Security Tools

🔑 SSH Key Analyzer

Paste an SSH public key to analyse it: type, bit length, comment, fingerprint and whether it is secure. Also generates ready-to-copy ssh-keygen commands.

Generate the optimal ssh-keygen command for each use case. All commands can be copied directly on Kali/Ubuntu/macOS.

ED25519 (recomendado) Most secure and fastest. 256-bit key equivalent to RSA 3072. Supported since OpenSSH 6.5.
ssh-keygen -t ed25519 -C 'user@host' -f ~/.ssh/id_ed25519
🔒 RSA 4096 Maximum compatibility. Use when server does not support ED25519.
ssh-keygen -t rsa -b 4096 -C 'user@host' -f ~/.ssh/id_rsa
🔐 ECDSA P-256 Good alternative to ED25519. Supported on more legacy platforms.
ssh-keygen -t ecdsa -b 256 -C 'user@host' -f ~/.ssh/id_ecdsa
🔒⭐ ED25519 con passphrase Same as ED25519 but with passphrase. Maximum security for personal use.
ssh-keygen -t ed25519 -C 'user@host' -f ~/.ssh/id_ed25519
# Te pedirá passphrase durante la generación
⚙️ Clave para CI/CD (sin passphrase) For automated pipelines. Store private key in CI/CD secrets.
ssh-keygen -t ed25519 -C 'ci-deploy@pipeline' -f ~/.ssh/deploy_key -N ''
🖥️ Clave de servidor (host key) To regenerate SSH server host keys.
# ED25519 host key:
ssh-keygen -t ed25519 -f /etc/ssh/ssh_host_ed25519_key -N ''
# RSA host key:
ssh-keygen -t rsa -b 4096 -f /etc/ssh/ssh_host_rsa_key -N ''

Enter the SSH server to audit and generate commands to check its configuration and detect weaknesses.

Frequently asked questions

What does it assess about SSH?
The strength of an SSH key (type and size) and configuration recommendations (algorithms, server hardening).
Does it need my private key?
No; it works with the public key. Never paste your private key into any website.
Does it give hardening commands?
Yes, to harden the SSH server configuration.