Is the private key safe?

Yes. Key generation happens entirely in your browser. The private key is never transmitted over the network.

What format are the keys in?

Private key: PKCS#8 PEM (-----BEGIN PRIVATE KEY-----). Public key: SPKI PEM (-----BEGIN PUBLIC KEY-----).

2048-bit is suitable for most uses and generates much faster. 4096-bit offers a larger security margin at the cost of performance.

RSA Key Generator

Generate RSA key pairs (2048 or 4096-bit) and export as PEM in your browser.

Key size:

Related Tools

#SSH Key Generator

Generate an RSA SSH key pair. Shows the OpenSSH public key and the PEM private key.

#RSA Key Pair + OpenSSL Command

Generate an RSA key pair and get the OpenSSL command to create a self-signed certificate.

#CSR Generator

Fill in your details and get a ready-to-run openssl command to generate a CSR and key.

FAQ

Is the private key safe?: Yes. Key generation happens entirely in your browser. The private key is never transmitted over the network.
What format are the keys in?: Private key: PKCS#8 PEM (-----BEGIN PRIVATE KEY-----). Public key: SPKI PEM (-----BEGIN PUBLIC KEY-----).
2048 vs 4096 bits?: 2048-bit is suitable for most uses and generates much faster. 4096-bit offers a larger security margin at the cost of performance.

Generate RSA key pairs using the browser Web Crypto API. Choose 2048 or 4096-bit key size. Private key is exported as PKCS#8 PEM and public key as SPKI PEM. All generation happens client-side — private keys never leave your device.