โข Click "Generate Key Pair" to create new RSA key
โข 1024-bit: Deprecated, not recommended, for compatibility only
โข 2048-bit: Standard security level, good performance
โข 3072-bit: Higher security level
โข 4096-bit: Highest security level, recommended
โข 8192-bit: Super strong security level, slower to generate
โข Supports one-click copy of public or private key
RSA Key Pair Generator
This RSA key pair generator creates secure public and private keys for encryption, decryption, and digital signatures. RSA (Rivest-Shamir-Adleman) is one of the first public-key cryptosystems and remains widely used for secure data transmission.
What is RSA Encryption?
RSA is an asymmetric cryptographic algorithm that uses two different keys: a public key for encryption and a private key for decryption. The security of RSA relies on the computational difficulty of factoring large prime numbers. It's commonly used for secure key exchange, digital signatures, and encrypting small amounts of data.
RSA Key Length Security
- โ 1024-bit: Deprecated and considered insecure. Use only for legacy compatibility.
- โ 2048-bit: Current minimum standard. Acceptable for most applications until 2030.
- โ 3072-bit: Enhanced security. Recommended for sensitive data and long-term use.
- โ 4096-bit: High security level. Recommended for critical applications and certificates.
- โ 8192-bit: Maximum security. Slower to generate and use. For ultra-sensitive applications.
Common RSA Use Cases
- ๐ SSL/TLS Certificates: Securing HTTPS connections for websites.
- ๐ Digital Signatures: Verifying document authenticity and integrity.
- ๐ Secure Email: PGP/GPG encryption for email communication.
- ๐ SSH Authentication: Public key authentication for secure shell access.
- ๐ API Security: JWT signing and OAuth token encryption.
- ๐ Code Signing: Verifying software authenticity and integrity.
Understanding RSA Keys
RSA key pairs consist of two mathematically related keys:
- Public Key: Can be shared freely. Used to encrypt data or verify signatures.
- Private Key: Must be kept secret. Used to decrypt data or create signatures.
The keys are generated as PEM (Privacy-Enhanced Mail) format, which is a common base64 encoded format with BEGIN/END markers. This format is compatible with OpenSSL, SSH, and most cryptographic libraries.
How RSA Works
- Key Generation: Two large prime numbers are multiplied to create a modulus (n).
- Public Key: Consists of the modulus (n) and a public exponent (e).
- Private Key: Consists of the modulus (n) and a private exponent (d).
- Encryption: Data is encrypted using the public key: c = mแต mod n
- Decryption: Encrypted data is decrypted using the private key: m = cแต mod n
Security Best Practices
- โ Private Key Protection: Never share your private key. Store it securely with restricted access.
- โ Key Size: Use at least 2048-bit keys. 4096-bit is recommended for new applications.
- โ Key Rotation: Implement key rotation policies for production systems.
- โ Use Hybrid Encryption: RSA is slow for large data. Use it to encrypt symmetric keys (AES), then encrypt data with AES.
- โ Post-Quantum Consideration: RSA may be vulnerable to quantum computers. Consider post-quantum alternatives for long-term security.
This tool uses the Web Crypto API for cryptographically secure key generation. All operations are performed locally in your browser. The generated keys are suitable for development and testing. For production systems, consider using dedicated key management systems (KMS) or hardware security modules (HSM). Always protect your private keys and never expose them in client-side code.