SSH Key Generator
Generate OpenSSH-compatible public and private keypairs for secure server authentication. Supports Ed25519, RSA 4096, and ECDSA with RFC 4253 authorized_keys formatting and client-side execution.
OpenSSH Engine
Browser-Native OpenSSH Keypair Generation and Authorized Keys Formatting
The SSH Key Generator creates production-ready OpenSSH public and private keypairs directly inside your web browser. Built on the native W3C Web Crypto API, this utility allows system administrators, DevOps engineers, and software developers to generate secure SSH credentials without installing command-line utilities or transmitting private keys across the internet.
This utility supports modern elliptic curve Ed25519 keys (RFC 8709), enterprise RSA keys (2048-bit and 4096-bit), and NIST ECDSA P-256 keys (RFC 5656). It automatically serializes public keys into the standard OpenSSH single-line wire format with custom comment tags ready for direct inclusion in server authorized_keys files.
The workspace calculates both SHA-256 and legacy MD5 key fingerprints to simplify host and identity verification. It provides one-click copy actions, standard file downloads (id_ed25519 and id_rsa), visual screen privacy masking, and standard permission command hints (chmod 600) for local terminal setup.
Core Tool Capabilities
- Ed25519 Modern Elliptic Curve Support: Generates high-speed 256-bit Ed25519 keys providing compact public keys and superior resistance to cryptographic side-channel attacks.
- Legacy and High-Bitlength RSA Generation: Constructs 2048-bit and 4096-bit RSA keys formatted for compatibility with legacy servers and enterprise infrastructure policies.
- RFC 4253 OpenSSH Wire Serialization: Produces standard single-line public keys ready for immediate deployment to ~/.ssh/authorized_keys or GitHub and GitLab profiles.
- Dual Fingerprint Calculation: Displays both modern Base64 SHA-256 and hexadecimal MD5 key fingerprints to facilitate fast identity cross-referencing.
- Identity Tag Customization: Enables custom key comments (such as user@workstation) to maintain organized identity management across remote server clusters.
Local Browser Privacy
Your files are processed locally on your device. Files are not uploaded, transmitted, or stored on remote servers.
Once the page has loaded, you can disconnect your network connection and continue using this tool offline.
Target Use Cases
- • Remote Server and VPS Access Provisioning
- • Git Hosting Account Authentication
- • CI/CD Pipeline and Deploy Key Setup
- • Temporary Jump Host and Bastion Access
Technical Specifications & Platform Limits
Full suite of standard OpenSSH key types.
Single-line string for authorized_keys.
Standard private key envelope.
Zero external network requests or key storage.
Step-by-Step Workflow
Select SSH Key Type
Choose between modern Ed25519 (recommended for speed and security), RSA 4096, RSA 2048, or ECDSA P-256.
Set Comment and Generate
Enter an optional identity comment (such as your email or machine name) and click Generate SSH Key to compute the keypair.
Copy Public Key for Server
Copy the formatted public key line and paste it directly into your remote server ~/.ssh/authorized_keys file or git hosting account.
Download Private Key Safely
Download the private key file to your ~/.ssh directory and set filesystem permissions with chmod 600 for secure terminal authentication.
Practical Real-World Use Cases
Remote Server and VPS Access Provisioning
System administrators generating dedicated SSH keypairs for root or deploy user authentication across cloud virtual machines.
Git Hosting Account Authentication
Developers provisioning new Ed25519 SSH public keys to authenticate git push and pull operations on GitHub, GitLab, and Bitbucket.
CI/CD Pipeline and Deploy Key Setup
DevOps engineers creating isolated deploy keys for continuous integration runners requiring read-only repository access.
Temporary Jump Host and Bastion Access
Security engineers generating short-lived SSH keys for audit sessions without relying on persistent workstation credentials.
Frequently Asked Questions
- Why is Ed25519 recommended over RSA for SSH keys?
- Ed25519 is an elliptic curve signature scheme that provides stronger cryptographic security than 2048-bit RSA with much smaller key sizes (68 characters vs over 500 characters), faster signature verification, and immunity to timing attacks.
- How do I install the generated public key on a remote Linux server?
- Append the generated public key string as a new line in your remote user ~/.ssh/authorized_keys file, ensuring that the .ssh directory has 700 permissions and authorized_keys has 600 permissions.
- Why do I need to run chmod 600 on the private key file?
- The OpenSSH client strictly refuses to use private keys that are readable by other users on your local system, requiring read and write access for the file owner only (chmod 600).
- What is an SSH key fingerprint?
- An SSH key fingerprint is a short cryptographic hash (such as SHA256:abc.) of the raw public key bytes used to quickly identify and verify server host keys and client authentication credentials.
- Are my SSH private keys transmitted to any remote server?
- No. All keypair generation, byte encoding, and wire formatting are performed strictly inside your web browser memory. Private keys are never sent over the network or saved to remote databases.
Share this tool
Help others discover this utility. No login or registration required.
Master this tool with Guides & Articles
Learn the workflows, common mistakes, and advanced techniques behind SSH Key Generator - OpenSSH Ed25519 & RSA Keypair Creator with our deep-dive educational content.