MD5 Hash — What It Is, How It Works, and Why It's No Longer Safe

What is MD5?

MD5 (Message Digest Algorithm 5) is a hash function designed by cryptographer Ronald Rivest in 1991. It takes any input — a word, a file, an entire database — and produces a fixed 128-bit digest displayed as 32 hexadecimal characters.

MD5 at a Glance

The Avalanche Effect

Change a single character and the entire digest changes completely — this is the avalanche effect, a hallmark of good hash design.

Notice: changing h → H (one character) produces a completely unrelated 32-character digest. No relationship between the inputs is visible in the outputs.

How MD5 Works

MD5 processes input in 512-bit blocks through four rounds of mathematical operations.

The full specification is defined in RFC 1321.

MD5 Output Format

Why MD5 is Broken

Collision Attacks

A collision is when two different inputs produce the same digest. This should be computationally infeasible — for MD5 it became trivially achievable.

A collision means an attacker can craft a malicious file that has the same MD5 hash as a trusted file. The victim verifies the hash — it matches — but is running malware.

Rainbow Table Attacks on Passwords

Because MD5 is extremely fast, a modern GPU can compute billions of MD5 hashes per second. Pre-computed lookup tables covering billions of common passwords are freely available online. A database of plain MD5 password hashes can be fully cracked within minutes after a breach.

MD5 vs Modern Alternatives

When MD5 Is Still Acceptable

MD5 isn’t completely useless — it simply cannot be trusted for security. It remains appropriate where speed matters and collision-resistance doesn’t.

Do and Don’t

Computing MD5 Hashes

echo -n "hello" | md5sum
# 5d41402abc4b2a76b9719d911017c592

md5sum filename.txt   # file checksum

echo -n "hello" | md5
# 5d41402abc4b2a76b9719d911017c592

md5 filename.txt      # file checksum

import hashlib

digest = hashlib.md5(b"hello").hexdigest()
print(digest)
# 5d41402abc4b2a76b9719d911017c592

const crypto = require('crypto');

const hash = crypto
  .createHash('md5')
  .update('hello')
  .digest('hex');

console.log(hash);
// 5d41402abc4b2a76b9719d911017c592

Or use the Hash Generator for instant browser-based MD5 computation — no installation needed, nothing leaves your device.

Key Takeaways

• MD5 produces a 32-character hexadecimal digest from any input (128 bits)
• It is one-way — digests cannot be mathematically reversed
• It is cryptographically broken — practical collision attacks exist since 2004
• It is dangerously fast for password storage — billions of guesses per second on modern hardware
• Use SHA-256 for file integrity; Argon2id or bcrypt for passwords
• MD5 is still fine for non-security uses: cache keys, deduplication, sharding