SSH Key Generator (Ed25519) Online
Generate an Ed25519 SSH key pair with OpenSSH public key output.
About this tool
Ed25519 is the modern default for SSH keys — small, fast, and free of the parameter choices that made older key types risky. This generator creates an Ed25519 key pair with the Web Crypto API and formats the public key as the OpenSSH line you paste into ~/.ssh/authorized_keys, along with its SHA256 fingerprint.
The private key is exported as PKCS#8 PEM, which you can convert to an OpenSSH key file. Generation happens entirely on your device and nothing is transmitted — but for keys guarding production servers, generating with ssh-keygen locally remains the gold standard.
Like everything on encrypt.tools, this runs entirely in your browser — nothing you enter is transmitted or stored.
Frequently asked questions about SSH Key Generator
Is it safe to generate SSH keys in a browser?+
The key is generated locally with your device's secure random source and never transmitted. For most uses this is fine; for keys protecting critical infrastructure, generating offline with the ssh-keygen command is the most conservative choice.
How do I use the generated key?+
Add the OpenSSH public key line to ~/.ssh/authorized_keys on the server you want to access. Save the private key locally (as an OpenSSH or PEM key file) and point your SSH client at it. The SHA256 fingerprint lets you verify the key later.
Why Ed25519 instead of RSA?+
Ed25519 keys are 68 characters versus thousands for RSA, are faster to authenticate, and have no weak-parameter footguns. Every modern SSH server supports them. Choose RSA only for legacy servers that predate Ed25519 support.
Related tools
RSA Key Generator
Generate RSA key pairs and export them as PEM
RSA-OAEP · SHA-256RSA Encrypt / Decrypt
Encrypt with a public key, decrypt with a private key
ECDSA · P-256/384/521ECC Key Generator
Generate P-256, P-384, and P-521 key pairs as PEM
ED25519 · X25519Ed25519 / X25519 Keys
Modern Curve25519 signing and key-exchange keys