SSH Key Inspector

Key Types Reference

Ed25519ExcellentBest choice - modern, fast, secure (OpenSSH 6.5+)
ECDSA-256/384/521GoodGood modern choice, NIST curves
RSA-4096StrongStrong but larger and slower; max compatibility
RSA-2048AcceptableStill acceptable; upgrade to 4096 recommended
DSADeprecatedDisabled by default in OpenSSH 7.0+

Privacy First: Your files are processed securely. Whenever possible, processing happens in your browser and files are never stored on our servers.

Inspect and validate SSH public keys entirely in the browser - no data uploaded. Paste a key in any common format (ssh-rsa, ssh-ed25519, ecdsa-sha2-nistp256/384/521, ssh-dss, ssh-ed448). The tool parses the base64-encoded key body to extract key type, bit length (for RSA and DSA), and curve name (for ECDSA/Ed25519). Computes the SHA-256 fingerprint (the format shown by ssh-keygen -l -E sha256) and the classic MD5 fingerprint (colon-separated hex pairs). Displays the key comment, base64 body length, and key prefix. Security assessment rates the key: Ed25519 = Excellent, ECDSA = Good, RSA-4096 = Strong, RSA-2048 = Acceptable, DSA = Deprecated. Warnings are shown for keys below 2048-bit RSA, deprecated DSA keys, or broken 1024-bit RSA. Detects accidental private key paste and alerts immediately.

How to Use

  1. 1Paste your SSH public key into the text area (copy from ~/.ssh/id_ed25519.pub or similar)
  2. 2Click 'Inspect Key' - key type, bits, and fingerprints appear instantly
  3. 3Copy the SHA-256 fingerprint to verify it against your server or hosting dashboard
  4. 4Check the Security Assessment for a rating and any warnings about weak key sizes
  5. 5Use 'Load example' to see how the tool works with a sample Ed25519 key

Features

  • Supports ssh-rsa, ssh-ed25519, ecdsa-sha2-nistp256/384/521, ssh-dss, ssh-ed448
  • Parses base64 key body to extract key type, bit length, and curve name
  • SHA-256 fingerprint (OpenSSH default format: SHA256:…)
  • MD5 fingerprint (colon hex pairs: MD5:xx:yy:…)
  • Security rating: Excellent / Good / Strong / Acceptable / Deprecated
  • Warnings for RSA <2048 bits, broken RSA-1024, deprecated DSA
  • Private key detection - alerts immediately if a private key is pasted
  • Key comment and base64 body length shown
  • 100% browser-based - key data never leaves your device

Frequently Asked Questions

Guest PlanUpgrade
Operations today0 / 3
5 MB max fileNo batch
Upgrade for more

Community Feedback

Like

00

Total Rating

No ratings yet

Reviews

No reviews yet. Be the first!

Rate & Review

Was this tool helpful?

Rate this tool:

Write a Review

0/500

/ share this tool