What are hashed hostnames in known_hosts?

OpenSSH uses HMAC-SHA1 hashing (indicated by lines starting with |1|) to protect server hostnames and IP addresses from malware scraping ~/.ssh/known_hosts to map local networks.

How does this tool compute SHA-256 key fingerprints?

The tool decodes the Base64 public key bytes and computes a SHA-256 cryptographic digest using the browser's native WebCrypto API (crypto.subtle.digest).

SSH known_hosts Inspector & Fingerprint Calculator

Analyze OpenSSH ~/.ssh/known_hosts files. Decode plain and hashed hostnames (|1|...), compute SHA-256 cryptographic fingerprints, and inspect key algorithms with 100% offline privacy.

Total Keys 0

Ed25519 Keys 0

RSA Keys 0

Hashed Hosts 0

PASTE ~/.ssh/known_hosts CONTENT 0 lines

PARSED HOST KEYS & SHA-256 FINGERPRINTS 0 entries

Host / Marker	Key Algorithm	SHA-256 Fingerprint	Key Size
Paste a known_hosts file to parse entries.

Frequently Asked Questions

How do I compare an SSH fingerprint?

When you connect to an SSH server for the first time, your terminal prints ED25519 key fingerprint is SHA256:.... You can verify that string against the computed SHA-256 fingerprint in this table to prevent Man-in-the-Middle (MITM) attacks.

Why are RSA keys flagged?

Modern OpenSSH installations deprecate SHA-1 RSA keys. Ed25519 is recommended due to higher cryptographic resistance and smaller key lengths.