How does ECDSA compare to RSA?

ECDSA gives similar security to RSA with much smaller keys and faster operations, which is why it is common in TLS, JWTs and crypto wallets.

Which curve should I pick?

P-256 is a strong, widely supported default. Use P-384 or P-521 for higher security margins.

Are the keys uploaded?

No. They are generated locally with the Web Crypto API.

Security & Cryptography

ECDSA Key Pair Generator

Generate an ECDSA public and private key pair in PEM format.

Free foreverRuns in your browserNo sign-up

Curve

ECDSA keys are shorter than RSA for similar strength and are common in TLS, JWTs and crypto wallets. Keys are generated in your browser and never leave your device.

About the ECDSA Key Pair Generator

Generate an elliptic curve (ECDSA) key pair with a public and private key in PEM format.

Choose the P-256, P-384 or P-521 curve, then copy the keys for signing, verification and TLS.

ECDSA keys are much shorter than RSA for similar strength. Keys are generated in your browser and never leave your device.

Key features

P-256, P-384 and P-521 curves
Public key in SPKI PEM, private in PKCS#8 PEM
Shorter keys than RSA for similar strength
Runs entirely in your browser

How to use

1Choose an elliptic curve.
2Click generate to create the pair.
3Copy the public and private keys.

Examples

P-256 pair

Input: P-256 curve

Output: PUBLIC KEY and PRIVATE KEY blocks

Share the public key and keep the private key secret.

Stronger curve

Input: P-521 curve

Output: A larger key pair

Higher curves add security margin at some cost to speed.

Frequently asked questions

How does ECDSA compare to RSA?: ECDSA gives similar security to RSA with much smaller keys and faster operations, which is why it is common in TLS, JWTs and crypto wallets.
Which curve should I pick?: P-256 is a strong, widely supported default. Use P-384 or P-521 for higher security margins.
Are the keys uploaded?: No. They are generated locally with the Web Crypto API.