Encrypt Online
Theme

OpenPGP Key Pair Generator

Create a protected public/private key pair and revocation certificate for OpenPGP messages

Key handling: Share the public key. Keep the private key, its passphrase, and the revocation certificate separate and protected. Save all three files before leaving this page.
Create an OpenPGP key pairOne modern profile for message encryption and signatures
This becomes the visible identity on the public key.
Include an address only when it helps people identify the key.
Use a long passphrase you can store safely. It cannot be recovered here.
Expiration limits how long others should keep using this key.
Key profileEd25519 primary key + X25519 encryption subkeyFixed Curve25519 profile; no algorithm choice is required.
What the Generator Creates
  • Public key: Share it with people who need to encrypt messages for you or verify your signatures.
  • Encrypted private key: Keep it secret. It decrypts messages and requires the passphrase entered during generation.
  • Revocation certificate: Keep it protected so you can retire the public key if the private key is lost or compromised.
Use the Key Pair Safely
  1. Generate the key pair and save all three files.
  2. Store the private key separately from its passphrase.
  3. Share only the public key and its complete fingerprint.
  4. Ask senders to compare the fingerprint through a trusted channel.
  5. Test encryption and decryption with harmless text first.
Expiration and Revocation

Expiration tells other OpenPGP software when to stop using a key for new messages. It does not erase the key or old ciphertext. A revocation certificate marks a key as retired when it is lost, compromised, or replaced. Losing the only private-key copy can make retained messages unreadable.

FAQ
Can I share the public key?

Yes. The public key is designed to be shared. Send the complete armored block and confirm its full fingerprint through a trusted channel.

Can this page recover my passphrase or private key?

No. Save the private key and passphrase before leaving. The generator does not provide an account, backup, or recovery service.

Why is there no algorithm selector?

The generator uses one modern Curve25519 OpenPGP profile: an Ed25519 primary key and X25519 encryption subkey. The fixed profile keeps the setup focused and avoids incompatible combinations.