SSH Key Generator — Ed25519 & RSA

Installing the keys

# save the private key and lock it down
mv ~/Downloads/id_ed25519 ~/.ssh/
chmod 600 ~/.ssh/id_ed25519

# optional: add a passphrase
ssh-keygen -p -f ~/.ssh/id_ed25519

# on the server (or paste into GitHub → Settings → SSH keys)
cat id_ed25519.pub >> ~/.ssh/authorized_keys

OpenSSH refuses private keys that other users can read, so chmod 600 is required. The ~/.ssh folder itself should be 700.

Ed25519, RSA or ECDSA?

The fingerprint

The SHA256:… fingerprint shown above is what GitHub, GitLab and ssh-keygen -lf display for the key, so you can confirm you uploaded the right one. When connecting to a server for the first time, compare its host key fingerprint the same way.

Security notes

Keys are generated with the Web Crypto API and the OS random generator, and are never transmitted. The private key is unencrypted; add a passphrase with ssh-keygen -p and load it into ssh-agent for convenience. For production servers, generating keys locally with ssh-keygen -t ed25519 is equally easy if you prefer not to use a browser.

Need PEM or JWK formats for signing? Use the RSA key generator.

También se busca como: ssh-keygen online, generate ssh key, ed25519 key generator, ssh key pair, github ssh key, deploy key generator, id_rsa generator.

Herramientas que combinan con: SSH Key Generator

• Calculadora de chmod — Marca las casillas «Leer», «Escribir» y «Ejecutar» para el propietario, el grupo y los demás, o escribe 755, rwxr-xr-x o u=rwx,g=rx,o=rx.
• Generador de comandos de Git — Elige una tarea como «deshacer la última confirmación pero conservar mis cambios» o «cambiar el nombre de una rama en GitHub», introduce los nombres de tus ramas y obtén los comandos exactos de Git: cada línea viene explicada y los pasos que pueden suponer un riesgo están señalados.
• Htpasswd Generator — Generate user:hash lines for HTTP Basic Authentication in Apache, Nginx, Traefik and Caddy — with bcrypt by default and nothing sent to a server.
• SSL Certificate Decoder — Paste a PEM certificate or a full chain to see who it was issued to, which domains it covers, when it expires and how it is signed — like openssl x509 -text, but readable.