SSH Key Fingerprint Viewer
Paste an SSH public key (the contents of id_ed25519.pub or authorized_keys) to see the same SHA256 and MD5 fingerprints that ssh-keygen -l prints. Everything runs in your browser, and your key is never sent to a server.
🔒 Runs in your browser · Your data is never sent to a server
Notes
- Paste the public key (the contents of the .pub file). Do not paste a private key (-----BEGIN OPENSSH PRIVATE KEY----- and the like); this tool cannot read them.
- If you paste several lines, a result is shown for each line. Blank lines and lines starting with # are ignored.
- Supported key types are ssh-rsa, ssh-dss, ssh-ed25519, ecdsa-sha2-nistp256/384/521, and the security-key types sk-ssh-ed25519 and sk-ecdsa. Certificate keys (-cert-v01) are not supported.
- MD5 is the legacy format. Current OpenSSH shows SHA256 by default; MD5 is for comparing against older devices and documentation.
Glossary
Fingerprint
A hash of a public key. It is shorter than the key itself and is what people compare by eye to check that the key of a server they are connecting to for the first time is the right one.
authorized_keys
A file on the SSH server (~/.ssh/authorized_keys) that lists, one per line, the public keys allowed to log in.
ED25519
An elliptic-curve signature scheme with short keys and fast operations, and one of the standard choices for SSH keys today.
FAQ
Should I use the SHA256 or the MD5 fingerprint?
OpenSSH 6.8 and later show SHA256 by default. When comparing with what GitHub or a server displays, use the value that starts with "SHA256:". MD5 (the aa:bb:cc... form) is for older devices and documentation.
Why does the result differ from ssh-keygen -l?
You have most likely pasted a different key. Even one character of difference in the Base64 key data changes the value. The comment at the end (such as user@host) does not affect the fingerprint.
Can I get a fingerprint from a private key?
No. This tool only handles public keys and does not support private keys, so please do not paste one. You can extract the public key with "ssh-keygen -y -f <private key file>".
Can it read a known_hosts line?
Yes. Everything before the key type (ssh-ed25519 and so on) is skipped: the host name (or hashed host) at the start of a known_hosts line, or options such as command="..." at the start of an authorized_keys line.
Share this page