Which key size should I generate?

2048 bits is the floor for compatibility; 4096 if the extra signing/verification cost is acceptable and longevity matters. Everything below 2048 exists in the tool only for testing legacy systems.

How do I keep the private key private?

Never share it, never commit it, and prefer generating it on the machine that will use it. This tool runs locally so the key is not transmitted — but anything pasted into a browser context deserves the same care as a password.

Can I use these keys for SSH?

Yes — an RSA PEM private key converts to OpenSSH format with ssh-keygen. Generate here, then run ssh-keygen -y against it to derive the public line for authorized_keys.

How do I generate an RSA key without OpenSSL?

Right here — choose a key size (2048+) and click generate; the private and public keys come out in PEM format, ready for SSH, TLS or JWT RS256, without installing anything.

RSA Key Pair Generator — Guide

Generate an RSA private/public key pair online — PEM format, 2048 to 8192 bits, for SSH, TLS or JWT RS256. No OpenSSL install, keys never leave your browser.

What it is and when to use it

Generate an RSA key pair — private and public key in PEM format, in the key size you choose — directly in the browser. Useful for SSH keys, TLS client certificates, JWT RS256 signing setups, or anywhere you need a fresh pair without installing OpenSSL.

Generates an RSA public/private key pair in PEM format, for encrypted transport or signature verification.

How to use it

Choose the key length (2048 bits and up)
Click generate
Save the private and public keys separately

A worked example

Fill in a sample key size

Copy this into the tool, or open RSA Key Pair Generator

Things that trip people up

A lost private key cannot be recovered, so store it safely — and never commit it to a repository

Questions people ask

Which key size should I generate?: 2048 bits is the floor for compatibility; 4096 if the extra signing/verification cost is acceptable and longevity matters. Everything below 2048 exists in the tool only for testing legacy systems.
How do I keep the private key private?: Never share it, never commit it, and prefer generating it on the machine that will use it. This tool runs locally so the key is not transmitted — but anything pasted into a browser context deserves the same care as a password.
Can I use these keys for SSH?: Yes — an RSA PEM private key converts to OpenSSH format with ssh-keygen. Generate here, then run ssh-keygen -y against it to derive the public line for authorized_keys.
How do I generate an RSA key without OpenSSL?: Right here — choose a key size (2048+) and click generate; the private and public keys come out in PEM format, ready for SSH, TLS or JWT RS256, without installing anything.

Next steps

Open the RSA Key Pair Generator tool

Spotted something wrong on this page? Tell us via Contact Us