uppercase if your system expects capitals.
Click Copy MD5.
This hash generator computes MD5, SHA-1, SHA-256, SHA-384 and SHA-512 for text you type or a file you choose, all at once. Results appear in hex or Base64 with one-click copy, and a compare box tells you plainly whether a file matches the checksum you expected.
Text and files up to 256 MB are hashed with the Web Crypto engine built into your browser; MD5 uses the spark-md5 library. Larger files, up to 4 GB, are read in 4 MB chunks with a progress bar and hashed step by step, so memory use stays low. Text is encoded as UTF-8, the same as the sha256sum command.
MD5 and SHA-1 are broken for security and should only be used to spot accidental damage. For anything that must resist tampering, use SHA-256 or stronger, and never store passwords as a plain hash. Nothing you type or choose leaves your device. Related tools: Base64 Encode and Decode, Password Generator, UUID Generator.
The rest of the article, and all 6 questions about Hash Generator, are on the Hash Generator page.
No. The file is read and hashed by your own browser, so it never leaves your device. That is also why very large files work: nothing has to be transferred. The tool is free and needs no signup.
Not for security. Researchers can create two different files with the same MD5 or SHA-1 hash. They are still fine for spotting accidental corruption in a download. Use SHA-256 or SHA-512 when tampering matters.
Usually the input differs by an invisible character: a trailing newline, a space, or Windows line endings. Text here is hashed exactly as typed, encoded as UTF-8. The echo command adds a newline unless you use echo -n.
Up to 4 GB. Files up to 256 MB are hashed in one pass with Web Crypto; larger ones are read in chunks with a progress bar, which takes a little longer but keeps memory use low. You can cancel at any time.
Still stuck? Ask about Hash Generator and anybody who knows can answer. No account needed.
On the related tools: Grid Template Areas Generator – Type a page layout as named areas and get grid-template-areas with a rule for each part · Remove Tracking Parameters – Strip utm, fbclid and gclid from a link before you share it · Cron Expression Generator – Generate a cron expression by choosing when the job should run.
In the collection Security Tools for Developers.