Advertisement

MD4 hash generator

Compute the MD4 message digest of any text, instantly and privately in your browser. MD4 produces a 128-bit hash, shown here as 32 hexadecimal characters.

Input

MD4 digests are 32 hexadecimal characters. The same input always gives the same digest.

Nothing is uploaded. Everything is computed locally in your browser.
MD4 digest

The digest appears below in hexadecimal.

-
Advertisement

What MD4 is

MD4 (Message Digest 4) is a hash function designed by Ronald Rivest in 1990 and specified in RFC 1320. It processes input in 512-bit blocks through three rounds of 16 operations and outputs a fixed 128-bit digest, usually written as 32 hexadecimal characters. MD4 directly influenced the designs of MD5, SHA-1 and RIPEMD.

Security status

MD4 is considered broken: practical collision attacks were published in the mid-1990s, and collisions can now be found in well under a second. Never use MD4 for passwords, signatures or any security purpose. It remains useful for checksums, legacy NTLM hash research and non-security fingerprints.

MD4 Hash FAQs

What is the MD4 hash of an empty string?
The MD4 digest of an empty string is 31d6cfe0d16ae931b73c59d7e0c089c0. You can verify this tool against that known test vector from RFC 1320, along with the vector for 'abc': a448017aaf21d8525fc10ae87aa6729d.
Is MD4 secure?
No. MD4 has been broken since the 1990s; collisions can be generated almost instantly on modern hardware. Use SHA-256 or SHA-3 for anything security related, and bcrypt or Argon2 for passwords.
Where is MD4 still used?
MD4 survives mainly in legacy systems: the NTLM password hash used by older Windows networks is essentially MD4 of a UTF-16 encoded password, and some old file-sharing protocols used it for checksums.
How long is an MD4 hash?
Always 128 bits, displayed as 32 hexadecimal characters, regardless of input length. Even a single changed character in the input produces a completely different digest.
Is my text sent to a server?
No. The MD4 implementation here is hand-written JavaScript running on your device. Nothing you type is uploaded or stored anywhere.
Advertisement