PGP Key Generator
Generate an OpenPGP key pair online with Curve25519, RSA 3072 or RSA 4096. Set a passphrase and expiry, get the fingerprint and a revocation certificate.
How to use PGP Key Generator
- 1Enter your name and email, pick Modern (Curve25519) unless you need RSA, and choose an expiry.
- 2Add a passphrase to protect the private key, then press Generate key. RSA 4096 can take several seconds.
- 3Copy or download the public and private keys, note the fingerprint, and store the private key and revocation certificate somewhere safe.
What makes it better
- Curve25519 (recommended), RSA 3072 or RSA 4096 keys in standard OpenPGP format
- Optional passphrase protection and a 1-year or 2-year expiry
- Key ID, fingerprint in groups of four, creation and expiry dates
- Revocation certificate on request, so a lost key can be retired later
- Generated and used in your browser: keys and passphrases are never uploaded
About PGP Key Generator
A PGP key generator creates a public key you can share and a private key you keep, so people can encrypt messages to you and you can sign yours. This page builds a standard OpenPGP key pair with OpenPGP.js, entirely in your browser, and shows the key ID, fingerprint, dates and an optional revocation certificate. The private key and passphrase never leave this tab.
Common uses
- Create a key pair to receive encrypted email or files from a colleague who uses GnuPG, Thunderbird or Proton Mail.
- Make a throwaway key to test an encryption or signature-checking workflow in your own code.
- Learn how fingerprints, key IDs, expiry and revocation certificates fit together before using a full keyring tool.
- Produce a signing key for a small project, then import it into GnuPG to manage it properly.
Example
Input
Alice Example <[email protected]> · Modern (Curve25519) · expires in 2 years
Result
Public key: -----BEGIN PGP PUBLIC KEY BLOCK----- (about 20 lines) Private key: -----BEGIN PGP PRIVATE KEY BLOCK----- (hidden until you press Show) Fingerprint: 605F BE15 E7E9 63F9 6960 FFAA 287F CF19 B652 8052 (random for every key)
Good to know
- Example only: the sample describes what you get back. Every real key is random and unique, so nothing on this page can be reproduced.
- Only you hold the private key. If you lose it, or its passphrase, nobody can recover it, including us. Download it and keep a backup offline.
- Keys made on a web page run in the browser environment, which extensions and malware can observe. For a high-value identity, generate keys with GnuPG on a trusted machine or a hardware token. This page cannot manage a keyring, a web of trust or publish to key servers.
PGP Key Generator FAQ
Which PGP key type should I choose?
Choose Modern (Curve25519) unless the person you exchange messages with uses very old software. It makes small, fast keys with strong security. Pick RSA 3072 or 4096 only for compatibility, and note that RSA 4096 is slow to generate.
Should I set a passphrase on my PGP private key?
Yes. The passphrase encrypts the private key file, so a copy that leaks from a laptop or backup is still unreadable. Leaving it empty makes an unprotected key and the page warns you. Choose a long phrase you can remember, because it cannot be reset.
What is a PGP fingerprint and why does it matter?
The fingerprint is a hash of the public key, shown here in groups of four characters. Read it to the key's owner over a call or in person: if both sides see the same value, nobody swapped the key in between. The shorter key ID is just the last 16 characters.
What is a revocation certificate?
It is a pre-signed statement that says this key must no longer be trusted. If you lose the private key or it leaks, you publish the certificate and others stop using the key. Create it now and store it apart from the key, because it is hard to make later.
Can I import these keys into GnuPG or Thunderbird?
Yes. The output is standard ASCII-armored OpenPGP, so gpg --import file.asc or Thunderbird's OpenPGP key manager accepts it. Curve25519 keys need GnuPG 2.1 or later; RSA keys work with almost everything.