SSH Key Generator

An SSH key pair is two linked files: a private key you keep secret on your machine, and a public key you place on the servers you want to reach. When you connect, the server checks that you hold the matching private key - so you log in securely without ever typing a password.

Key-based auth is both safer and more convenient than passwords, which is why it is the standard for managing Linux servers.

Use Ed25519 unless you have a reason not to - it is fast, the keys are tiny, and the security is excellent. Reach for RSA (3072 or 4096 bits) only when you must support an older server or tool that predates Ed25519. Avoid DSA and 1024-bit RSA entirely; they are considered weak.

1. Generate the pair above and download both files into your ~/.ssh directory.
2. Lock down the permissions: chmod 600 ~/.ssh/id_ed25519 and chmod 700 ~/.ssh. SSH refuses keys that others can read - our chmod calculator explains why.
3. Copy the public key to your server with ssh-copy-id user@host, or append it to ~/.ssh/authorized_keys there.
4. Optionally add an alias in your SSH config so you can connect with a short name.

This tool runs entirely on your device using the browser's built-in Web Crypto API. The private key is created locally and is never transmitted, logged, or stored on any server. You can confirm this by generating a key with your network tab open - there is no request.

For the very highest assurance - production infrastructure, signing keys, anything long-lived - generating locally with ssh-keygen or inside CtrlOps remains the gold standard. This generator is ideal for learning, testing, and quick keys.