MD5 File Checksum
Calculate an MD5 checksum or HMAC-MD5 value for a local file or URL content in your browser without uploading the local file. Read more
What is an MD5 checksum?
An MD5 checksum is a 128-bit value calculated from the exact bytes of a file or other data. It is usually displayed as 32 hexadecimal characters and acts as a compact fingerprint: identical bytes produce the same checksum, while even a small change normally produces a different value.
This tool calculates the MD5 checksum of a local file or content fetched from a URL. Local files are processed in your browser and are not uploaded to this site. URL mode requests the remote resource and hashes the bytes returned to the browser.
Comparing an MD5 checksum can help confirm that a downloaded or copied file matches a trusted published checksum. However, matching values do not prove who created the file, show that it is safe, or protect against deliberate collision attacks.
How to verify a file with MD5
- Select a local file or switch to URL input.
- Keep Hex as the output format when comparing with a conventional MD5 checksum.
- Calculate the checksum.
- Compare every character with the checksum supplied by a trusted source.
The comparison is meaningful only when the expected checksum comes from a source you already trust. If an attacker can replace both a file and the checksum shown beside it, MD5 cannot establish authenticity.
When is MD5 appropriate?
MD5 remains useful for legacy compatibility and non-adversarial error detection. It is not suitable when collision resistance or cryptographic proof of integrity is required. The updated security guidance in RFC 6151 states that MD5 is not acceptable for uses such as digital signatures.
When the file publisher provides SHA-256 instead, use the SHA-256 File Hash tool. Avoid converting the file to text before hashing it, because that can change its byte sequence.
HMAC-MD5 for files
Enable HMAC only when an existing system requires a keyed HMAC-MD5 value. Enter the same secret key and key encoding used by that system. A plain MD5 checksum and an HMAC-MD5 value are not interchangeable.
MD5 file FAQ
What is the difference between an MD5 hash and an MD5 checksum?
They use the same MD5 algorithm and produce the same 128-bit result for the same bytes. “Hash” names the algorithm’s output more generally, while “checksum” commonly describes using that output to compare files for accidental changes.
Why does the checksum change after editing a file?
Even a one-byte change produces a different digest. Metadata stored inside a file, line-ending conversions, archive recompression, and image re-encoding can all change its bytes.
Does matching MD5 mean a file is safe?
No. A matching value only shows that the calculated bytes match the bytes associated with the expected checksum. It does not scan for malware or make an untrusted checksum authoritative.
Can I hash ordinary text instead?
Yes. Use the MD5 text tool when you need to select a text encoding or enter Hex or Base64 data directly.
