What is MD5?
MD5 is a hash function designed by Ronald Rivest in 1991. It takes input of any length — a word, a paragraph, an entire file — and produces a fixed-length “fingerprint” of 128 bits, written as 32 hexadecimal characters. For decades it was one of the most widely used hash functions in software, and you will still find MD5 checksums on download pages and in older systems.
This generator creates the MD5 hash of any text instantly in your browser, with the option to display it in lowercase or uppercase.
How to Use the MD5 Generator
- Type or paste text into Input String.
- The 32-character hash appears immediately as you type.
- Toggle between lowercase and uppercase output if your system expects one or the other.
- Click Copy MD5 Hash.
Examples
| Input | MD5 hash |
|---|---|
abc | 900150983cd24fb0d6963f7d28e17f72 |
abd | 4911e516e5aa21d327512e0c8b197616 |
ABC | 902fbdd2b1df0c4f70b4a5d23525e932 |
Changing a single letter, or just its case, gives a completely unrelated hash. This property, called the avalanche effect, is what makes hashes useful for spotting changes.
Key Properties of a Hash Function
- Deterministic: the same input always gives the same output.
- Fixed length: a one-letter input and a 4 GB file both produce 32 hex characters.
- One-way: you cannot work backwards from the hash to the input.
- Collision resistant: it should be practically impossible to find two inputs with the same hash. This is the property MD5 no longer has.
Why MD5 is No Longer Secure
In 2004, researchers showed how to create MD5 collisions, and today it can be done in seconds on a normal laptop. In 2008 this weakness was used to create a forged security certificate, and in 2012 the Flame malware used an MD5 collision to pose as a legitimate Microsoft update. As a result:
- Never store passwords as MD5. Huge databases of pre-computed MD5 hashes (rainbow tables) can reveal common passwords instantly. Use bcrypt, scrypt or Argon2, which are deliberately slow and salted.
- Don’t use MD5 for digital signatures or certificates. Use SHA-256 or stronger.
Where MD5 is Still Fine
- Checking for accidental corruption after downloading or copying a file, when nobody is trying to tamper with it.
- Cache keys — turning a long URL or query into a short, consistent identifier.
- Finding duplicate files in a folder or storage bucket.
- Gravatar-style identifiers and other non-sensitive lookups.
MD5 in Code
// PHP
md5('abc');
# Python
import hashlib; hashlib.md5(b'abc').hexdigest()
# Linux / macOS
echo -n "abc" | md5sum
Note the -n flag in the shell command: without it, echo adds a newline, which changes the hash.
Related Tools
- SHA-256 Generator — the secure modern alternative.
- Password Generator — create strong passwords.
- Base64 Encoder — encoding, which unlike hashing can be reversed.