SSH key generator: Ed25519 and RSA in your browser
Create an SSH key pair without installing anything. The keys are made by your own browser and are never sent to us or anyone else. Copy the public key to your server and keep the private key safe.
Which type to choose
- Ed25519 is the modern default: short keys, fast, and strong. Use it unless a system does not support it.
- RSA works everywhere. Use 3072 or 4096 bits. Anything under 2048 is considered weak.
Using the key
- Save the private key as ~/.ssh/id_ed25519 and run chmod 600 on it. SSH refuses keys that other users can read.
- Put the public key into ~/.ssh/authorized_keys on the server, or paste it when you deploy a server.
- Connect with ssh -i ~/.ssh/id_ed25519 user@server-ip.
Is it safe to generate a key in a web page?
The key is generated by your browser’s own cryptography (the Web Crypto API) and stays in the page: nothing is sent over the network. If you would rather not trust any web page with a key, run ssh-keygen -t ed25519 in a terminal. It makes the same kind of key.