SSH Key Generator
Generate Ed25519 or RSA SSH key pairs entirely in your browser — no backend, no uploads.
Ed25519 is faster and shorter; RSA is widely compatible with older servers.
Appears at the end of the public key — typically your email or user@hostname.
What is SSH?
SSH (Secure Shell) is the standard protocol for logging into remote servers and pushing code to Git providers. Key pairs replace passwords with strong public-key cryptography.
Public vs Private
Your public key is uploaded to servers or GitHub and identifies you. Your private key stays only on your machine and proves you're you. Anyone with your private key can impersonate you.
How to use it
On GitHub: Settings → SSH and GPG keys → New SSH key and paste your public key. On a server: append the public key to ~/.ssh/authorized_keys. Keep the private key in ~/.ssh/ with permissions 600.
How to use
- 1
Choose a key type — Ed25519 is recommended; RSA is best for legacy compatibility.
- 2
Add an optional comment (typically your email or user@hostname) to label the key.
- 3
Click Generate Key Pair — everything happens locally in your browser, then copy or download both keys.
Free SSH Key Generator Online — Generate RSA, Ed25519 & ECDSA Keys
Generate SSH key pairs (RSA, Ed25519, ECDSA) directly in your browser. Copy public and private keys instantly. Free, secure, no server upload.
Skycally's SSH Key Generator creates cryptographic key pairs for SSH authentication directly in your browser using the Web Crypto API. Choose your key type (RSA-4096, Ed25519, or ECDSA-P256), optionally add a comment to identify the key, and instantly get both your public and private keys ready to copy.
SSH (Secure Shell) key authentication is more secure than passwords because keys are cryptographically strong, immune to brute-force attacks, and never transmitted over the network. The public key is placed on the server in ~/.ssh/authorized_keys, and the private key stays on your device. Authentication works by proving you have the private key without ever sending it.
Ed25519 is the recommended key type for most modern use cases — it is fast, compact, and highly secure with a 256-bit key that provides equivalent security to RSA-3072. RSA-4096 offers the widest compatibility with older systems. ECDSA-P256 is a good middle ground. All three key types are supported by OpenSSH, GitHub, GitLab, Bitbucket, and major cloud providers.
All key generation happens entirely in your browser using the Web Crypto API — your keys never touch any server. This makes the tool safe for generating keys for production servers, GitHub, and other sensitive systems. Always save your private key to a secure location immediately and never share it with anyone.
Frequently Asked Questions
What is an SSH key?
An SSH key is a cryptographic key pair used for secure authentication. The public key is placed on servers you want to access; the private key stays on your device. Together they prove your identity without sending a password.
Which key type should I choose?
Ed25519 is recommended for most uses — it is modern, fast, and highly secure. RSA-4096 offers the widest compatibility with older systems. ECDSA-P256 is a good middle ground with broad support.
Are the keys generated on your server?
No. All key generation uses the browser's Web Crypto API and runs entirely on your device. Your private key never leaves your browser.
What is the comment field for?
The comment is added to the end of the public key to help identify it (e.g. your email or device name). It has no effect on security and can be anything or left empty.
How do I use the generated key?
Copy the public key and add it to your server's ~/.ssh/authorized_keys file or paste it into GitHub/GitLab SSH key settings. Save the private key to ~/.ssh/id_ed25519 on your local machine and set permissions to 600.
What is the difference between public and private keys?
The public key can be shared freely and placed on any server. The private key must be kept secret and never shared. Authentication works by proving you possess the private key without revealing it.
Is it safe to generate SSH keys in a browser?
Yes, when the tool uses the Web Crypto API as this one does. The cryptographic operations happen locally on your device. Never generate keys on a website that sends them to a server.
What key size should I use for RSA?
RSA-4096 is recommended for new keys — it provides strong security well beyond current computing capabilities. RSA-2048 is still considered secure but RSA-4096 is preferred for long-term use.
You might also like
Other tools you might find useful.