Keys, Certificates & Tokens
PGP Key Pair Generator
Generate a public and private PGP key pair in your browser. Choose the key type and optional password, then select Generate key pair.
This tool runs open-source code from CyberChef by GCHQ (Apache License 2.0). See open-source credits.
Key type selects the primary ECDSA curve. The signing and encryption subkeys use P-256.
The result contains armored private and public key blocks.
- Create a disposable key pair to test PGP Encryption and PGP Decryption.
Key curves, compatibility, and private output
- The generator creates version 4 keys, not RFC 9580 version 6 keys.
- The encryption subkey expires after two years; the signing subkey expires after eight years.
- The tool creates no revocation certificate. Create one in your OpenPGP client.
Choose a curve and generate the key blocks
- Choose Key type and optionally enter Name and Email.
- Set Password to encrypt the private block.
- Select Generate key pair. Save the result before changing settings.
Inspect a generated OpenPGP key pair
Input: No input. The generator needs no source text.
Settings: Key type ECC-256; Password (optional), Name (optional), and Email (optional) left empty
Result: A -----BEGIN PGP PRIVATE KEY BLOCK----- block, then a -----BEGIN PGP PUBLIC KEY BLOCK----- block. Each run creates a new pair.
Generated keys differ on each run. Share only the public block.