JSON Formatter
Beautify, minify and validate JSON with precise error locations.
Generate an RSA key pair in PEM form, in your browser.
Generate production keys with openssl or ssh-keygen on a machine you control. This is right for test keys, development environments and fixtures. The private key is shown once and is gone when you leave.
The RSA Key Generator creates a key pair in your browser and exports the public key as SPKI PEM and JWK, and the private key as PKCS#8 PEM — the formats modern libraries actually expect.
Generates an RSA key pair using the browser's own crypto and exports both halves as PEM: the public key in SPKI form and the private key in PKCS#8, which is what modern libraries expect. The public key is also given as a JWK, for JWKS endpoints and OIDC configuration.
The key is generated locally and never transmitted — but that is a weaker promise than it sounds, because you have to trust this page to keep making it. For a production signing key, generate it with openssl or ssh-keygen on a machine you control. For a test key, a development environment, a JWT experiment or a fixture in a test suite, generating one here is exactly the right amount of effort.
SPKI for the public key and PKCS#8 for the private one, which is what current libraries import without conversion.
The public key is also exported as a JWK, ready for a JWKS endpoint or an OIDC configuration.
Generate an RSASSA-PKCS1-v1_5 key for signatures or an RSA-OAEP key for encryption, since the two are not interchangeable.
A SHA-256 fingerprint of the public key, so you can confirm a deployed key is the one you generated.
The page says plainly that production keys belong on a machine you control, rather than implying a browser tool is equivalent.
2048 bits is the practical minimum; 3072 and 4096 are slower to generate and to use.
Signing produces an RSASSA-PKCS1-v1_5 key; encryption produces an RSA-OAEP key.
Larger keys take a few seconds — that work happens in your browser.
Copy or download each PEM. The private key is shown once and not stored anywhere.
No. Generate production keys with openssl or ssh-keygen on a machine you control. A browser tool is right for test keys, development environments and fixtures.
2048 bits is the minimum taken seriously today and is fine for most uses. 3072 or 4096 for anything that must stay secure for many years, at the cost of slower operations.
The public key is SPKI — "BEGIN PUBLIC KEY" — and the private key is PKCS#8 — "BEGIN PRIVATE KEY". The older "BEGIN RSA PRIVATE KEY" is PKCS#1, which some tools still want and openssl can convert to.
No. It exists in the page while it is displayed and is gone when you close the tab. Copy it before you navigate away, because it cannot be recovered.
What people who use the RSA Key Generator think of it. Reviews come from visitors and are posted as written.
No ratings yet
Yours would be the first.
0 reviews
Newest first
No reviews yet
Be the first to rate the RSA Key Generator. It takes half a minute and no account.
Write the first reviewBeautify, minify and validate JSON with precise error locations.
Score a selector and find out which of two rules actually wins.
Check JSON syntax and get the exact line, column and cause of any error.
Verify a download by computing its SHA-256 without uploading it anywhere.
Generate believable company names, domains and details for mockups.
Build text shadows, outlines and glows with a live preview.
Generate realistic test rows in JSON, CSV or SQL from fields you choose.
Produce SHA-1, SHA-256, SHA-384 and SHA-512 digests of any text.