SSH Key Generator
Create an SSH key pair without leaving the page. The keys are made by your browser’s cryptography and are never sent anywhere.
Runs in your browser — nothing is uploaded.
For production servers prefer ssh-keygen on your own machine. Keys made here are random and stay in this page, but you are trusting the browser you are using.
Ed25519 is recommended.
Added at the end of the public key line and stored in the private key.
Generating the key… RSA 4096 can take a few seconds.
Fingerprint (SHA256)
CopiedPublic key
Private key (OpenSSH)
Secret. Save it as ~/.ssh/id_ed25519 (or id_rsa) with permissions 600. Never share it.
Private key (PKCS#8 PEM)
The same private key as a standard PEM, for openssl and libraries.
How to use it
- Pick Ed25519 (recommended) or an RSA size, and add an optional comment such as your e-mail.
- Press Generate. Copy or download the public key, the private key and the fingerprint.
- Add the public key line to ~/.ssh/authorized_keys on the server, and save the private key as ~/.ssh/id_ed25519 with chmod 600.
Frequently asked questions
Is it safe to generate a key in a web page?
The key is created by your browser and stays in this page: there is no upload and nothing is logged. Still, for production servers and important accounts prefer running ssh-keygen on your own machine, where you also set a passphrase and the key never touches a browser.
Ed25519 or RSA?
Ed25519: short keys, fast, and the current default of OpenSSH. Choose RSA (3072 or 4096) only for old systems that do not accept Ed25519.
Why is the private key not encrypted?
This page writes it without a passphrase. To protect it, run ssh-keygen -p -f <file> after saving it, or store it in an SSH agent or password manager.
What is the PKCS#8 version for?
Some tools (libraries, CI systems, openssl) want a standard PEM private key instead of the OpenSSH format. It is the same key in another encoding.
My browser says the key type is not supported.
Ed25519 in Web Crypto needs a recent browser (Chrome 137+, Firefox 129+, Safari 17+). Use RSA, or update the browser.