MessageDigest using MD5 or SHA-1 is cryptographically broken and unsuitable for security use.
Use SHA-256 or stronger; for passwords use bcrypt, scrypt, or Argon2.