Key Pair Generator

Ed25519 or RSA key pairs generated with the browser's Web Crypto API. The private key is rendered on this page and never transmitted anywhere.

Generation happens entirely in your browser via the Web Crypto API. No key material is ever sent over the network or written to storage. Clicking "Generate New Key Pair" replaces the pair shown below — nothing is saved, so copy or download the keys you need before regenerating or leaving the page.

Algorithm

Algorithm: {{ algoLabel }} Comment: alexrel Fingerprint: {{ fp }}

Public Key OpenSSH format

Generate a key pair to see the OpenSSH public key here.

Private Key PKCS8 PEM

Generate a key pair to see the private key here.

This is PKCS8 PEM, the generic format produced by the Web Crypto API — not the OpenSSH private-key container format that ssh-keygen writes to ~/.ssh/id_ed25519. Some OpenSSH clients accept PKCS8 directly; others require converting it first (e.g. ssh-keygen -p -f key.pem).

About this tool

Ed25519 is a modern elliptic-curve algorithm — small keys, fast signing, and the recommended default for new SSH keys.

RSA-2048 / RSA-4096 is the older, more widely compatible option, useful when a target system doesn't yet support Ed25519.

Key generation and export use the browser's native Web Crypto API. Nothing is transmitted, logged, or stored — keys exist only in this page's memory until you copy or download them.