diff --git a/app/src/main/kotlin/com/syncflow/data/providers/sftp/TofuHostKeyVerifier.kt b/app/src/main/kotlin/com/syncflow/data/providers/sftp/TofuHostKeyVerifier.kt
index 8a38f3f..465a904 100644
--- a/app/src/main/kotlin/com/syncflow/data/providers/sftp/TofuHostKeyVerifier.kt
+++ b/app/src/main/kotlin/com/syncflow/data/providers/sftp/TofuHostKeyVerifier.kt
@@ -24,6 +24,10 @@ class TofuHostKeyVerifier(private val credentialStore: CredentialStore) : HostKe
         }
     }
 
+    // Return empty list so sshj uses server preference order for key exchange.
+    // Our verify() will accept or reject whatever algorithm is negotiated.
+    override fun findExistingAlgorithms(hostname: String, port: Int): List<String> = emptyList()
+
     private fun sha256Fingerprint(key: PublicKey): String {
         val digest = MessageDigest.getInstance("SHA-256").digest(key.encoded)
         return digest.joinToString(":") { "%02x".format(it) }