Generate PGP/GPG public and private key pairs with configurable key size and algorithm using OpenPGP.js.
This tool generates an OpenPGP key pair - a public key you can share and a private key only you should hold - entirely in the browser, using the OpenPGP.js library. You choose the algorithm (RSA or elliptic curve), the RSA key size, the name and email the key is bound to, and a passphrase that encrypts the private key. Both keys come back as ASCII-armored text you save as files and import into GPG or a mail client. The part users most often miss: the pair exists only in page memory until you save it, and the public key is useless until you distribute it to the people who should encrypt to you.
The OpenPGP.js library runs in the page and builds a key around your inputs: a user ID (name and email), the chosen algorithm, and a size. RSA generation finds primes and computes the public modulus and private exponents; elliptic-curve generation (EdDSA or ECDSA) derives a private scalar and a public curve point. The key material is then serialized into the ASCII-armored OpenPGP format defined by RFC 4880.
The passphrase never becomes part of the key. OpenPGP stretches it into a symmetric key using the string-to-key mechanism (RFC 4880) - a random salt plus iterative hashing - and uses that to encrypt the private key material before serialization. Forget the passphrase and the private key is permanently unrecoverable, by you or anyone else. Leave the field empty and the private key is written in plaintext, protected only by whoever can access the file.
Generation runs locally in the page and the key material is never uploaded - nothing leaves your browser. That makes the generation itself sound, provided the page is served over HTTPS. The weak points are on your side afterwards: a weak passphrase, the private key file falling into other hands, or malware on the machine that read the tab.
Yes, if you chose a supported algorithm. Save each armored block to a file and run gpg --import on the private key on your own machine and on the public key wherever your identity should be trusted. Most mail clients import the same files directly. If an import is rejected, regenerate with RSA, which nearly everything accepts.
The behavioral notes were checked against the browser implementation. Standards and primary references below define the relevant format, formula, or platform behavior.
Generate strong, random passwords with customizable length, character sets, and complexity requirements.
Analyze password strength with entropy scoring, crack-time estimates, and improvement suggestions.
Create cryptographically random strings for API keys, tokens, salts, and unique identifiers.
Create QR codes for URLs, text, Wi-Fi credentials, vCards, and more with customizable size and colors.
Scan and decode QR codes from uploaded images or your device camera to extract embedded data.
Compute MD5, SHA-1, SHA-256, and SHA-512 checksums to verify file integrity and detect tampering.