PGP Sleutels Genereren

Genereer RSA-, ECC- of EdDSA-sleutelpaar voor PGP-encryptie en digitale handtekeningen.

Overview

Generate PGP public/private key pairs entirely inside your browser — no server ever sees your keys, your passphrase, or your identity details. Choose RSA (2048–4096 bit) or ECC (Ed25519/ECDH) algorithms, set an optional expiry date, and protect the private key with a passphrase, all before a single byte leaves your machine. The resulting keys are exported in standard OpenPGP (.asc) format, making them immediately compatible with GPG, Thunderbird, Kleopatra, and any other OpenPGP-compliant software. Because key generation happens client-side using the Web Crypto API's cryptographically secure random number generator, there is no risk that a compromised server or network intercept could expose your new key material.

Common Use Cases

  • Encrypted Email Setup — Developers and journalists generate a personal RSA-4096 or Ed25519 key pair to start encrypting email with GPG or Thunderbird/Enigmail without installing desktop tools first.
  • Software Release Signing — Open-source maintainers create a dedicated signing key to sign release tarballs and verify authenticity for downstream users.
  • Secure Team Onboarding — DevOps teams quickly spin up PGP key pairs for new engineers who need to decrypt shared secrets stored in password managers like pass or gopass.
  • Offline / Air-Gapped Use — Security-conscious users generate keys on an air-gapped machine by loading the page once and using it fully offline, since the tool works without a network connection.
  • Learning Public-Key Cryptography — Students and hobbyists experiment with different key types and sizes to understand the trade-offs between RSA and ECC before deploying keys in production.

How It Works
1

Configure Key Parameters

Enter your name, email, and optional passphrase. Choose key type (RSA/ECC), key size, and expiration settings.

2

Generate Key Pair

The tool creates a cryptographically secure public/private key pair using your browser's random number generator.

3

Export and Store Keys

Download your public and private keys in standard PGP format. Share the public key and keep the private key secure.

Frequently Asked Questions

What is PGP and why do I need key pairs?
PGP (Pretty Good Privacy) uses public-key cryptography. Your public key encrypts messages that only your private key can decrypt, and your private key signs messages that others can verify with your public key.

Should I use a passphrase for my private key?
Yes, always use a strong passphrase. This adds an extra layer of security - even if someone gets your private key file, they can't use it without the passphrase.

What key size should I choose?
For RSA keys, 2048 bits is minimum, 4096 bits is recommended for long-term security. ECC keys offer equivalent security with smaller sizes (256-bit ECC ≈ 3072-bit RSA).

How long should my keys be valid?
Key expiration is a security best practice. Consider 2-5 years for personal use, shorter for high-security environments. You can always extend expiration later.

Is key generation secure in the browser?
Yes, all key generation uses cryptographically secure random number generation (crypto.getRandomValues()) and happens entirely locally. Keys are never transmitted to servers.

Can I use these keys with other PGP software?
Yes, the generated keys are in standard OpenPGP format and compatible with GPG, Thunderbird, Outlook, and other PGP-compatible software.

Gerelateerde Tools

AES Bestand & Tekst Encryptor Base64 Decode Base64 Encode CSR Generator DER naar PEM Converter Hash Generator