Keys, Certificates & Tokens
RSA Key Pair Generator
Generate RSA keys in your browser. Choose the key length and output format, then select Generate key pair.
This tool runs open-source code from CyberChef by GCHQ (Apache License 2.0). See open-source credits.
The generator creates an RSA pair with public exponent 65537. Key generation uses fresh randomness.
PEM contains a public SPKI block and a private PKCS#1 block. DER contains only the private key.
- Create a test pair for RSA Encryption, RSA Decryption, RSA Signer, and RSA Verifier.
Sources: NIST SP 800-131A Rev. 2: RSA key-length transitions; RFC 8017: RSA key representation
Choose a key size and output format
- Choose RSA Key Length and Output Format.
- Select Generate key pair.
- Save the result before changing options; option changes clear it.
Private key formats and handling
- Private exports have no password protection.
- JSON output contains library number arrays, not a JWK.
- Software expecting PKCS#8 needs a separate format conversion.
Inspect a generated RSA key pair
Input: No input. The generator needs no source text.
Settings: RSA Key Length 2048; Output Format PEM
Result: A -----BEGIN PUBLIC KEY----- block, then a -----BEGIN RSA PRIVATE KEY----- block. Each run creates a new pair.
Copy only the public block when another person needs to encrypt or verify a signature.