SSH Key Pair Generator
Generate RSA SSH key pairs instantly in your browser using the Web Crypto API. Private key in PEM format, public key in OpenSSH authorized_keys format — 100% client-side, your private key never leaves your device.
How ZeroData protects your privacy
- ✓ No Uploads: Processing happens entirely via client-side JavaScript.
- ✓ No Storage: We do not have a database. We physically cannot save your data.
- ✓ No Tracking: We don't log what you process or track your inputs.
- ✓ Verifiable: Check your DevTools Network tab. You will see 0 outbound requests.
Generate SSH Keys in Your Browser — No Installation Required
Traditional SSH key generation requires running ssh-keygen in a terminal — which means installing OpenSSH, having the right operating system, or having access to a proper shell environment. This tool eliminates that requirement by using the browser's native Web Crypto API (crypto.subtle.generateKey) to generate RSA key pairs entirely client-side.
The generated private key is displayed only in your browser. It is never transmitted to any server. This makes it safe for generating deployment keys, developer onboarding keys, and CI/CD SSH keys on any machine with a modern browser — including Windows, macOS, Linux, and Chromebooks.
Understanding the Output Formats
- Private Key (PKCS#8 PEM): Compatible with OpenSSH 7.8+, PuTTY (via puttygen import), and most modern SSH clients. Save as
~/.ssh/id_rsaand runchmod 600 ~/.ssh/id_rsa. - Public Key (OpenSSH format): The
ssh-rsa BASE64 commentformat used in~/.ssh/authorized_keys, GitHub Deploy Keys, and GitLab SSH keys. Copy and paste it directly.
Next Steps After Generating Your SSH Key
Once you have your SSH key pair, use our SSH Config Generator to create a proper ~/.ssh/config file for managing multiple servers with host aliases. For Linux server configuration, use the Chmod Calculator to set the correct 600 file permissions.
How to Use the SSH Key Pair Generator
- Select the key type and size (RSA 2048 or RSA 4096).
- Optionally enter a comment to identify this key (e.g., your email or server name).
- Click Generate Key Pair — generation takes 1–3 seconds.
- Copy the Private Key and save it to ~/.ssh/id_rsa (set permissions to 600).
- Copy the Public Key and add it to ~/.ssh/authorized_keys on your server.
Common Use Cases
- Generating SSH key pairs for server access without installing local tools.
- Creating deployment keys for CI/CD pipelines (GitHub Actions, GitLab CI, Bitbucket Pipelines).
- Generating SSH keys for developer onboarding on restricted or locked-down machines.
- Testing SSH authentication configurations in development environments.
Frequently Asked Questions
Is it safe to generate SSH keys in a browser?
Yes — this tool generates SSH keys entirely inside your browser using the Web Crypto API (crypto.subtle). The private key never leaves your device and is never sent to any server. You can verify this in your browser's DevTools Network tab — zero outbound requests are made during key generation.
What key types and sizes are supported?
This tool generates RSA 2048-bit and RSA 4096-bit key pairs, which are the most widely supported SSH key types for production servers. RSA 4096-bit provides a higher security margin and is recommended for new deployments.
What format are the generated keys in?
The private key is generated in PEM format (PKCS#8), which is accepted by modern SSH clients including OpenSSH 7.8+. The public key is generated in the standard OpenSSH authorized_keys format (ssh-rsa ...) and can be pasted directly into ~/.ssh/authorized_keys on a server.
How do I use the generated SSH key pair?
Save the private key to a file (e.g., ~/.ssh/id_rsa) and set permissions to 600 (chmod 600 ~/.ssh/id_rsa). Copy the public key and paste it into ~/.ssh/authorized_keys on the target server. Then connect with: ssh -i ~/.ssh/id_rsa user@server.
What is the difference between RSA 2048 and RSA 4096?
RSA 2048-bit is the minimum recommended key size and provides strong security for most use cases. RSA 4096-bit doubles the key length, providing a larger security margin against future computational advances — but generates and processes slightly slower. For new deployments targeting long-term security, 4096-bit is recommended.
Related Tools
Chmod Calculator
Visual Linux file permissions calculator with numeric mode, symbolic notation, and common presets.
SSH Config Generator
Build SSH config file entries visually. Host aliases, identity files, jump hosts, and port forwarding — 100% browser-based.
HMAC Generator & Verifier
Generate and verify HMAC signatures with SHA-256, SHA-384, SHA-512 using Web Crypto API. Hex and Base64 output — 100% in your browser.