How to use MD5 Hash
- Type text, or switch to File and choose the file.
- Copy the MD5 from the highlighted row; the SHA hashes are there if the site gives one of those instead.
- Paste an md5sum from the download page into Compare to check the file.
- For a keyed hash, tick HMAC with a key (HMAC-MD5 is still used by some older protocols).
Why use MD5 Hash
Streamed
Files are read in 4 MB pieces, so a 200 MB file hashes without loading it all into memory.
Exact
Our own implementation of RFC 1321, checked against the standard test vectors, since browsers no longer ship MD5.
Checksum check
Compare with the md5sum a download page shows; case is ignored.
Honest about safety
MD5 is shown for compatibility. For new work the page points you to SHA-256.
About this tool
MD5 is the 128-bit hash of the 1990s, still printed on many download pages and used in older systems, databases and file-sync tools as a quick fingerprint. It is fine for spotting an accidentally corrupted download, but collisions can be made on purpose, so it must not be used for signatures, certificates or passwords; SHA-256 replaced it for those.
Browsers do not include MD5 in Web Crypto, so this page carries its own implementation, verified against the RFC 1321 test vectors and streamed over files in pieces. Text is hashed as UTF-8, files as their bytes, and the result matches md5sum and Get-FileHash -Algorithm MD5. Nothing leaves your device.
Frequently asked questions
Is MD5 still safe to use?
For checking that a download was not corrupted in transit, yes. For anything an attacker could tamper with (signatures, password storage, certificates) no: use SHA-256 or a password hash.
Why does the MD5 of my text differ from a site's example?
Usually a trailing newline or different line endings. The page hashes exactly what is in the box.
Can I hash a large file?
Yes, up to 256 MB, read in 4 MB pieces on your device.
Can MD5 be decrypted?
No hash can be reversed; lookup tables exist for common short inputs, which is another reason not to hash passwords with it.
Does the page send my file anywhere?
No. It is read and hashed by your browser.