↓ Skip to main content
OpsKit

SSH Key Generator - Create SSH Key Pairs Online

Generate SSH key pairs (RSA, ECDSA, Ed25519) in your browser using WebCrypto. OpenSSH format output with SHA-256 fingerprints. 100% client-side, no data uploaded.

SSH Key Pair Generator (Client-Side)

Key Options

Private key is output as PEM (PKCS#8). Public key is output in OpenSSH format.

Compatibility Notes

  • Ed25519 generation depends on browser WebCrypto support.
  • To convert PEM to OpenSSH private key format, use ssh-keygen locally.
  • Never paste real production secrets into random web pages. Use test keys.

What Is SSH Key Authentication?
#

SSH (Secure Shell) key authentication uses asymmetric cryptography to authenticate users to remote servers without passwords. A key pair consists of a private key (kept secret on your machine) and a public key (placed on the server). When you connect, the server verifies your identity using the public key without your private key ever leaving your device.

Supported Key Types
#

  • RSA: The most widely supported algorithm. Use 3072+ bits for modern security.
  • ECDSA: Elliptic curve alternative with smaller key sizes (P-256, P-384, P-521).
  • Ed25519: Modern Edwards-curve algorithm. Fast, secure, and compact. Recommended where supported.

Generating SSH Keys for Server Access
#

  1. Select key type (RSA 3072+ or Ed25519 recommended)
  2. Add an optional comment for identification
  3. Click “Generate SSH Key Pair”
  4. Copy the public key to ~/.ssh/authorized_keys on the server
  5. Save the private key securely

Using Your Generated Keys
#

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12

# Save the private key to a file
# (paste the PEM content into id_rsa or id_ed25519)
chmod 600 ~/.ssh/id_rsa

# Copy the public key to a remote server
ssh-copy-id -i ~/.ssh/id_rsa.pub user@server

# Or manually append to authorized_keys
echo "ssh-rsa AAAA... user@host" >> ~/.ssh/authorized_keys

# Convert PEM (PKCS#8) to OpenSSH private key format
ssh-keygen -p -m pem -f ~/.ssh/id_rsa

Privacy & Security
#

This tool runs entirely in your browser:

  • No Server Communication: Your keys never leave your device
  • No Storage: Nothing is saved to localStorage, cookies, or servers
  • WebCrypto API: Uses the browser’s native cryptographic implementation
Security Notice
Important: While this tool is completely client-side, for production key generation use local tools like ssh-keygen. Use this tool for testing, learning, and quick key generation.

Frequently Asked Questions
#

Which key type should I choose?
#

Ed25519 is recommended for modern systems. It offers excellent security with small key sizes. If you need maximum compatibility (older servers, embedded devices), use RSA 3072 or RSA 4096.

Is it safe to generate SSH keys in a browser?
#

The keys are generated using your browser’s WebCrypto API and never leave your device. However, for production environments, prefer local tools like ssh-keygen that don’t involve a browser context.

What’s the difference between PEM and OpenSSH format?
#

PEM (PKCS#8) is a standard format for private keys used by many tools. OpenSSH format is the native format used by ssh-keygen. You can convert between them using ssh-keygen -p -m pem -f keyfile.

Why does Ed25519 show “if supported”?
#

Ed25519 support in WebCrypto varies by browser. Most modern browsers (Chrome 113+, Firefox 130+, Safari 17+) support it. If your browser doesn’t, you’ll see an error message.

Related Tools#