RSA Key Generator
Generate cryptographically secure public and private RSA key pairs instantly. Use them for SSH authentication, SSL certificates, or encrypting database payloads.
How to Use
- Select your desired Key Size.
2048-bitis the industry standard for SSH keys and web certificates.4096-bitis highly secure but can take a few seconds to generate mathematically. - Click Generate New Key Pair. The tool will utilize your browser's native cryptographic engine to generate the math.
- Your Public Key can be safely uploaded to GitHub, shared with coworkers, or placed on remote servers.
- Your Private Key must be kept absolutely secret. Save it securely to your local machine using the Download .pem button.
Features
Web Crypto API
Relies entirely on the native, highly secure W3C Web Cryptography API built into your browser.
PEM Formatting
Outputs standard Privacy-Enhanced Mail (.pem) formatting compatible with OpenSSL and SSH.
Zero Dependencies
Does not rely on slow, outdated 3rd-party JavaScript libraries to perform the encryption.
100% Private
Keys are mathematically generated on your local CPU. Nothing is ever sent to a server.
Understanding Public-Key Cryptography
RSA is an asymmetric cryptographic algorithm. This means it relies on two mathematically linked keys instead of one.
- The Public Key: This key acts like an open padlock. You can give this padlock to anyone in the world (like GitHub or an AWS Server). They use it to lock (encrypt) data or verify your identity.
- The Private Key: This key is the only thing in the universe that can unlock the padlock. As long as you keep your Private Key securely hidden on your local computer, nobody else can read the messages encrypted by your Public Key, nor can they impersonate you.
If you lose your Private Key, you will lose access to any servers or encrypted data protected by the Public Key. It cannot be recovered or mathematically reverse-engineered.
The Security Developer Suite
If you are generating keys for a new database, ensure your user passwords are secure by hashing them with our Bcrypt Generator. If you need to generate a secure 64-character password for an API token, use the Random Password Generator. Need to inspect an encrypted authentication token? Use the JWT Decoder.
Frequently Asked Questions
Why does the 4096-bit key take a few seconds to generate?
RSA relies on finding massive prime numbers. Generating a 4096-bit key requires the computer to calculate numbers that are hundreds of digits long. This extreme mathematical complexity guarantees its security but requires immense CPU processing power.
Are you saving my Private Key on your server?
Absolutely not. This tool utilizes the window.crypto.subtle.generateKey() API, which runs natively in your local browser's memory. No data is transmitted across the internet. In fact, you can turn off your Wi-Fi and still generate keys perfectly.
What format are these keys?
The keys are exported using standard SPKI (Public) and PKCS#8 (Private) structures, and base64-encoded into the universal PEM format. This makes them fully compatible with OpenSSL, Node.js, PHP, Python, and SSH terminals.
Is it free?
Yes, 100% free with no limits.