See the randomart picture of an SSH public key, the one ssh-keygen -lv draws
Runs in your browser. Nothing you type is sent anywhere. Checked against sources on 17 Oct 2026.The randomart picture is a 17 by 9 drawing made from a key fingerprint, so a changed host key is easy to spot by eye; ssh shows it with VisualHostKey=yes and ssh-keygen -lv prints it. Paste any SSH public key and see the same picture, for SHA256 or the older MD5 fingerprint, drawn exactly as OpenSSH draws it.
Paste or type your input.
Choose the options you need.
Press Ctrl+Enter, then copy or download.
A fingerprint is how people compare SSH keys without reading hundreds of Base64 characters. GitHub's SSH keys page, the "authenticity of host can't be established" prompt and server logs all show one. This page computes it from the key you paste, so you can match a key in authorized_keys to a person, or check a host key before trusting it.
| Field | Example |
|---|---|
| Type and size | ED25519 256, RSA 3072, ECDSA 521 |
| SHA256 fingerprint | SHA256: then 43 Base64 characters, the default since OpenSSH 6.8 |
| MD5 fingerprint | MD5: then 16 hex pairs, still shown by some older tools and clouds |
| Randomart | The 17 by 9 picture ssh-keygen -lv draws |
| Comment, options, hosts | From the .pub, authorized_keys or known_hosts line |
Warnings that matter. A DSA key is flagged, because OpenSSH disabled DSA by default in 7.0 and removed it in 10.0. An RSA key under 2048 bits is flagged too; ssh-keygen now makes 3072-bit RSA keys by default. Paste a private key by mistake and the page refuses it and tells you how to get the public half.
The rest of the article, and all 6 questions about SSH Key Fingerprint, are on the SSH Key Fingerprint page.
On the command line, ssh-keygen -lf ~/.ssh/id_ed25519.pub prints it. Here, paste the contents of the .pub file and the same line appears: the size, the SHA256 fingerprint, the comment and the type. Use the public key only; the private key is never needed for a fingerprint.
Randomart is a 17 by 9 character drawing made by walking a fingerprint two bits at a time, the drunken bishop method. People recognise a changed picture faster than a changed hash, which is why ssh can show it with VisualHostKey=yes. The picture here matches ssh-keygen -lv exactly.
Paste the key that starts with ---- BEGIN SSH2 PUBLIC KEY ---- and copy the OpenSSH line shown for it, which starts with ssh-rsa or ssh-ed25519 and can go straight into authorized_keys. The fingerprint stays the same, which proves only the format changed and not the key.
Public keys are designed to be shared, and nothing is sent anyway: the page works out the fingerprints in your browser. A private key is refused with a warning and never processed. Never paste a private key into any website; the matching .pub file is all a fingerprint needs.
Rates and rules change; check the source before you rely on a figure.
Still stuck? Ask about SSH Key Fingerprint and anybody who knows can answer. No account needed.
Same job, other tools: 2FA Code Generator – Get the current two-factor code from a setup key, without a phone.
On the related tools: JWT Decoder – Paste a token to read its header, payload and expiry · Passphrase Generator – Three to ten random words you can actually remember.