Loading…
Generate RSA or Ed25519 SSH key pairs in your browser.
This tool generates a complete SSH key pair — a public key in the authorized_keysformat you paste onto servers, and a matching private key in PKCS#8 PEM — using only your browser's built-in Web Crypto API. It is handy for spinning up a key for a new server, CI job, or Git hosting account when you are away from a terminal. Everything runs 100% locally: the keys are created in your browser tab and are never sent anywhere.
An OpenSSH public key line is just base64 of a small binary blob, plus an optional comment. The blob is a sequence of length-prefixed fields: for Ed25519 it is the string ssh-ed25519 followed by the raw 32-byte public key; for RSA it is ssh-rsa followed by the exponent e and modulus n, each encoded as an mpint (a big-endian integer padded with a 0x00 byte when its top bit would otherwise look negative). The SHA256 fingerprint shown after generation is the same one ssh-keygen -l would print, so you can cross-check the key on a server later.
Pick Ed25519 unless you have a reason not to. It produces short keys (~68 characters in the public line), is fast to generate and verify, and is considered the modern default — GitHub, GitLab and every current OpenSSH release accept it. RSA is still universally supported and is the safer choice for very old servers, appliances, or tooling that predates Ed25519; use 4096 bits there for a comfortable security margin, 2048 if the target system rejects larger keys. One caveat: Ed25519 in the Web Crypto API needs a recent browser — this tool detects that and tells you if yours is too old.
The private key is the only half that must stay secret, and this page never transmits it — but what you do next matters. Save it as ~/.ssh/id_ed25519 (or id_rsa) and lock it down immediately with chmod 600, or ssh will refuse to use it. The exported format is PKCS#8 PEM, which modern OpenSSH reads directly; to convert it to the OpenSSH native private-key format (BEGIN OPENSSH PRIVATE KEY), run ssh-keygen -p -f id_ed25519 (press Enter when asked for a passphrase, or set one). Finally, treat a key made in a browser tab like any credential: store it in your SSH agent or a password manager, and regenerate a fresh pair on your own machine for high-value production systems.
The SSH Key Generator creates ssh key generator on demand, right in your browser. Set the options you need, click generate, and the result is ready to copy. Because everything runs locally, nothing you enter or produce leaves your device.
Generators like this are useful when you need a specific output (a password, a UUID, a QR code, placeholder text) and don't want to install an app or trust an unknown website with your data. This tool is free, has no usage limits, and works the same on phone and desktop.
Common uses: people reach for this tool when they need to use a generate ed25519 key pair online, ssh-keygen online alternative, create ssh keys without terminal, or authorized_keys public key generator.
Browser-based tools like this one have a few real advantages over installed software or manual methods:
More tools you might find useful