Loading…
Generate RSA key pairs locally. Use for SSH/TLS testing. Input: key-size option. Returns PEM public/private keys. 100% client-side.
RSA Key Pair Generator is loading — interactive editor will appear here. Use examples below to try instantly once loaded.
Press ? for keyboard shortcuts
Generates RSA public/private key pairs using the Web Crypto API with configurable key sizes (1024, 2048, or 4096 bits). Outputs PEM-formatted keys with key details and supports copy and download operations.
Developers frequently need RSA key pairs for JWT signing, SSH authentication, TLS certificates, or encryption protocols. This tool provides instant key generation in the browser without requiring OpenSSL or other command-line tools.
This tool is part of the DevStackIO platform — a collection of free online developer tools from DevStackIO. Browse more free developer resources on DevStackIO.
Security engineers, backend developers implementing JWT or certificate-based auth, DevOps engineers generating test keys, and students learning cryptography.
Select the desired key size: 1024 (legacy), 2048 (standard), or 4096 (high security)
Click 'Generate Key Pair' to create the keys using Web Crypto API
The public and private keys appear in PEM format below
Use the copy buttons to copy individual keys, or download both as a ZIP
Key details (algorithm, size, creation time) are displayed alongside the keys
2048-bit RSA key pair for RS256 JWT signing — public key starts with '-----BEGIN PUBLIC KEY-----'4096-bit RSA key pair for high-security applications — takes longer to generate but provides stronger protectionWhich key size should I choose?
2048-bit is the standard for most applications; use 4096-bit for extra security.
Are these keys secure enough for production?
Yes, the Web Crypto API uses the same cryptographic libraries as the operating system.
Can I use these keys for SSH?
Yes, but you may need to convert the format using ssh-keygen.
How long does key generation take?
1024-bit is nearly instant; 2048-bit takes a moment; 4096-bit may take several seconds.
Authoritative specifications, standards, and in-depth reading for RSA Key Pair Generator.
Generate MD5, SHA-1, SHA-256, SHA-384, and SHA-512 hashes for text. Copy or compare instantly.
Generate time-based OTP codes from authenticator secret. Use for 2FA testing; for random tokens use token-generator. Input: Base32 secret. Returns 6-digit code + QR. 100% client-side.
Decode SSL certificates (subject/expiry/chain). Use for debugging certs. Input: PEM text ≤10MB. Returns parsed fields. 100% client-side.
Build Content-Security-Policy headers. Use for XSS hardening. Input: directive options. Returns policy string. 100% client-side.
Compute MD5/SHA-256/SHA-512 checksums for files to verify integrity. Use for files; for text strings use hash-generator. Input: file ≤10MB. Returns hex digests. 100% client-side, files never uploaded.
Infer JSON Schema from sample JSON for validation. Use when authoring schemas; for validating instances use json-validator. Input: JSON ≤10MB. Returns JSON Schema draft. 100% client-side.
Hash passwords with bcrypt (cost-configurable) and verify. Use for password storage; for fast checksums use hash-generator, for keyed MACs use hmac-generator. Input: password text. Returns bcrypt hash. 100% client-side.
Generate sortable ULIDs (time-ordered IDs). Use when ordering matters; for random UUIDs use uuid-generator, for tokens use token-generator. Input: count option. Returns ULID strings. 100% client-side.