RSA Key Pair Generator
Generates an RSA public/private key pair with the Web Crypto API and exports both in PEM (SPKI public, PKCS#8 private) — the format OpenSSL, SSH and most libraries expect. Choose the modulus size and whether the keys are for encryption (OAEP) or signing (PSS).
Runs 100% in your browser — keys and data never leave your device.
Read the full guide to this tool
Notes
- 2048-bit RSA is the current minimum; 3072-bit matches the 128-bit security level. RSA keys are far larger and slower than elliptic-curve keys at equivalent strength.
- The private key is generated in your browser and never transmitted. Treat the PEM as a secret — anyone with it can decrypt or sign on your behalf.
- Runs 100% in your browser — keys and data never leave your device.
Explore the idea
Related tools
ECDSA Keys, Sign & Verify
Elliptic-curve key pairs and signatures (P-256/384/521).
Elliptic Curve Visualizer
See curve addition, scalar multiples and a toy ECDH exchange — over the reals and over F_p.
RSA Encrypt & Decrypt
Encrypt with a public key, decrypt with the private key.
RSA Sign & Verify
Sign a message with RSA-PSS and verify the signature.
AES Encryption
Encrypt and decrypt text with AES-GCM or AES-CBC.
Cryptographic Key Generator
Random keys, IVs, salts and API tokens from a CSPRNG.