Generator
SSH Key Generator — Ed25519, RSA & ECDSA Locally
- Generate
- Mobile Friendly
- Accessibility Tested
- SEO Optimized
- Fast Loading
- Responsive
Version 1.0.0 · Last reviewed
How it worksShow guide
Introduction
Create SSH public/private key pairs in your browser with Web Crypto. Choose Ed25519, RSA, or ECDSA, set a comment, pick OpenSSH or PEM output, and copy or download the files. Keys never leave this device.
Step-by-step
- Choose algorithm and size/curve options
- Set a key comment (usually email or user@host)
- Generate, then copy or download the private key and .pub file
Worked example
Ed25519 with comment deploy@bestrao produces an OpenSSH private key and a one-line ssh-ed25519 public key ready for authorized_keys.
Use cases
- Create a new Ed25519 key for GitHub, GitLab, or a VPS
- Generate RSA 3072/4096 keys for older servers
- Produce ECDSA keys and verify SHA256/MD5 fingerprints before install
Frequently asked questions
Are keys uploaded to Bestrao?
No. Generation uses the Web Crypto API in this tab. Clear the panel when you are done.
Which algorithm should I pick?
Ed25519 is the modern default. Use RSA when a server rejects Ed25519. ECDSA is available for environments that prefer NIST curves.
Can I add a passphrase here?
This tool emits unencrypted private keys for compatibility. Protect them with file permissions, or run ssh-keygen -p -f your_key afterward to add a passphrase.
OpenSSH vs PEM?
OpenSSH is what ssh, scp, and most hosts expect. PEM (PKCS#8 / SPKI) is useful for some libraries and tooling that do not parse OpenSSH format.
Related tools
-
Password Generator
Generate strong random passwords locally with configurable length and character sets.
-
Hash Generator
Generate SHA-1, SHA-256, SHA-384, or SHA-512 digests in your browser with Web Crypto.
-
UUID Generator
Generate one or many RFC 4122 UUID v4 identifiers with Web Crypto.
-
Base64 Encode / Decode
Encode text to Base64 or decode Base64 back to UTF-8 text in your browser.
Popular tools
-
API Workbench
Browser-native API client — build or paste cURL requests, inspect responses, manage collections, and store everything in IndexedDB. No backend required.
-
AES Encrypt / Decrypt
Encrypt and decrypt text with AES-GCM or AES-CBC locally. Passphrase (PBKDF2) or raw keys, custom IV/salt, and portable JSON packages.
-
Line Sorter & Deduplicator
Sort lines alphabetically or by length, remove duplicates, and trim empty lines — locally in your browser.
Was this helpful?
Your feedback stays on this device only — it is not sent to the Bestrao team yet.