Key Toolkit - Generate, Inspect & Convert RSA, EC, Ed25519 Keys

Free online crypto key toolkit. Generate RSA, EC, and Ed25519 key pairs. Inspect, validate, extract public keys, and compute fingerprints. 100% client-side.

Features

• Generate RSA, EC (P-256/P-384/P-521), and Ed25519 key pairs
• Inspect PEM, OpenSSH, and JWK keys
• Extract the public key from a private key
• Compute fingerprints (SHA-256, SSH-style, JWK thumbprint)
• Convert between PEM (PKCS#8 / SEC1), OpenSSH, and JWK
• Validate key format and parameters
• 100% client-side. Keys generated in your browser

Frequently Asked Questions

Which key type should I use?

Ed25519 is the modern default: fast, compact, and secure. EC (P-256) is widely supported and required by many standards (FIDO, WebAuthn). RSA (2048+ bits) is the legacy choice, still common in TLS and JWT signing where Ed25519 isn’t yet supported.

What are the common key formats?

PEM with PKCS#8 (private) and SPKI (public) is the modern default. SEC1 is common for EC private keys. OpenSSH format is used by ssh-keygen. JWK (JSON Web Key) is used by web APIs and JWT. This toolkit converts between them.

Is it safe to generate keys here?

Yes. Keys are generated locally using the browser’s Web Crypto API (a CSPRNG) and never leave your device. However, for production keys you may still prefer generating them offline in a trusted environment, and you must store private keys securely. Anyone with the private key can impersonate you.