MD5 Is Not a Password Hash
See what an MD5 of a password looks like, and why you must use Argon2, bcrypt or scrypt instead.
Part of the free MD5 Hash Generator. Runs in your browser — nothing is uploaded.
MD5 Is Not a Password Hash
MD5 of a password is still common in leaked databases and old CMS installs. It is fast, unsalted by default, and trivial to crack. The example is a dummy passphrase so you can recognize the pattern — do not store passwords this way.
Worked example: A dummy passphrase (do not copy this pattern)
Input
correct horse battery staple
MD5
9cc2ae8a1ba7a93da39b46fc1019c481
Practical tip
If you are migrating an MD5 password column, hash incoming logins with MD5 only to verify the old value, then re-hash with Argon2 and drop MD5.
How to use this MD5 Generator
- 1Use the live tool above — it runs entirely in your browser and never uploads your data.
- 2Paste the sample from the worked example, or use your own input.
- 3Copy the result, then adapt the same steps in your editor, script, or pipeline.
MD5 Is Not a Password Hash FAQs
Can MD5 be used for passwords if I add a salt?
A salt stops rainbow tables but MD5 is still far too fast. GPUs will brute-force it. Use a slow KDF.
What should I use instead?
Argon2id is the current default. bcrypt and scrypt are acceptable. Never SHA-256 or MD5 alone.
More MD5 Generator pages
- Convert Text to an MD5 HashConvert any text string to a 32-character MD5 hash. Instant, UTF-8 accurate, runs in your browser.
- MD5 Checksum of a FileCalculate the MD5 checksum of a local file without uploading it. Compare the digest with a published MD5.
- Verify an MD5 ChecksumCheck whether text or a file matches a published MD5 checksum. Paste the expected hash and compare.
- MD5 Hash of a StringGet the MD5 hash of any string instantly. Useful for checking fixtures, cache keys and legacy checksums.
- Uppercase MD5 HashGenerate an MD5 hash in uppercase hex (A–F). Some Windows tools and older APIs expect this format.
- MD5 of an Empty StringThe MD5 of an empty string is d41d8cd98f00b204e9800998ecf8427e. Confirm it and hash other empty-like inputs.
- MD5 vs SHA-256Compare MD5 and SHA-256 on the same input. Learn why SHA-256 replaced MD5 for checksums and signatures.
- MD5 File Hash CalculatorA browser md5sum: pick a file, get its MD5, compare with a published checksum. No upload.
- MD5 Hash LengthAn MD5 hash is always 32 hexadecimal characters (128 bits), regardless of input size. Confirm it with the generator.