About this tool
Paste an MD5 hash and this tool tries to recover the original text it was made from.
How decoding works
MD5 is a one-way hash function — there is no formula that turns a hash back into its input. This tool instead brute-forces it: starting from the empty string, it generates every possible string of length 0 to 10 over the character set you choose (all 95 printable-ASCII characters by default), hashes each one, and stops when a hash matches.
By default the search uses all 95 printable-ASCII characters. Select one or more classes under Character set — or add custom single-byte (Latin-1) characters — to narrow the alphabet, which shrinks the search space and speeds things up; with nothing selected it falls back to the full set. Custom characters outside the single-byte range (e.g. emoji) are ignored.
The search runs entirely in your browser on a background thread — on your GPU via WebGPU when available, otherwise on the CPU. The Engine switch lets you leave this on Auto or force GPU or CPU. The counter and speed below the input show how many combinations have been tried and the current hashes-per-second rate. The time-left estimate is for finishing the current length — each extra character multiplies the number of combinations by the size of your alphabet (95× with the default set).
This only finds short inputs. The number of candidates grows as Nlength, where N is your alphabet size (95 by default), so the search space explodes past a few characters — longer or random inputs are computationally out of reach.
About MD5
- An MD5 hash is always a 128-bit value, written as 32 hexadecimal characters.
- MD5 is cryptographically broken and must not be used for passwords or security.
- Works offline after first visit.