RSA Key Generator
Generate an RSA key pair in your browser and export both keys as PEM text.
Generate an RSA key pair
Status: idle
Key: —
Private PEM size: —
How to use the RSA Key Generator
- Choose the key size and the RSA algorithm you need.
- Click Generate key pair and wait for the browser to finish the maths.
- Copy each PEM block, or save both keys to a single text file.
Features
- RSA key pairs of 2048, 3072 or 4096 bits
- RSASSA-PKCS1-v1_5 signing and RSA-OAEP encryption
- SHA-256, SHA-384 or SHA-512 digests
- PKCS#8 and SPKI PEM export, plus a text download
Advertisement
Frequently Asked Questions
Common questions about the free online rsa key generator.
Pick the key size and algorithm, click Generate key pair, then copy or download the PEM
blocks. Everything happens inside your browser.
You can generate keys for RSASSA-PKCS1-v1_5 signatures or RSA-OAEP encryption, with a
SHA-256, SHA-384 or SHA-512 digest.
2048 bits is the safe minimum for most uses. Choose 4096 bits when you want a longer security
margin, and expect it to take a little longer.
PRIVATE KEY marks a PKCS#8 private key and PUBLIC KEY marks an SPKI public key, both base64
encoded between header and footer lines.
Not directly. OpenSSH wants its own key format, so convert with ssh-keygen, or use these keys
with TLS, JWT signing or encryption code.
No. The key pair is created with the Web Crypto API in your browser and is never transmitted
or stored on a server.
Large prime numbers for a 4096 bit key take real computation. The browser does the work on
your device, so the time depends on your hardware.
Keep it in a file only you can read, never in a public repository. Encrypt it at rest and
rotate it if it may have been exposed.
No. Every run uses fresh randomness, so you get a brand new key pair each time you click the
button.
Yes, although 4096 bit generation can be slow on older phones. A 2048 bit key is usually
quick on any modern device.
Last updated: October 10, 2026