Initializing, please wait a moment

Cac Lua Chon Thay The MD5: bcrypt vs Argon2id vs SHA-256 - Khi Nao Moi Cai Phu Hop

Cap nhat lan cuoi 2026-05-02. Neu ban den day de co gang khoi phuc mat khau dang van ban thuan tu hash MD5, hay doc Why MD5 Cannot Be Decrypted truoc - cau tra loi ngan la khong co khoa, va tra cuu rainbow-table chi hoat dong cho cac dau vao rat pho bien. Trang nay bao tru viec dung cai gi thay vao, theo truong hop su dung.

Cau tra loi trong 30 giay. Lua chon thay the dung cho MD5 phu thuoc vao cong viec. Luu tru mat khau? Dung Argon2id (khuyen nghi hien tai cua OWASP) hoac bcrypt (ho tro thu vien rong). Bao ve toan ven chong doi thu? Dung SHA-256 voi HMAC. Dao chu khoa tu mat khau? Dung PBKDF2 (moi truong yeu cau FIPS) hoac Argon2id o noi khac. Khoa cache, ETag, khu trung lap tren du lieu khong doi thu? MD5 van on - chay qua trinh chuyen doi MD5.

Quyet dinh trong mot bang

Truong hop su dungChonVi saoKhong chon MD5 vi
Luu mat khau nguoi dung (web, di dong, API)Argon2id (uu tien), bcrypt (du phong)Cung-bo-nho + chi phi tinh chinh; chong vet can GPUMD5 qua nhanh - GPU bam ham hang ti hash/giay, mat khau pho bien sup do trong mili giay
DB mat khau MD5 hien co (cu)Di chuyen sang Argon2id o lan dang nhap tiep theoBoc MD5(mat khau) ben trong Argon2id trong khi reset cuonHash MD5 thuan ro ri nhanh; gia su bi xam pham khi tiet lo
Toan ven tep chong dau vao doi thuSHA-256Tan cong va cham thuc te chong MD5 tu 2004; SHA-256 van an toanKe tan cong co the tao hai tep khac nhau cung MD5
Toan ven tep chi chong loi hong ngau nhienMD5 hoac SHA-256 (cai nao cung duoc)Du lieu tu nhien khong va cham voi MD5 trong thuc te(MD5 chap nhan o day; chon theo tien loi cua toolchain)
Xac thuc thong diep (HMAC)HMAC-SHA-256HMAC gan khoa vao hash; HMAC-MD5 vo hieu trong thuc teHMAC-MD5 da bi NIST va IETF khong tan thanh
Dao chu khoa tu mat khauArgon2id (uu tien), PBKDF2 (FIPS)Thiet ke cho dao mat khau-thanh-khoa voi he so chi phiMD5 khong co he so chi phi; tao ra cung digest trong nano giay
Khoa cache, ETag, khoa khu trung lapMD5 (on)Dau van tay do dai co dinh tu dau vao tuy y; va cham khong quan trong cho du lieu khong doi thu(day la noi MD5 van xung dang vi tri)
Luu tru theo dia chi noi dung (CAS) duoi anh huong ke tan congSHA-256Tan cong va cham se cho ke tan cong thay the noi dung voi cung dia chiMD5 khong the dam bao tinh duy nhat chong cac dau vao duoc tao

Argon2id vs bcrypt cho mat khau

Argon2id la hash mat khau duoc OWASP khuyen nghi tu 2022. No la cung-bo-nho, nghia la ke tan cong GPU phai cap phat hang tram megabyte cho moi lan doan song song. Diem khoi dau khuyen nghi la Argon2id, m=64MB, t=3, p=4. He so chi phi mo rong theo phan cung: danh gia lai moi hai nam va tang cac tham so.

bcrypt la a quan duoc ho tro tot. No cu hon (1999), su dung he so chi phi co the tinh chinh bieu thi nhu log2 cua so lan lap (chi phi 12 vao thoi diem viet bai). No khong cung-bo-nho, day la diem yeu chinh so voi Argon2id, nhung ho tro thu vien cua no qua moi framework web rong hon. Chon bcrypt chi khi nen tang cua ban chua co ket noi Argon2id duoc duy tri.

Ca hai deu dung trong 2026. Khong luu mat khau dang MD5 + salt - so do do sup do truoc mot GPU don le trong vai ngay ngay ca voi salt ngau nhien dai, vi MD5 la nut that, khong phai salting.

SHA-256 vs MD5 cho toan ven

Neu dau vao co the duoc tao boi ke tan cong, dung SHA-256. Tan cong Wang 2004 va va cham Stevens / Lenstra 2008 chong chung chi X.509 da chi ra rang hai dau vao khac nhau co the duoc tao de chia se mot MD5 duy nhat. Cho chu ky so, ky ma, hoac bat ky thu gi ke tan cong co the thay the noi dung cua ho cho cua ban, MD5 vo hieu; SHA-256 la nguyen ham dung.

Neu dau vao chi la mot tai xuong ban kiem soat hoac mot artifact build ban tao ra, MD5 van on cho kiem tra toan ven. No bat cac bit lat ngau nhien ban thuc su thay trong thuc te (tia vu tru, cap xau, dia xau). Toan bo tap trade-off MD5 vs SHA-256 trong MD5 vs SHA-256 - khi nao bam ham voi moi cai.

PBKDF2 - duong FIPS

PBKDF2 la ham dao khoa dua tren mat khau ma NIST chap nhan vao 2000. No dua tren lap: ban chon mot so dem, chay mot hash co so so lan do, va he so cong viec theo do. No khong cung-bo-nho, vi vay yeu hon Argon2id chong GPU hien dai, nhung la lua chon dung khi moi truong cua ban yeu cau thuat toan FIPS 140-2 / 140-3. So lap su dung trong 2026 voi HMAC-SHA-256 ben duoi la 600.000 hoac cao hon theo huong dan OWASP; voi HMAC-SHA-512 la 210.000 hoac cao hon. So thap hon van pho bien trong code cu; tang chung o lan trien khai tiep theo.

"MD5 van thuoc ve dau" - danh sach lam viec

  • Khoa cache. Bam mot URL dai hoac chuoi query thanh khoa do dai co dinh cho memcached, Redis hoac mot ten tep. Va cham khong quan trong; toc do quan trong.
  • Dau van tay noi dung kieu ETag. Phat MD5 cua mot than phan hoi nhu header ETag de cac client co the kiem tra lai ma khong tai xuong lai.
  • Kiem tra toan ven tep tren mot tai xuong ban tao ra. Cong bo MD5 ben canh tep; nguoi dung so sanh cuc bo. Nhieu mirror Linux van cong bo ca MD5 va SHA-256 vi tinh tuong thich.
  • Khu trung lap tai len den. Dau van tay luong byte voi MD5 de ngat mach luu tru ban sao chinh xac truoc khi ban giu lai.
  • Fixture kiem tra va ID snapshot. Bam mot blob JSON chinh tac de tao ID xac dinh cho fixture kiem tra don vi.

Voi tat ca nhung cai do, trinh chuyen doi MD5 la be mat dung - dan van ban, lay hash, sao chep ket qua.

Danh sach kiem tra di chuyen - chuyen mot app hien co khoi MD5

  1. Kiem toan noi MD5 duoc dung. Grep ma nguon cho md5, MessageDigest.getInstance("MD5"), hashlib.md5, crypto.createHash('md5'). Gan the moi su dung la mot trong: mat khau, MAC, toan ven, cache.
  2. Mat khau - di chuyen cuon. Them mot trinh xac minh Argon2id ben canh trinh xac minh MD5. O lan dang nhap thanh cong tiep theo, tinh lai mat khau duoi Argon2id, luu trinh xac minh moi, bo hang MD5. Xoay moi tai khoan trong 90 ngay; buoc reset bat ky cai gi con lai.
  3. MAC - thay bang HMAC-SHA-256. Trien khai HMAC-MD5 tu thoi 2010 trong API nen xoay khoa va phat hanh lai client voi HMAC-SHA-256.
  4. Toan ven chong doi thu - thay bang SHA-256. Bat ky thu gi ky noi dung do nguoi dung tai len, phan phoi goi, hoac code ben thu ba di sang SHA-256 ngay.
  5. Toan ven khong doi thu, cache, ETag, khu trung lap - de yen. Khong khuay dong code dang chay vi ly do ly thuyet. MD5 on o day.

Lien quan

Why trust these tools

  • Ten-plus years of web tooling. The freetoolonline editorial team has shipped browser-based utilities since 2015. The goal has never changed: get you to a working output fast, without an install.
  • Truly in-browser - no upload. Every file-processing tool on this site runs in your browser through modern Web APIs (File, FileReader, Canvas, Web Audio, WebGL, Web Workers). Your photo, PDF, audio, or text never leaves your device.
  • No tracking during tool use. Analytics ends at the page view. The actual input you paste, drop, or capture is never sent to any server and never written to any log.
  • Open-source core components. The processing engines underneath (libheif, libde265, pdf-lib, terser, clean-css, ffmpeg.wasm, and others) are public and audit-able. We link to each one in its tool page's footer.
  • Free, with or without ads. All tools are fully functional without sign-up. The Disable Ads button in the header is always available if you need a distraction-free run.