PGP Key Generator

Yes, when it's done locally — which is how this tool works. The key pair is generated in your browser using OpenPGP.js, the widely-used open-source library maintained by Proton. Nothing you type and no generated key is transmitted to our servers; the private key exists only on your device. For the highest-security use cases (such as keys protecting critical infrastructure) many people still prefer an offline machine with GnuPG, but for everyday email and file encryption, local browser generation is a solid choice.

ECC with Curve25519 is the modern default: the keys are tiny, generation is instant, and the security is excellent — it's a great fit unless you need to interoperate with very old software. RSA is the long-established option; 2048-bit is still considered secure, and 4096-bit adds margin at the cost of slower generation and larger, slower keys. If you're unsure and your tools support it, pick ECC.

The passphrase encrypts the private key itself, so that even if the key file is stolen it can't be used without the passphrase. It's strongly recommended for any key you'll store on disk. Choose something long and unique, and store it in a password manager — if you lose the passphrase, the private key is unrecoverable and any data encrypted to it is lost.