AES-Verschlüsselung erklärt: Wie sie funktioniert und warum sie wichtig ist
Jun 23, 2026
Generate the MD5 hash value of any string. MD5 produces a 128-bit hash value, typically expressed as a 32-character hexadecimal number.
MD5 stands for "Message-Digest algorithm 5" and is one of the most widely-known cryptographic hash functions. It was designed by Ronald Rivest at MIT in 1991 as a successor to MD4. MD5 takes an input message of any length and produces a fixed-size 128-bit (16-byte) hash value, which is typically expressed as a 32-character hexadecimal string.
The output is commonly called a "digest", "checksum", or simply "hash". The same input will always produce the same output, but even a single character change in the input produces a drastically different hash. For example, hashing hello yields 5d41402abc4b2a76b9719d911017c592, while Hello (capital H) yields a completely different value.
MD5 processes the input in 512-bit (64-byte) blocks. The message is first padded so its length is congruent to 448 modulo 512, and the original length in bits is appended as a 64-bit value. The algorithm maintains a 128-bit state split into four 32-bit words (A, B, C, D), initialized to fixed constants. Each block goes through four rounds of 16 operations that mix, shift, and combine the state with the block data. After all blocks are processed, the four words are concatenated to form the final 128-bit digest.
Although MD5 is no longer recommended for security-critical applications, it remains extremely useful for non-cryptographic purposes:
ETag header value, allowing browsers to perform conditional requests with If-None-Match.hash('md5', ...) function and redirects back to this page with the result.Security warning: Do not use MD5 to hash passwords or any security-sensitive data. Use a slow, salted algorithm like bcrypt, scrypt, or Argon2id instead.
Here are some practical scenarios where this MD5 generator is useful:
All three are cryptographic hash functions, but they differ in output size and security. MD5 produces a 128-bit (32 hex chars) digest, SHA-1 produces 160 bits (40 hex chars), and SHA-256 produces 256 bits (64 hex chars). MD5 and SHA-1 are both considered cryptographically broken — practical collision attacks exist. SHA-256 (in the SHA-2 family) is currently considered secure for most applications. For new code, prefer SHA-256 or SHA-3.
For non-security purposes (file integrity checks, cache keys, deduplication, ETags), yes — MD5 is still perfectly fine and widely used. For security purposes (passwords, digital signatures, SSL/TLS certificates, code signing), no. Use a stronger, slower, salted algorithm designed for that purpose, such as bcrypt, scrypt, or Argon2id for passwords, and SHA-256 or SHA-3 for message authentication.
MD5 is a one-way function and is not directly reversible. However, attackers can use rainbow tables (precomputed databases of hashes for common inputs) or brute-force attacks to find an input that matches a given hash. This is why salted hashes are essential for password storage — the salt ensures that even the same password produces different hashes, defeating rainbow tables.
A collision occurs when two different inputs produce the same MD5 hash. Because MD5 produces a 128-bit output, collisions are theoretically possible (the pigeonhole principle guarantees they exist), but finding one in practice was infeasible until 2004, when Chinese cryptographer Xiaoyun Wang demonstrated practical collision attacks. Since then, attackers can deliberately craft two files with the same MD5 — which is why MD5 is unsafe for digital signatures.
No. The MD5 output is always exactly 32 hexadecimal characters (128 bits), regardless of whether your input is one character or one million characters. An empty string still produces a valid MD5 hash: d41d8cd98f00b204e9800998ecf8427e.
Yes. This tool computes the MD5 hash on the server using PHP's hash('md5', ...) function, so the input is transmitted via HTTPS in the form submission. If you prefer a fully client-side option, you can run MD5 in your browser console with libraries like CryptoJS or use the SubtleCrypto API (which, however, does not include MD5 by design).
Quick reference of MD5 hashes for common strings. Use these to verify the tool is working correctly.
| Input | MD5 Hash (32 hex chars) |
|---|---|
| (empty string) | d41d8cd98f00b204e9800998ecf8427e |
| hello | 5d41402abc4b2a76b9719d911017c592 |
| Hello | 8b1a9953c4611296a827abf8c47804d7 |
| password | 5f4dcc3b5aa765d61d8327deb882cf99 |
| admin | 21232f297a57a5a743894a0e4a801fc3 |
| 123456 | e10adc3949ba59abbe56e057f20f883e |
| The quick brown fox jumps over the lazy dog | 9e107d9d372bb6826bd81d3542a419d6 |
Generate SHA-1 hash online free
Generate SHA-256 hash online free
Generate SHA-512 hash online free
Generate SHA-3 hash online free
Generate bcrypt password hashes online
Generate Argon2id password hashes
Generate salted password hashes
Generate multiple hash types at once
Blog
Jun 23, 2026
Jun 23, 2026
Jun 23, 2026
Jun 23, 2026
Jun 23, 2026
Jun 23, 2026