vpn_key RSA Key Pair Generator

Generate RSA public/private key pairs in your browser using the Web Crypto API. Keys never leave your device.

Key Options
Key Size
Key Usage
Hash Algorithm
About RSA Keys
public
Public Key
Share freely - used to encrypt data or verify signatures.
lock
Private Key
Keep secret - used to decrypt data or create signatures.
vpn_key
Asymmetric
RSA uses mathematically linked key pairs - what one encrypts, only the other can decrypt.
shield
Web Crypto API
Generation uses the browser's built-in cryptographic engine - no JS libraries.
lock All key generation happens in your browser using the Web Crypto API. No keys are sent to any server.

RSA is a widely-used public-key cryptography algorithm - you generate a linked key PAIR (public and private), where data encrypted with the public key can only be decrypted with the private key, and vice versa for signing. This tool generates RSA key pairs and exports them in standard PEM format, ready to use in code or configuration.

Frequently asked questions

The public key can be shared freely - others use it to encrypt data meant only for you, or verify signatures you created. The private key must be kept secret - you use it to decrypt data encrypted with your public key, or to create digital signatures.

Key generation runs in your browser using standard cryptographic APIs, but for genuinely sensitive production systems, many teams prefer generating keys directly on the target server/environment using established tooling (like OpenSSL) to minimize any exposure during transfer.

2048-bit is a common modern minimum for RSA keys; 4096-bit offers a larger security margin at the cost of slower performance - check what your specific use case or compliance requirement expects.