RSA Key Pair Generator
NewGenerate RSA public/private key pairs (2048/4096-bit) in PEM format using Web Crypto API.
Generate a key pair to compute the SHA-256 fingerprint.Public Key PEM
Private Key PEM
Key generation happens entirely in your browser and can take a few seconds for 4096-bit keys.
Frequently Asked Questions
Are these RSA keys for encryption or signing?
Encryption. The tool generates RSA-OAEP keys with SHA-256 usage for encrypt/decrypt, not RSASSA keys for signing JWTs or documents.
What formats are the exported keys in?
The public key is exported as SPKI PEM and the private key as PKCS#8 PEM. They are wrapped in -----BEGIN PUBLIC KEY----- and -----BEGIN PRIVATE KEY----- blocks.
What does the fingerprint represent?
It is a SHA-256 digest of the exported public key bytes, displayed as colon-separated hex. The private key is not used for the fingerprint value.
Why is 4096-bit generation noticeably slower?
Because the browser is creating the key pair locally with Web Crypto, and larger modulus sizes take longer to generate. The UI even warns that 4096-bit keys can take a few seconds.
Can I download the PEM files directly from the page?
Yes. Each key has separate Copy and Download buttons, and the downloads are saved as rsa-public.pem and rsa-private.pem.