SSH Key Generator

Generate RSA and ECDSA key pairs in PEM format using the Web Crypto API. Nothing leaves your browser.

ℹ️ Keys are exported in standard PEM format (SPKI / PKCS#8), not OpenSSH format. Use ssh-keygen -i -m PKCS8 to convert if needed.

Frequently Asked Questions

This tool generates generic asymmetric key pairs (RSA or ECDSA) using the Web Crypto API and exports them in standard PEM format (SPKI for public keys, PKCS#8 for private keys). These are not in OpenSSH format but can be converted using tools like ssh-keygen or openssl.
Yes. The Web Crypto API uses a cryptographically secure random number generator built into your browser. No key material is ever transmitted to a server — generation and export happen entirely on your device.
RSA is the traditional public-key algorithm based on the difficulty of factoring large primes. ECDSA (Elliptic Curve Digital Signature Algorithm) provides equivalent security with much shorter key lengths — for example, ECDSA P-256 offers roughly the same security as RSA 3072-bit, with faster operations and smaller keys.
For RSA, 2048 bits is the current minimum recommendation; 4096 bits provides a higher security margin. For ECDSA, P-256 is widely supported and sufficient for most use cases; P-384 offers a higher security margin at the cost of slightly larger keys and slower operations.
The keys are exported in PEM format (PKCS#8 / SPKI), which is a standard format understood by OpenSSL. To convert to OpenSSH format, you can use 'ssh-keygen -i -m PKCS8 -f key.pem' or 'openssl' commands.