Key pair generator
Generate a public/private key pair by algorithm, in the formats servers and libraries expect: PEM, JWK and the one-line OpenSSH public key. The keys are made by your browser and never leave this page.
The private key exists only in this page: reloading loses it. Save it somewhere safe and never share it. For production systems, prefer keys generated and held by your platform’s key management.
S'exécute entièrement dans votre navigateur — rien n'est envoyé nulle part
The formats
- PEM is Base64 between BEGIN and END lines: PKCS#8 for private keys, SPKI for public ones. Most servers and libraries read it.
- JWK is JSON, used by JWT libraries and JWKS endpoints.
- OpenSSH is the single line that goes into authorized_keys.
Which algorithm should I choose?
Ed25519 for signing and SSH wherever it is supported: small, fast and hard to misuse. ECDSA P-256 where a standard asks for it, and RSA 3072 or more for older systems.
Can I use the key with SSH?
Add the OpenSSH line to authorized_keys on the server. For the private key, OpenSSH reads PKCS#8 PEM for RSA and ECDSA; for Ed25519, ssh-keygen on your own machine is the simplest route.
Is the key sent anywhere?
No. It is generated by your browser’s own cryptography and nothing is sent or stored.