diff --git a/src/main/java/org/cryptomator/ui/keyloading/hub/CheckHostTrustController.java b/src/main/java/org/cryptomator/ui/keyloading/hub/CheckHostTrustController.java
index 18bdbfead..aa5ce3c1e 100644
--- a/src/main/java/org/cryptomator/ui/keyloading/hub/CheckHostTrustController.java
+++ b/src/main/java/org/cryptomator/ui/keyloading/hub/CheckHostTrustController.java
@@ -6,6 +6,8 @@ import org.cryptomator.common.settings.Settings;
 import org.cryptomator.ui.common.FxController;
 import org.cryptomator.ui.common.FxmlFile;
 import org.cryptomator.ui.common.FxmlScene;
+import org.cryptomator.ui.controls.FontAwesome5Icon;
+import org.cryptomator.ui.controls.FontAwesome5IconView;
 import org.cryptomator.ui.keyloading.KeyLoading;
 import org.cryptomator.ui.keyloading.KeyLoadingScoped;
 import org.jetbrains.annotations.VisibleForTesting;
@@ -13,14 +15,24 @@ import org.slf4j.Logger;
 import org.slf4j.LoggerFactory;
 
 import javax.inject.Inject;
+import javafx.animation.PauseTransition;
 import javafx.application.Platform;
 import javafx.beans.property.SimpleStringProperty;
 import javafx.beans.property.StringProperty;
 import javafx.fxml.FXML;
+import javafx.geometry.Pos;
+import javafx.scene.Node;
 import javafx.scene.Scene;
-import javafx.scene.text.Text;
-import javafx.scene.text.TextFlow;
+import javafx.scene.control.Hyperlink;
+import javafx.scene.control.Label;
+import javafx.scene.control.Tooltip;
+import javafx.scene.input.Clipboard;
+import javafx.scene.input.ClipboardContent;
+import javafx.scene.layout.HBox;
+import javafx.scene.layout.Priority;
+import javafx.scene.layout.VBox;
 import javafx.stage.Stage;
+import javafx.util.Duration;
 import java.net.URI;
 import java.util.ResourceBundle;
 import java.util.Set;
@@ -35,7 +47,11 @@ public class CheckHostTrustController implements FxController {
 	private static final String CHECK_KEY = "hub.checkHostTrust.message.check";
 	private static final String ASK_SINGULAR_KEY = "hub.checkHostTrust.message.ask";
 	private static final String ASK_PLURAL_KEY = "hub.checkHostTrust.message.ask.plural";
+	private static final String DESCRIPTION_SINGULAR_KEY = "hub.checkHostTrust.description.ask";
+	private static final String DESCRIPTION_PLURAL_KEY = "hub.checkHostTrust.description.ask.plural";
+	private static final String COPY_TOOLTIP_KEY = "hub.checkHostTrust.copyBtn.tooltip";
 	private static final String TRUSTED_CRYPTOMATOR_CLOUD_DOMAIN = ".cryptomator.cloud";
+	private static final Duration COPIED_INDICATION_DURATION = Duration.seconds(2);
 
 	private final Stage window;
 	private final HubConfig hubConfig;
@@ -49,9 +65,10 @@ public class CheckHostTrustController implements FxController {
 	private final ResourceBundle resourceBundle;
 	private final SortedSet<String> hostnames;
 	private final StringProperty messageLabel;
+	private final StringProperty descriptionLabel;
 
 	@FXML
-	private TextFlow hostnamesFlow;
+	private VBox hostnamesBox;
 
 	@Inject
 	public CheckHostTrustController(@KeyLoading Stage window, //
@@ -74,6 +91,7 @@ public class CheckHostTrustController implements FxController {
 		this.resourceBundle = resourceBundle;
 		this.hostnames = new TreeSet<>();
 		this.messageLabel = new SimpleStringProperty(resourceBundle.getString(CHECK_KEY));
+		this.descriptionLabel = new SimpleStringProperty("");
 	}
 
 	@FXML
@@ -117,12 +135,41 @@ public class CheckHostTrustController implements FxController {
 	}
 
 	private void renderHostnames() {
-		hostnamesFlow.getChildren().clear();
+		hostnamesBox.getChildren().clear();
 		for (var hostname : hostnames) {
-			hostnamesFlow.getChildren().add(new Text(hostname + System.lineSeparator()));
+			hostnamesBox.getChildren().add(createHostnameRow(hostname));
 		}
-		var messageKey = hostnames.size() > 1 ? ASK_PLURAL_KEY : ASK_SINGULAR_KEY;
-		messageLabel.set(resourceBundle.getString(messageKey));
+		var plural = hostnames.size() > 1;
+		messageLabel.set(resourceBundle.getString(plural ? ASK_PLURAL_KEY : ASK_SINGULAR_KEY));
+		descriptionLabel.set(resourceBundle.getString(plural ? DESCRIPTION_PLURAL_KEY : DESCRIPTION_SINGULAR_KEY));
+	}
+
+	private Node createHostnameRow(String hostname) {
+		var label = new Label(hostname);
+		label.setWrapText(true);
+		HBox.setHgrow(label, Priority.ALWAYS);
+
+		var icon = new FontAwesome5IconView();
+		icon.setGlyph(FontAwesome5Icon.COPY);
+		var copyLink = new Hyperlink(null, icon);
+		copyLink.setTooltip(new Tooltip(resourceBundle.getString(COPY_TOOLTIP_KEY)));
+		copyLink.setAccessibleText(resourceBundle.getString(COPY_TOOLTIP_KEY));
+		copyLink.setOnAction(_ -> copyToClipboard(hostname, icon));
+
+		var row = new HBox(6, label, copyLink);
+		row.setAlignment(Pos.CENTER_LEFT);
+		return row;
+	}
+
+	private void copyToClipboard(String hostname, FontAwesome5IconView icon) {
+		var clipboardContent = new ClipboardContent();
+		clipboardContent.putString(hostname);
+		Clipboard.getSystemClipboard().setContent(clipboardContent);
+
+		icon.setGlyph(FontAwesome5Icon.CHECK);
+		var resetIcon = new PauseTransition(COPIED_INDICATION_DURATION);
+		resetIcon.setOnFinished(_ -> icon.setGlyph(FontAwesome5Icon.COPY));
+		resetIcon.play();
 	}
 
 	private boolean isConsistentHubConfig() {
@@ -176,4 +223,12 @@ public class CheckHostTrustController implements FxController {
 		return messageLabel.get();
 	}
 
+	public StringProperty descriptionLabelProperty() {
+		return descriptionLabel;
+	}
+
+	public String getDescriptionLabel() {
+		return descriptionLabel.get();
+	}
+
 }
diff --git a/src/main/resources/css/AtkinsonHyperlegibleMono-Regular.ttf b/src/main/resources/css/AtkinsonHyperlegibleMono-Regular.ttf
new file mode 100644
index 000000000..157d62eab
Binary files /dev/null and b/src/main/resources/css/AtkinsonHyperlegibleMono-Regular.ttf differ
diff --git a/src/main/resources/css/dark_theme.css b/src/main/resources/css/dark_theme.css
index bb23af18c..f4416282c 100644
--- a/src/main/resources/css/dark_theme.css
+++ b/src/main/resources/css/dark_theme.css
@@ -20,6 +20,10 @@
 	src: url('firacode_regular.ttf');
 }
 
+@font-face {
+	src: url('AtkinsonHyperlegibleMono-Regular.ttf');
+}
+
 /*******************************************************************************
  *                                                                             *
  * Root Styling & Colors                                                       *
@@ -141,6 +145,17 @@
 	-fx-font-size: 1.1em;
 }
 
+.hostname-list {
+	-fx-background-color: CONTROL_BORDER_NORMAL, CONTROL_BG_NORMAL;
+	-fx-background-insets: 0, 1px;
+	-fx-background-radius: 4px;
+	-fx-padding: 6px 8px 6px 8px;
+}
+
+.hostname-list .label {
+	-fx-font-family: 'Atkinson Hyperlegible Mono';
+}
+
 /*******************************************************************************
  *                                                                             *
  * Glyph Icons                                                                 *
diff --git a/src/main/resources/css/light_theme.css b/src/main/resources/css/light_theme.css
index dcbee907f..68e2a099e 100644
--- a/src/main/resources/css/light_theme.css
+++ b/src/main/resources/css/light_theme.css
@@ -20,6 +20,10 @@
 	src: url('firacode_regular.ttf');
 }
 
+@font-face {
+	src: url('AtkinsonHyperlegibleMono-Regular.ttf');
+}
+
 /*******************************************************************************
  *                                                                             *
  * Root Styling & Colors                                                       *
@@ -141,6 +145,17 @@
 	-fx-font-size: 1.1em;
 }
 
+.hostname-list {
+	-fx-background-color: CONTROL_BORDER_NORMAL, CONTROL_BG_NORMAL;
+	-fx-background-insets: 0, 1px;
+	-fx-background-radius: 4px;
+	-fx-padding: 6px 8px 6px 8px;
+}
+
+.hostname-list .label {
+	-fx-font-family: 'Atkinson Hyperlegible Mono';
+}
+
 /*******************************************************************************
  *                                                                             *
  * Glyph Icons                                                                 *
diff --git a/src/main/resources/fxml/hub_check_host_trust.fxml b/src/main/resources/fxml/hub_check_host_trust.fxml
index e93936a93..d124948e2 100644
--- a/src/main/resources/fxml/hub_check_host_trust.fxml
+++ b/src/main/resources/fxml/hub_check_host_trust.fxml
@@ -11,12 +11,11 @@
 <?import javafx.scene.layout.StackPane?>
 <?import javafx.scene.layout.VBox?>
 <?import javafx.scene.shape.Circle?>
-<?import javafx.scene.text.TextFlow?>
 <HBox xmlns:fx="http://javafx.com/fxml"
 	  xmlns="http://javafx.com/javafx"
 	  fx:controller="org.cryptomator.ui.keyloading.hub.CheckHostTrustController"
-	  minWidth="400"
-	  maxWidth="400"
+	  minWidth="450"
+	  maxWidth="450"
 	  minHeight="145"
 	  spacing="12"
 	  alignment="TOP_LEFT"
@@ -34,13 +33,15 @@
 				<FontAwesome5IconView styleClass="glyph-icon-white" glyph="QUESTION" glyphSize="24"/>
 			</StackPane>
 		</Group>
-		<VBox HBox.hgrow="ALWAYS">
+		<VBox HBox.hgrow="ALWAYS" spacing="6">
 			<Label styleClass="label-large" text="${controller.messageLabel}" wrapText="true" textAlignment="LEFT">
 				<padding>
 					<Insets bottom="6" top="6"/>
 				</padding>
 			</Label>
-			<TextFlow fx:id="hostnamesFlow" styleClass="text-flow" minHeight="60"/>
+			<Label text="${controller.descriptionLabel}" wrapText="true" textAlignment="LEFT" visible="${!controller.descriptionLabel.empty}" managed="${!controller.descriptionLabel.empty}"/>
+			<!-- The box is filled in the controller, see createHostNamesRow() -->
+			<VBox fx:id="hostnamesBox" styleClass="hostname-list" spacing="4" visible="${!controller.descriptionLabel.empty}" managed="${!controller.descriptionLabel.empty}"/>
 			<Region VBox.vgrow="ALWAYS" minHeight="18"/>
 			<ButtonBar buttonMinWidth="120" buttonOrder="+CX">
 				<buttons>
diff --git a/src/main/resources/i18n/strings.properties b/src/main/resources/i18n/strings.properties
index ad04e102b..f6a13b276 100644
--- a/src/main/resources/i18n/strings.properties
+++ b/src/main/resources/i18n/strings.properties
@@ -173,6 +173,9 @@ hub.noKeychain.openBtn=Open Preferences
 hub.checkHostTrust.message.check=Checking Configuration…
 hub.checkHostTrust.message.ask=Trust this host?
 hub.checkHostTrust.message.ask.plural=Trust these hosts?
+hub.checkHostTrust.description.ask=Cryptomator does not recognize this host. To unlock the vault, it needs to be trusted. Only trust it if you recognize the address below.
+hub.checkHostTrust.description.ask.plural=Cryptomator does not recognize these hosts. To unlock the vault, they need to be trusted. Only trust them if you recognize the addresses below.
+hub.checkHostTrust.copyBtn.tooltip=Copy address to clipboard
 hub.checkHostTrust.trustBtn=Trust
 hub.checkHostTrust.denyBtn=Deny
 ### Waiting