Skip to content

← ToolsSecurity

Keypair generator.

RSA, EC (P-256/384/521) and AES keys via WebCrypto. Private keys stay masked until you reveal them.

Client-onlyPEM · JWK
Size
Public keySHA256: —…
Press Generate — keys are made in this tab via WebCrypto.
Private key · hidden
••••••••••••••••••••••••••••••••
Made on demand — stored in memory only
Never share · never email

Dev/testing use. Generated with crypto.subtle.generateKey + CSPRNG. For prod-critical keys prefer ssh-keygen / openssl in a locked-down env.

🔒 Privacy — runs 100% locally

No uploads · no cookies · works offline after load. View Source if you don't believe it.

How to use.

  1. Pick RSA, EC or AES, then a size/curve.
  2. Press Generate — WebCrypto mints the key in this tab.
  3. Reveal the private key only to copy it, then Clear memory.

Related tools.

FAQ.

Which algorithm should I pick?

RSA 2048 for maximum compatibility (legacy SSH/TLS), EC P-256 for modern/small keys, AES-256 for symmetric encryption.

Can I use these in production?

For development, yes. For production-critical infrastructure, generate in a locked-down environment with ssh-keygen/openssl and keep private keys in a vault.