MD5 Toolkit

Security notice

MD5 is cryptographically broken and should not be used for password storage, signatures or new security designs. Use it only for compatibility and non-adversarial checksums.

Text MD5

Hash text, hexadecimal bytes or Base64 data with standard MD5.

Input

Characters: 0UTF-8 bytes: 0

Input encoding

Choose how the input field should be interpreted before hashing.

Preprocessing

Preprocessing changes the bytes and therefore changes the hash.

Result

HMAC-MD5

Generate an HMAC using MD5 and a secret key for compatibility with legacy protocols.

Message

The data protected by the HMAC.

Input encoding

Secret key

The secret key is never written to server logs.

Key encoding

File checksum

Calculate MD5 locally in the browser by chunks. Optional server verification is available for files up to 100 MB by default.

Drop files here or choose files

Local hashing keeps file contents on this device.

Also upload each file to the PHP server and compare the server MD5

Disabled by default to reduce NAS load and avoid transferring file contents.

Batch MD5

Hash one line at a time. The default server limit is 10,000 lines per request.

Lines to hash

Include empty lines

Verify MD5

Hash the input and compare it with a known 32-character MD5 hexadecimal digest using constant-time comparison on the server.

InputInput encoding

Expected MD5

Enter exactly 32 hexadecimal characters. Letter case is ignored.

Salt and iterative MD5

Compatibility recipes for legacy systems. These options do not make MD5 suitable for modern password storage.

InputInput encoding

Salt

Optional text added before, after or on both sides of the input.

Salt position

Separator

Inserted between salt and input when salt is enabled.

Iterations

Repeated MD5 operations. Server maximum in v1 is 100,000.

Iteration chaining

Legacy systems may chain either hex text or raw digest bytes.

Name-based UUID v3

Create a deterministic UUID version 3 from an MD5 hash of a namespace UUID and name.

Namespace

Standard namespaces use the well-known namespace UUID values.

Name

The same namespace and name always produce the same UUID v3.

MD5-Crypt

Generate the legacy Unix crypt $1$ format when supported by the server. This is provided only for compatibility.

Password or text

The value is sent to the PHP endpoint for hashing but is redacted from logs.

Salt

Up to 8 characters from A-Z, a-z, 0-9, dot and slash. Leave blank to generate one.

MD5 self-test

Run standard MD5 test vectors on the PHP implementation to confirm the environment is producing expected digests.