This tool generates a fresh RSA public/private key pair in standard PEM format, at the key size you choose, using the browser’s Web Crypto API. The private key never leaves your device — generation is entirely local.
How to use it
- Choose a key size (2048-bit is standard, 4096-bit is stronger).
- Click Generate.
- Copy the public key to share, and keep the private key secret.
About RSA Key Pair Generator
RSA is an asymmetric cryptosystem: the public key encrypts or verifies, the private key decrypts or signs. Key pairs underpin SSH access, TLS certificates, JWT signing and encrypted messaging. Generating a pair for testing, learning or development should be quick and safe. This tool uses the Web Crypto API to generate genuine RSA keys and exports them as PEM, the format most tools expect. The private key is generated in your browser and is never transmitted — but treat it like any real secret, and do not reuse test keys in production.
FAQ
2048 or 4096 bits?
2048-bit is the current standard and fast to generate. 4096-bit is stronger but slower; use it where long-term security matters.
Are the keys generated securely?
Yes. They use the browser’s Web Crypto API, which uses a cryptographically secure generator. The private key never leaves your device.
Can I use these in production?
They are real keys, but for production prefer keys generated and stored in a controlled environment. Use these for testing and learning.