MD5 File Checksum
Calculate an MD5 checksum or HMAC-MD5 value for a local file or URL content in your browser without uploading the local file. Expand to read more.
MD5 file checksum calculator
This tool calculates the 128-bit MD5 checksum of a local file or content fetched from a URL. Local files are processed in your browser and are not uploaded to this site. URL mode requests the remote resource and hashes the bytes returned to the browser.
An MD5 checksum is commonly written as 32 hexadecimal characters. It can help confirm that a downloaded or copied file matches a trusted published checksum, but matching MD5 values do not prove who created the file or protect against deliberate collision attacks.
How to verify a file with MD5
- Select a local file or switch to URL input.
- Keep Hex as the output format when comparing with a conventional MD5 checksum.
- Calculate the checksum.
- Compare every character with the checksum supplied by a trusted source.
The comparison is meaningful only when the expected checksum comes from a source you already trust. If an attacker can replace both a file and the checksum shown beside it, MD5 cannot establish authenticity.
When is MD5 appropriate?
MD5 remains useful for legacy compatibility and non-adversarial error detection. It is not suitable when collision resistance or cryptographic proof of integrity is required. The updated security guidance in RFC 6151 states that MD5 is not acceptable for uses such as digital signatures.
When the file publisher provides SHA-256 instead, use the SHA-256 File Hash tool. Avoid converting the file to text before hashing it, because that can change its byte sequence.
HMAC-MD5 for files
Enable HMAC only when an existing system requires a keyed HMAC-MD5 value. Enter the same secret key and key encoding used by that system. A plain MD5 checksum and an HMAC-MD5 value are not interchangeable.
MD5 file FAQ
Why does the checksum change after editing a file?
Even a one-byte change produces a different digest. Metadata stored inside a file, line-ending conversions, archive recompression, and image re-encoding can all change its bytes.
Does matching MD5 mean a file is safe?
No. A matching value only shows that the calculated bytes match the bytes associated with the expected checksum. It does not scan for malware or make an untrusted checksum authoritative.
Can I hash ordinary text instead?
Yes. Use the MD5 text tool when you need to select a text encoding or enter Hex or Base64 data directly.
