Security
Processed locally in your browser — not uploaded
SSH Key Pair Generator
Generate cryptographically secure OpenSSH key pairs (Ed25519 and RSA 4096-bit) using the Web Crypto API. Includes custom email comments, public key formatting (.pub), private key formatting, and 1-click downloads. Runs 100% locally in your browser with zero server egress.
Key Type:
01
How to use
- Select your preferred SSH key algorithm (Ed25519 or RSA 4096-bit).
- Enter an optional comment/email label (e.g. deploy-key@company.com).
- Click 'Generate SSH Key Pair' to produce public and private keys using the Web Crypto API.
- Copy or download your public key (id_ed25519.pub) for GitHub/AWS server authorization.
- Copy or download your private key (id_ed25519) and store it securely.
02
Understanding the output
The tool generates cryptographically secure SSH keys using the browser's Web Crypto API (`crypto.subtle.generateKey`). Ed25519 is recommended for modern servers due to higher security and compact key size. RSA 4096-bit provides maximum legacy compatibility.
03
Common issues & tips
- •Never share or commit your private key (`id_ed25519` or `id_rsa`) into public source repositories.
- •Public keys (.pub) are safe to share and append to authorized_keys on remote Linux servers.
Frequently asked questions
- Is my private SSH key sent to a server?
- No. Key generation uses window.crypto.subtle directly inside your browser. Private keys are never transmitted over the network.
- Should I use Ed25519 or RSA 4096?
- Ed25519 is recommended for all modern servers. It offers stronger security, faster signature verification, and shorter key lengths than RSA.