RSA / EC keygen

Create an RSA or elliptic-curve key pair with the Web Crypto API and export both keys as PEM. Generation happens locally — the private key never leaves your browser.

Create an RSA or elliptic-curve key pair with the Web Crypto API and export both keys as PEM. Generation happens locally — the private key never leaves your browser.

How to use

  1. Pick the algorithm: RSA-2048/4096 or EC P-256/P-384
  2. Click Generate
  3. Copy or download the public (SPKI) and private (PKCS#8) PEM
  4. Store the private key securely

Frequently asked questions

Are the keys generated locally?

Yes — generateKey runs in your browser via Web Crypto and nothing is transmitted.

RSA or EC — which should I choose?

EC keys are smaller and faster at similar security; RSA is more widely compatible. P-256 or RSA-2048 are sensible defaults.

What PEM formats are exported?

The public key as SPKI (BEGIN PUBLIC KEY) and the private key as PKCS#8 (BEGIN PRIVATE KEY).