How it works
Complete the job in three clear steps
- Choose the key strength or elliptic curve.
- Generate and proof-test the extractable key pair locally.
- Download the public and private PEM files, then protect the unencrypted private key.
Private Web Crypto key tool
RSA Key Pair Generator
Generate a 2048, 3072, or 4096-bit RSA-PSS key pair locally and export SPKI public and PKCS#8 private PEM files.
Free to use The key pair is generated in this browser with Web Crypto and is never sent to Lucaden. Results are not retained by this tool.
Loading tool workspace…
Important
Check the result before relying on it
Scan-test generated codes before printing or distribution. A generated barcode does not register identifier ownership, and decoded external links should be checked before opening.
Practical details
What this Lucaden tool does
Generate a 2048, 3072, or 4096-bit RSA-PSS key pair locally and export SPKI public and PKCS#8 private PEM files.
The workspace exports standards-based PEM output, proof-checks the generated signature, and never persists the unencrypted private key.
Included capabilities
- 2048/3072/4096-bit RSA
- Public exponent 65537
- SPKI and PKCS#8 PEM
- Local sign-and-verify proof
Useful for
- Create development keys
- Prepare signing fixtures
- Test PEM import
- Prototype a verification flow
Questions
About this tool
Does Lucaden receive or save the private key?
No. Web Crypto creates and exports it in this browser. This workspace does not upload it or put it in local storage.
Is the downloaded private key encrypted?
No. It is an unencrypted PKCS#8 PEM. Store it only in an access-controlled secret manager or encrypt it with an appropriate offline workflow.
Open-source foundations
Built transparently
Lucaden documents its standards sources, architectural references, and permissive runtime dependencies while keeping this workspace consistent with the Lucaden interface.