Is the private key sent anywhere?

No. The key pair is generated locally with the Web Crypto API and stays in your browser. Nothing is transmitted to GrantSSH or any server.

Is generating keys in a browser safe?

It uses your browser cryptographic random source, which is suitable for key generation. For the strongest guarantees on a machine you fully control, generating with ssh-keygen locally remains the gold standard.

Why is there no passphrase option?

The key is produced unencrypted so it stays simple and dependency-free. Add a passphrase immediately after downloading with: ssh-keygen -p -f id_ed25519. This encrypts the private key at rest.

Can it generate RSA keys?

Not currently. ed25519 is the recommended modern algorithm. If you specifically need RSA, use the ssh-keygen command generator and run it locally.

Free Tool

Generate an ed25519 SSH key pair

Generate a modern ed25519 key pair without installing anything. Keys are created locally with your browser's Web Crypto API and never leave this page.

Runs entirely in your browser. Nothing you paste or generate is uploaded.

Handle the private key carefully.

The private key below is unencrypted. Save it, then add a passphrase locally with ssh-keygen -p -f id_ed25519. Never paste a private key into other websites or share it.

Comment (optional)

Your browser does not expose the Web Crypto API needed to generate keys. Use ssh-keygen -t ed25519 locally instead.

Public key (id_ed25519.pub)

Private key (id_ed25519)

SHA256 fingerprint

This tool needs JavaScript. Generate a key locally with ssh-keygen -t ed25519.

Using your new key

Save the private key to ~/.ssh/id_ed25519 and restrict it with chmod 600 ~/.ssh/id_ed25519. Add the matching public key to the systems you need to reach. With GrantSSH you upload the public key once, and access is granted and revoked centrally.

Prefer to generate keys on your own machine? Use the ssh-keygen command generator.

Frequently asked questions

Is the private key sent anywhere?: No. The key pair is generated locally with the Web Crypto API and stays in your browser. Nothing is transmitted to GrantSSH or any server.
Is generating keys in a browser safe?: It uses your browser cryptographic random source, which is suitable for key generation. For the strongest guarantees on a machine you fully control, generating with ssh-keygen locally remains the gold standard.
Why is there no passphrase option?: The key is produced unencrypted so it stays simple and dependency-free. Add a passphrase immediately after downloading with: ssh-keygen -p -f id_ed25519. This encrypts the private key at rest.
Can it generate RSA keys?: Not currently. ed25519 is the recommended modern algorithm. If you specifically need RSA, use the ssh-keygen command generator and run it locally.

Other free tools

Ready for Controlled SSH Access?

Create your account and start granting time-limited SSH access in minutes.

Get started

Set up controlled SSH access in minutes.