About the SSH Key Generator
This tool generates SSH key pairs — Ed25519, ECDSA, or RSA — entirely in your browser using the WebCrypto API. The private key is produced locally and never transmitted, which makes it a quick option for development keys, lab environments, and learning how the formats fit together.
It outputs both halves in the formats tooling expects: the OpenSSH public line for authorized_keys and the private key in PEM/OpenSSH form, with the fingerprint for verification against what your server or git host displays.
Frequently asked questions
Which key type should I choose in 2026?
Ed25519, unless something in the path can't accept it. Keys are 68 characters, signing is fast, and the design eliminates the nonce failures that have broken ECDSA in practice. Choose RSA 4096 only for legacy systems; never generate new DSA keys.
Should I generate keys in a browser or with ssh-keygen?
For production access, prefer ssh-keygen on the target machine — the key material never exists anywhere else, and you get OS keychain and hardware-token integration. Browser generation (local-only, verifiable in the network tab) is reasonable for dev/lab keys, but high-privilege credentials deserve the smaller attack surface.
Should I set a passphrase on my SSH key?
Yes for interactive keys — a passphrase makes a stolen key file useless without also capturing the passphrase, and ssh-agent means you type it once per session. Automation keys that can't prompt should instead be scoped tightly (forced commands, restricted source IPs) and rotated regularly.
Need this managed for you, not just automated?
We're also a hands-on DevOps consultancy — Kubernetes, CI/CD, and cloud infrastructure.