Keypair Generator

Generate RSA, EC, or Ed25519 signing keypairs in your browser — PEM private/public keys, a JWKS bundle, and env-var-ready output. Nothing ever leaves your tab.

Key options

Pick an algorithm and a key id, then generate. Everything runs locally.

Key type

Modulus size

Signature hash

Service name

Used only to build a suggested key id.

Key ID (kid)

Stable label that goes in the JWT header and JWKS.

Equivalent openssl command

openssl genpkey -algorithm RSA -pkeyopt rsa_keygen_bits:2048 -out signing-key.pem

Keys are generated locally with the Web Crypto API and never leave your browser.

Related tools

JWT Inspector

Security

Password Generator

Security

Hash Generator

Security

Icon Kit

Design Ops