Create an RSA-OAEP key pair

Developers and security teams use RSA key generator when preparing a check, a local test or integration data.

Create an RSA-OAEP key pair exportable as PEM, with both keys ready for testing. Use it for free in your browser, with no account required.

How to use

Open the RSA key generator in your browser.
Run the generation to create an RSA-OAEP key pair.
Wait until both keys appear in the result area.
Copy the public and private keys in PEM format and store them separately.
Clear the display if you are working on a shared computer.

Example

A developer is preparing a test environment for an RSA-OAEP exchange. They generate a pair, copy the public key into the service that will receive messages, and keep the private key in a protected local file. They never reuse this pair for production.

Limits and formats

Generated keys are suitable for tests and prototypes; do not treat them as production secrets without an appropriate process.
You must keep the private key yourself: the tool does not store it or offer later recovery.
The exported format is PEM, which fits many tools, but check compatibility with your library.
Security also depends on the key size you choose and on how well the private key file is protected.

Where processing happens

Everything runs in your browser. The keys are generated locally on your device and are not sent to any external service. Close the page after copying what you need, because nothing is kept for you.

Frequently asked questions

What is the difference between public and private keys?

The public key can be shared to encrypt a message or verify a signature. The private key must stay confidential and is used to decrypt or sign. If the private key is exposed, the pair no longer protects anything and should be replaced.

Can I use this pair in production?

It is better to reserve a browser-generated pair for tests, demos or prototypes. For production, follow your organisation's procedures and use a controlled key generator with suitable backup and protection. A quick test pair is not a substitute for managed keys.

What if I lose the private key?

If you lose the private key, you cannot decrypt messages linked to that pair or prove your identity with it. You will need to generate a new pair and update the systems that use the matching public key.