RSA Keypair Generator
Generate a 2048/3072/4096-bit RSA keypair as PEM, fully in-browser.
Generate an RSA keypair (RSA-OAEP with SHA-256) at 2048, 3072 or 4096 bits using your browser's Web Crypto API. The public key is exported as SubjectPublicKeyInfo PEM and the private key as PKCS#8 PEM, ready to paste into a config file.
Common use cases
- Bootstrap a new keypair for development or testing
- Generate disposable keys for a one-off encryption demo
- Demonstrate RSA in a workshop without installing OpenSSL
- Replace an aging dev keypair before sharing a project
Frequently asked questions
Is it safe to generate production keys here?▾
Web Crypto uses your browser's secure random source, so the keys are cryptographically strong. That said, for production we recommend generating keys on the host that will use them and never copy-pasting private keys through clipboards.
Why RSA-OAEP and not signing?▾
Web Crypto exposes both, but a single key is bound to one usage. We chose OAEP (encryption) for this tool. For signing keys, generate via a dedicated library or OpenSSL.
How big are the keys?▾
2048 bits is currently the minimum recommended size. 3072 matches a 128-bit security level. 4096 is more conservative but slower and longer.
Related tools
{}
JSON Formatter & Validator
Beautify, validate and minify JSON instantly in your browser.
↔
JSON ↔ CSV Converter
Convert JSON arrays to CSV and CSV back to JSON.
B64
Base64 Encoder & Decoder
Encode and decode Base64 strings, including UTF-8 and binary.
%
URL Encoder & Decoder
Percent-encode and decode URL components safely.