Elliptic Curve Key Pair Generator (P-256/P-384)
Generate an elliptic-curve keypair (P-256/P-384) in PEM format, in your browser.
ECDSA keys generated locally (Web Crypto). Keep the private key secret.
🔒 100% client-side — no data sent
Generate an elliptic curve (ECC) P-256 or P-384 key pair in PEM format, right in your browser. Thanks to the Web Crypto API, keys are produced 100% locally with no server transfer. ECC gives RSA-level security with much shorter keys.
What is it for?
- ▸ Create an EC key to sign JWTs with ES256 or ES384
- ▸ Generate an ECDSA key for authentication or signing
- ▸ Prepare a lightweight key pair for IoT or mobile
- ▸ Get a PEM key pair without the command line
FAQ
Should I pick P-256 or P-384?
P-256 (prime256v1) fits the vast majority of use cases and maps to ES256 for JWTs. P-384 offers a higher security margin, useful for stricter compliance needs, with slightly heavier operations.
Why use ECC instead of RSA?
For equivalent security, an elliptic curve key is much shorter than an RSA key: a P-256 key is comparable to RSA 3072-bit. Signatures are faster and keys smaller, which is ideal for constrained environments.
Are the keys generated privately?
Yes. All generation happens in your browser via the Web Crypto API. The private key never leaves your machine and is neither stored nor transmitted, ensuring full privacy.