DE

↑ ↓ select, Enter open, Esc close

Show the fingerprint of an SSH key

harmlessSSHalle
Adjust the values, the command updates live
user@server
ssh-keygen -lf /etc/ssh/ssh_host_ed25519_key.pub

Shows the key length, SHA256 fingerprint, comment and type of a key. Run on the server, it returns the value the client displays on the first connection. This lets you verify that you are really talking to the right host.

Note: Also works with an authorized_keys file, in which case every key it contains is listed separately.

Also searched as

  • how to get ssh host key fingerprint
  • verify ssh fingerprint
  • ssh-keygen show fingerprint

Related one-liners

All in SSH

Remove an outdated host from known_hosts

$ssh-keygen -R server.example.com
cautionSSH

Change or set the passphrase of an SSH key

$ssh-keygen -p -f ~/.ssh/id_ed25519_server
cautionSSH

Derive the public key from a private SSH key

$ssh-keygen -y -f ~/.ssh/id_ed25519_server
harmlessSSH

Generate an Ed25519 SSH key pair

$ssh-keygen -t ed25519 -a 100 -C "admin@example.com" -f ~/.ssh/id_ed25519_server
harmlessSSH

Show the SHA-256 fingerprint of a certificate

$openssl s_client -connect example.com:443 -servername example.com </dev/null 2>/dev/null | openssl x509 -noout -fingerprint -sha256
harmlessSSL and certificates

Connect to an internal server through a jump host

$ssh -J admin@bastion.example.com webuser@10.0.0.12
harmlessSSH

Read first, then run.

The commands on myline.de act directly on servers, files and databases. A wrong path or placeholder can delete data irreversibly or make a server unreachable.

  • All commands are provided without warranty and are not tested on every system.
  • Understand what a command does before running it, and check every placeholder.
  • Make a backup first and, if possible, try it on a test system.
  • You run commands at your own risk. Liability for damages is excluded to the extent permitted by law.