Key pair generator
Generate a public/private key pair by algorithm, in the formats servers and libraries expect: PEM, JWK and the one-line OpenSSH public key. The keys are made by your browser and never leave this page.
The private key exists only in this page: reloading loses it. Save it somewhere safe and never share it. For production systems, prefer keys generated and held by your platform’s key management.
Se ejecuta por completo en tu navegador: no se envía nada a ningún sitio
The formats
- PEM is Base64 between BEGIN and END lines: PKCS#8 for private keys, SPKI for public ones. Most servers and libraries read it.
- JWK is JSON, used by JWT libraries and JWKS endpoints.
- OpenSSH is the single line that goes into authorized_keys.
Which algorithm should I choose?
Ed25519 for signing and SSH wherever it is supported: small, fast and hard to misuse. ECDSA P-256 where a standard asks for it, and RSA 3072 or more for older systems.
Can I use the key with SSH?
Add the OpenSSH line to authorized_keys on the server. For the private key, OpenSSH reads PKCS#8 PEM for RSA and ECDSA; for Ed25519, ssh-keygen on your own machine is the simplest route.
Is the key sent anywhere?
No. It is generated by your browser’s own cryptography and nothing is sent or stored.