SSH key generator

Create an OpenSSH key pair.

Algorithm and key size

Key owner (optional)

Generate locally with Bash

ssh-keygen -t ecdsa -b 521 -a 100 -f ~/.ssh/id_ecdsa

Passphrase (optional, but recommended)

Without a passphrase, the private key file is unencrypted.

About these options

ECDSA-521 has the highest classical security strength among these options. Ed25519 is a compact, widely supported alternative.

A label such as user@device. It is included in the public key as a comment and does not control access.

The Bash command asks for a passphrase in your terminal. Your passphrase is never included in the command.

Keys are generated on this server. For sensitive accounts, use the local command to keep the private key on your device. This page uses no analytics or third-party scripts.

SSH key generator

Public key

Private key

Visual fingerprint