RSA Key Pair Generator
Create an RSA-OAEP key pair for development and small-value encryption. Generation uses the Web Crypto API and never uploads your keys.
A QUICK WALKTHROUGH
How to use this tool
- Choose a 2048-bit or 3072-bit RSA key size and an optional download label.
- Generate the pair locally with RSA-OAEP and SHA-256.
- Copy or download the PKCS#8 private key and SPKI public key, then store the private key securely.
Local browser generation
The Web Crypto API creates the key pair on your device. Exported PEM text stays in this page until you copy or download it; this tool does not send, store, rotate, or recover keys.
Clear security boundary
RSA-OAEP is for encryption and is intended for small plaintexts or wrapping a symmetric key. Do not use these outputs as TLS certificates, signing keys, identity credentials, or a production key-management service. Protect the private key and use a reviewed library and key-management process for production.
GOOD TO KNOW
Common questions
What algorithm does this generator use?
It uses RSA-OAEP with SHA-256, a 2048-bit or 3072-bit modulus, and public exponent 65537.
Which key should I share?
The SPKI public key may be shared. Keep the PKCS#8 private key secret and protect it with your application’s secure storage.
Can RSA encrypt any message?
No. RSA-OAEP is designed for short messages and key wrapping. Use a modern hybrid encryption design for larger data.
Is this a production certificate or signing service?
No. It creates an encryption key pair only. It does not issue certificates, sign data, authenticate identities, or manage key rotation.