RSA Encrypt / Sign
Generate RSA key pairs, encrypt and decrypt with RSA-OAEP, and create and verify signatures with RSA-PSS — all in your browser with the Web Crypto API. Keys are shown as Base64 (SPKI/PKCS8) and PEM, ready to use in code. Your data never leaves this page.
Keys appear here after generation.
Encrypt / Decrypt (OAEP)
Sign / Verify (PSS)
Operation results appear here.
How to use the RSA Encrypt / Sign tool
Generate RSA key pairs and use them for asymmetric encryption (RSA-OAEP) and digital signatures (RSA-PSS), all locally with the browser's Web Crypto API.
Keys
- Pick a key size (2048/3072/4096) and click Generate key pair. The public and private keys are shown as Base64 (SPKI / PKCS8) and PEM.
- Keys are kept only in memory for this page session — export or copy them if you need to reuse them elsewhere. You cannot import keys from pasted PEM in this tool.
Encrypt / Decrypt (OAEP)
- Encrypt: enter plaintext and click Encrypt — the ciphertext (Base64) is shown.
- Decrypt: paste the Base64 ciphertext and click Decrypt to recover the original.
Sign / Verify (PSS)
- Sign: enter a message and click Sign to produce a Base64 signature using the private key.
- Verify: paste the message and the signature, then click Verify to confirm it was made by the matching private key.
OAEP encryption is limited by key size: a 2048-bit key can encrypt about 190 bytes of plaintext per call.