You are responsible for key management and output validation.
RSA Key Pair Generator
Generate RSA-OAEP key pairs in your browser and export them as PEM (SPKI public key, PKCS#8 private key). Keys never leave your device.
RSA-OAEP with SHA-256, exportable for your own use. Generation runs locally with the Web Crypto API.
Frequently Asked Questions
Are the keys generated locally?
Yes. The Web Crypto API generates the key pair inside your browser using your device's secure random number source. Nothing is sent to a server.
Which algorithm and formats are used?
RSA-OAEP with SHA-256. The public key is exported as SPKI PEM and the private key as PKCS#8 PEM, both common interchange formats.
Is a 2048-bit RSA key enough?
2048-bit keys remain the common minimum and are still broadly supported, while 3072 and 4096 provide more margin at the cost of speed. Choose based on the sensitivity and lifetime of the data, and follow your organization's key-management policy.