Explore our collection of 150+ developer tools, PDF editors, and image converters. Everything runs locally in your browser.
Ubify Security & Compliance Operations
CYBERSECURITY & PRIVACY AUDITORS
About This Tool
The RSA Key Generator generates high-entropy asymmetric public and private key pairs directly within your web browser using the standard Web Cryptography API (window.crypto.subtle).
### Cryptographic Implementation Asymmetric key generation executes natively through browser cryptographic primitives: - Algorithm Specification: Uses RSASSA-PKCS1-v1_5 with SHA-256 message hashing and a standard public exponent of 65537 ($[1, 0, 1]$ in bytes). - Modulus Bit Length: Supports 2048-bit (standard web security) and 4096-bit (high-assurance security) modulus lengths. - Key Export & PEM Serialization: - Public Key: Exported in SubjectPublicKeyInfo (spki) binary format, base64-encoded, and formatted with standard -----BEGIN PUBLIC KEY----- boundaries. - Private Key: Exported in PKCS#8 (pkcs8) binary format, base64-encoded, and formatted with -----BEGIN PRIVATE KEY----- boundaries. - Cryptographic Entropy: Randomness is sourced directly from your operating system cryptographic kernel via crypto.getRandomValues, ensuring cryptographically secure pseudo-random number generation (CSPRNG).
### Worked Generation Example - Selected Modulus: 2048 bits - Hash Digest: SHA-256 - Export Format: Standard base64 PEM block - Key Outputs: - Public Key (SPKI): Base64-wrapped modulus and public exponent suitable for identity verification and token signature checking. - Private Key (PKCS#8): Base64-wrapped private components suitable for digital signing in server configurations.
### Zero-Server Security Note Unlike web services that generate cryptographic keys on a remote web server, this tool creates keys entirely inside your client browser memory using window.crypto.subtle. Zero private keys, seed tokens, or entropy streams are transmitted across any network.
How to Use
- 1
Select your desired RSA key size (2048 bits for standard performance or 4096 bits for enhanced longevity).
- 2
Click "Generate RSA Pair" to execute client-side key generation.
- 3
Copy your PEM-formatted Public Key for distribution to verifying systems.
- 4
Copy your PEM-formatted Private Key and store it in a secure credential vault.
Frequently Asked Questions
Are generated RSA private keys ever sent to a remote server?
Never. The keys are synthesized inside your browser session using native Web Crypto API APIs (window.crypto.subtle) and exist solely in local memory until you copy them.
Which modulus length should I choose: 2048 or 4096 bits?
2048-bit keys provide robust security for standard web authentication and token signing with fast computation. 4096-bit keys offer superior long-term cryptographic resistance at the cost of slightly slower signing performance.
What format are the exported keys in?
Keys are exported in standard base64 PEM encoding: PKCS#8 format for private keys and SPKI format for public keys.