RSA and EC Key Pair Generator
Generate an RSA or elliptic-curve key pair in your browser and export it as PEM or JWK, with the matching JWT algorithm name.
Small, fast, and enough for almost everything.
Files are processed in your browser and are never uploaded to a server.
How to use
Free to use with no sign-up, no install and no usage limit.
Pick a size or curve and a key pair is generated inside your browser, exported as PEM and as JWK. The private key is never transmitted; there is no request to send it in.
That property is the whole point. Searching for a key generator turns up sites that produce the key on their server, which means a stranger has held your private key before you ever did. Nobody should use such a key for anything real, yet people do, because the alternative is remembering openssl flags.
P-256 is the sensible default. Elliptic-curve keys are far smaller than RSA at equivalent strength, generate instantly, and are accepted by every current JWT library. RSA-2048 remains the safer choice when an older system has to accept the key.
The JWT algorithm name is shown next to each choice, because that is the string you actually have to put in a config file, and pairing a P-256 key with RS256 is a common and confusing mistake.
A SHA-256 fingerprint of the public key is included. When the same key has to be installed on several machines, comparing fingerprints is much quicker and more reliable than reading PEM blocks side by side.
Nothing is stored. Closing this page loses the key for good, so download or paste it somewhere before you leave.