PGP Key Generator
Generate RFC 4880 and RFC 9580 compliant OpenPGP keypairs directly in your browser. Create ASCII-armored public keys, private keys, and revocation certificates with Ed25519 ECC or RSA 4096 and zero server communication.
OpenPGP Engine
In-Browser OpenPGP Asymmetric Keypair and Revocation Certificate Generation
The PGP Key Generator creates standards-compliant OpenPGP public keys, private keys, and revocation certificates directly inside your web browser. Utilizing modern OpenPGP.js client-side cryptography, developers, journalists, and security advocates can provision high-assurance asymmetric encryption and digital signature credentials with zero server communication.
This utility supports modern Curve25519 / Ed25519 elliptic curve cryptography alongside classic 2048-bit and 4096-bit RSA algorithms compliant with RFC 4880 and RFC 9580. It allows customization of user identities (name, email, and optional comments), optional passphrase protection for secret keys, and user-defined expiration schedules.
The workspace outputs clean ASCII-armored public key blocks (.asc), encrypted or plaintext private key blocks, and pre-generated revocation certificates. It calculates formatted 40-character hexadecimal fingerprints and 16-character Key IDs to simplify key sharing and public keyserver distribution.
Core Tool Capabilities
- Modern ECC Curve25519 & Ed25519: Generates high-performance elliptic curve keypairs offering state-of-the-art security with compact armored key sizes and rapid operation.
- Legacy RSA 4096-bit Key Support: Constructs high-modulus 4096-bit and 2048-bit RSA keys for broad compatibility with legacy OpenPGP clients and email plugins.
- Revocation Certificate Creation: Automatically generates an emergency ASCII-armored revocation certificate during key creation to protect identity in case of future key loss.
- Formatted 40-Hex Fingerprint Display: Computes and formats the canonical OpenPGP fingerprint in standardized 4-character blocks for error-free voice and visual verification.
- Client-Side Passphrase Encryption: Encrypts private key blocks locally with symmetric ciphers derived from user passphrases before rendering or downloading.
Local Browser Privacy
Your files are processed locally on your device. Files are not uploaded, transmitted, or stored on remote servers.
Once the page has loaded, you can disconnect your network connection and continue using this tool offline.
Target Use Cases
- • Encrypted Email and Communication Setup
- • Git Commit and Tag Cryptographic Signing
- • Secure File and Document Exchange
- • Identity Verification and Fingerprint Sharing
Technical Specifications & Platform Limits
Official IETF OpenPGP protocol specifications.
Modern elliptic curve and standard RSA suites.
Standard copy-pasteable OpenPGP key blocks.
Zero external network requests or key storage.
Step-by-Step Workflow
Enter User Identity Details
Provide your name, primary email address, and an optional comment to bind your identity to the OpenPGP keypair.
Select Algorithm and Expiration
Choose between modern Curve25519 ECC or RSA 4096, specify an expiration period (1 to 5 years or never), and set an optional passphrase.
Generate OpenPGP Keypair
Click Generate PGP Keypair to execute asymmetric key generation and revocation certificate construction locally in memory.
Download Keys and Revocation Cert
Download the public key (.asc) for sharing, save the private key (.asc) securely, and store the revocation certificate in a safe offline backup.
Practical Real-World Use Cases
Encrypted Email and Communication Setup
Individuals and journalists provisioning OpenPGP keypairs to configure end-to-end encrypted messaging via Thunderbird, Mailvelope, or GPG.
Git Commit and Tag Cryptographic Signing
Software developers generating dedicated signing keys to add verified PGP signatures to git commits on GitHub and GitLab.
Secure File and Document Exchange
Privacy-conscious teams creating keypairs to encrypt and decrypt sensitive customer documents and confidential credentials locally.
Identity Verification and Fingerprint Sharing
Security engineers publishing armored public keys to personal websites and social profiles for verifiable contact authentication.
Frequently Asked Questions
- Why is Curve25519 recommended for OpenPGP keys?
- Curve25519 (Ed25519 for signing and X25519 for encryption) provides modern 128-bit security levels with much smaller key sizes than RSA 4096, faster cryptographic operations, and strong mathematical resistance to side-channel vulnerabilities.
- What is the purpose of the Revocation Certificate?
- A revocation certificate allows you to publish a statement invalidating your public key if you ever forget your passphrase, lose your private key, or suspect that your secret key has been compromised.
- Should I set an expiration date on my PGP key?
- Yes. Setting an expiration date (such as 2 years) is considered an industry best practice because it limits the window of risk if a key is abandoned. You can always extend the expiration date before it expires using your private key.
- How do I share my generated public key with others?
- You can send the ASCII-armored public key block (.asc) directly via email, upload it to a public OpenPGP keyserver (like keys.openpgp.org), or host it on your personal website.
- Are my PGP private keys or passphrases sent to an external server?
- No. All OpenPGP key generation, passphrase key derivation, and ASCII armor formatting are performed locally in your browser using OpenPGP.js. No private keys or passphrases ever leave your device.
Share this tool
Help others discover this utility. No login or registration required.
Master this tool with Guides & Articles
Learn the workflows, common mistakes, and advanced techniques behind PGP Key Generator - Browser-Native OpenPGP Keypair Creator with our deep-dive educational content.