Hashing, Checksums & Password Security
Practical explanations and browser-based tools for MD5, modern hash functions, file integrity, and secure password storage.
Checksums vs Digital Signatures: What Does Each One Prove?
Understand why checksums detect changed data while digital signatures can also provide evidence about origin, authenticity, and publisher identity.
Latest from the hash lab
Can Two Different Files Have the Same MD5 Hash?
Explore why different files can share an MD5 digest, the difference between accidental and engineered collisions, and what a matching checksum actually proves.
Brute-Force vs Dictionary Attacks on Password Hashes
Learn how brute-force and dictionary attacks select password guesses, why human password habits matter, and how slow password hashing raises attack costs.
SHA-256 vs SHA-3: What Developers Need to Know
Compare SHA-256 and SHA3-256, including their internal designs, digest sizes, security properties, interoperability, and appropriate use cases.
bcrypt vs Argon2id: Which Should You Use?
Compare bcrypt and Argon2id by security properties, hardware resistance, input handling, compatibility, and suitability for new or existing applications.
Argon2id Password Hashing Guide for Developers
A developer-focused guide to Argon2id, including memory cost, time cost, parallelism, salts, parameter tuning, and secure password verification.
What Is a Salt in Password Hashing?
Learn how unique random salts prevent identical passwords from creating identical stored records and reduce the effectiveness of precomputed attacks.
Password Hashing vs Encryption: What Developers Need to Know
Learn when data should be encrypted for later recovery and when passwords should be protected with one-way, purpose-built password hashing.
Is MD5 Still Safe to Use in 2026?
A clear assessment of where MD5 may still appear in non-security workflows and where its collision weaknesses make it an unacceptable choice.
What Is a Hash Collision?
Learn how two different inputs can produce the same hash, why collisions are mathematically unavoidable, and why practical collision attacks make MD5 unsafe.
Why MD5 Should Never Be Used for Password Storage
Understand why MD5 is unsafe for password storage and why modern systems should use Argon2id or another dedicated password-hashing function.
Why MD5 Hashes Differ Between Command-Line and Online Tools
Learn why MD5 results can differ between command-line and online tools, including hidden newlines, encoding differences, whitespace, and file handling.
How to Verify a File Checksum on Windows, macOS, and Linux
A practical guide to calculating and comparing file checksums with built-in tools on Windows, macOS, and Linux before installing or archiving downloads.
MD5 vs SHA-256: What Is the Difference?
Compare MD5 and SHA-256 by digest length, collision resistance, performance, and practical use to understand which algorithm belongs in modern systems.
How an MD5 Checksum Helps Verify File Integrity
Understand how MD5 checksums detect changed or corrupted files, where they remain useful, and why SHA-256 is a better choice for new verification workflows.
Can MD5 Be Decrypted? The Honest Answer
A practical explanation of why MD5 cannot truly be decrypted, how lookup databases and password guessing work, and why weak inputs may still be identified.
MD5 Encryption vs Hashing: What People Usually Mean
Learn why MD5 is a hashing algorithm rather than encryption, how hashing differs from reversible encryption, and why the distinction matters for developers.
What Is MD5 Hashing and Why Is It Still Used?
A beginner-friendly explanation of MD5 hashing, how it creates fixed-length digests, where it still appears, and why it should not be used for modern security.