Check where SSH connections originate and where credentials are stored. shellivo connects from the desktop and encrypts remembered passwords and keys through operating-system secure storage; SSH credentials are not uploaded to the platform. Website accounts and orders are separate online services.
A private key identifies you; a fingerprint identifies the server
Your private key authenticates you to the server. The server host key identifies the remote endpoint. Possessing the correct user key does not prove that the endpoint is legitimate, so verify its fingerprint through a trusted channel on first use.
Check local protection before saving credentials
shellivo reads a private key when you explicitly select its file. Remembered credentials are encrypted in the desktop environment. If operating-system secure storage is unavailable, turn off persistence rather than treating plaintext configuration as encrypted storage.
Encryption at rest does not protect an already compromised user account or running process. The app needs credentials while connecting, and backups, shared-device access and OS account permissions remain separate concerns.
Investigate a changed host fingerprint
A reinstall, key rotation or address change can alter a fingerprint; it can also indicate the wrong endpoint. shellivo records confirmed fingerprints by host and port and stops authentication on a mismatch.
Confirm the new fingerprint and the reason for the change through a cloud console or administrator before updating a saved record. Do not disable host verification globally to suppress the error.
Four questions to ask when choosing a tool
- Does SSH originate from your computer or a third-party server?
- Are passwords and keys encrypted locally, synchronized, or entered each time?
- How is the first fingerprint verified, and can a changed key block authentication?
- Are website accounts, subscriptions and SSH credentials clearly distinguished?
Questions
Can private-key users skip fingerprint verification?
No. They identify different parties; private-key authentication does not replace server identity verification.
Does keeping keys local mean the whole product is offline?
No. Sign-in, orders and account access may use online services. Check their data boundaries separately from SSH credentials.
shellivo
Check supported platforms, available downloads and installation notes.