Trusted Hosts

MyShell Terminal records the host fingerprint of every server you connect to via SSH, and alerts you when it changes.

How It Works

On the first SSH connection to a server, its host fingerprint is recorded automatically. From then on, every connection is checked against the stored fingerprint.

The fingerprint uniquely identifies the server's host key. Reconnecting to the same server should always match — a mismatch means the server's identity has changed in some way.

Viewing Records

Location: Settings → Trusted Hosts

All fingerprint records are listed here — one entry per server you have connected to, with its recorded fingerprint.

Host Key Changes

If a server presents a fingerprint that no longer matches the stored record, MyShell Terminal detects the change. Common causes:

Cause	Typical Action
OS reinstall	Expected — remove the old record and reconnect
Man-in-the-middle attack	Stop and verify through a trusted channel first

After you have verified that the change is legitimate, remove the old record and reconnect to trust the new fingerprint.

Removing Records

You can remove any trust record manually at any time from the Trusted Hosts page — for example, before decommissioning a server or cleaning up old entries. Regular cleanup of entries for retired servers keeps the list meaningful, so real fingerprint changes stand out.

Be Careful with Unexpected Changes

If a fingerprint changes and you did not reinstall or reconfigure the server, treat it as suspicious and verify the server's identity before trusting the new key.