Tools

Online MD5 Hash Tool

Type any text to get 32-char and 16-char MD5 digests in both cases instantly, with UTF-8 Chinese and emoji support and one-click copy. Computed entirely in your browser — the input never leaves your device.

MD5-32 —
MD5-32 —
MD5-16 —
MD5-16 —

The "16-char" form is not a different algorithm — it is the middle 16 characters (positions 9–24) of the 32-char digest, a legacy convention in some older systems. Upper rows show uppercase, lower rows lowercase.

🔒 Privacy: all MD5 computation happens locally in your browser. Neither the input text nor the results are sent to our servers.

What is MD5?

MD5 (Message-Digest Algorithm 5) is a cryptographic hash function that maps input of any length to a fixed 128-bit (32 hexadecimal characters) digest. It is one-way: a hash can be computed from the input, but the input cannot be recovered from the hash. The same input always yields the same output, and changing even one character changes the result completely.

This tool computes the MD5 of the UTF-8 encoded byte sequence — Chinese, emoji, newlines and spaces all take part. If another tool gives a different result, first check that both use the same encoding (e.g. GBK and UTF-8 hashes of Chinese text will always differ).

What is MD5 suitable for?

Practical collision attacks against MD5 exist, so it no longer provides security guarantees. It remains fine for non-adversarial uses, but never use it where protection against malicious tampering or password storage is required:

✓ Suitable uses

  • Verifying downloaded file checksums (e.g. MD5 values published by software vendors)
  • Checking whether two files/data sets are identical (dedup, change detection)
  • Development uses such as cache keys and temp file names
  • Interoperating with legacy systems that only accept MD5

✗ Not suitable for

  • Password storage — use dedicated password hashing such as bcrypt, scrypt or Argon2id
  • Digital signatures or any anti-forgery context
  • Tamper-proof integrity protection — use SHA-256 or stronger instead
  • Designing new security protocols

常见问题

What is MD5?

MD5 is a cryptographic hash function that maps text of any length to a fixed 32-hex-character (128-bit) digest. It is one-way: you can compute the hash from the input but not recover the input from the hash; identical input always yields identical output.

Can MD5 be decrypted or reversed?

No. MD5 is a one-way hash, not encryption — it cannot be reversed. Online "MD5 decryption" sites merely look up precomputed rainbow tables of common strings; anything they miss stays unrecoverable. Because rainbow tables and collision attacks target it, MD5 must not be used for password storage.

What is the difference between 32-char and 16-char MD5?

A full MD5 digest is 32 hexadecimal characters. The "16-char" form is not a different algorithm — it is the middle 16 characters (positions 9–24) of the 32-char digest, a truncation convention of some legacy systems. E.g. for abc: 32-char is 900150983cd24fb0d6963f7d28e17f72, 16-char is 3cd24fb0d6963f7d.

Why do hashes of Chinese or emoji text differ between tools?

Hashes operate on byte sequences, and the same text has different bytes under different encodings. This tool always uses UTF-8; a tool using GBK or another encoding will produce different hashes for Chinese. Emoji only work under UTF-8-style encodings. When results differ, check the encoding and whether spaces/newlines were included or trimmed.

Is MD5 still secure? Can I use it to store passwords?

No. Practical collision attacks against MD5 have been demonstrated, so it offers no collision resistance and must never be used for password storage or digital signatures. Use bcrypt, scrypt or Argon2id for passwords and SHA-256 or stronger for integrity. It remains acceptable for non-adversarial uses such as file checksums.

Is my input uploaded or stored anywhere?

No. All computation runs locally in your browser with JavaScript — neither the input text nor the generated hashes are sent to our servers, so it is safe for sensitive content.

Is this the same as "MD5 encryption"?

It is the same operation, but "MD5 encryption" is an inaccurate label: MD5 is a hash, not encryption — there is no key and it is irreversible. "Encryption" implies decryption is possible, while MD5 can only be computed one way. This page uses the accurate terms "hash" throughout.