Pick the algorithm
Ed25519 is the default for modern PuTTY. Take RSA-3072+ or ECDSA only where Ed25519 is unavailable.
Free tools · SSH keys
Fresh PuTTY keys, made on your device.
Generate an Ed25519, RSA or ECDSA keypair with your browser's audited crypto — emitted as a PuTTY .ppk file, never uploaded.
New key
Generate locally.
Fresh randomness from your browser, emitted as a PuTTY .ppk file. DSA, Ed448 and SSH-1 cannot be generated here — take Ed25519 or RSA instead. Need OpenSSH format? Use the SSH generator.
Key type
PPK version
Randomness (move your mouse over the pad, like PuTTYgen)
0%
Your browser's secure generator creates the key itself; your movements additionally seed salts and padding. Nothing leaves your device.
How it works
Three steps, all on your device.
The browser does what PuTTYgen does on your own machine: fresh randomness in, standard key files out.
Choose version and protection
PPK version 3 with a passphrase is the safe default; version 2 only matters for PuTTY older than 0.75.
Save and load
Download the .ppk and open it in PuTTY or Pageant. Keep the file secret; share only the public key line.
Questions
Generating PPK keys, answered.
If you manage servers by hand, see the engineering services behind this tools series.
Is my generated key uploaded anywhere?
No. The keypair is created inside your browser with WebCrypto and wrapped into PPK format locally — the page makes no network requests with your key. You can verify this in your browser's developer tools or disconnect from the network after the page loads.
Which PPK version should I generate?
Version 3 (Argon2 key derivation) unless you still run PuTTY older than 0.75, which only reads version 2. Unencrypted keys work in either version; a passphrase on v3 uses Argon2, on v2 the older SHA-1 derivation.
Which key types can I generate?
Ed25519 (recommended), RSA with 2048, 3072 or 4096 bits, and ECDSA with the NIST P-256, P-384 or P-521 curves. DSA, Ed448 and SSH-1 have no browser generator and are deprecated anyway — take Ed25519 or RSA instead.
Should I protect the .ppk with a passphrase?
Yes for anything that matters. A passphrase encrypts the private section, so a stolen file alone is useless. Leave it empty only for keys that must load unattended — and guard those files instead.
I need OpenSSH format instead. What now?
Use the SSH generator for fresh OpenSSH keys, or drop an existing PPK file into the format converter to re-wrap it. Conversion only changes the container — the key stays identical.
How do I use the .ppk with PuTTY?
Save the downloaded file with a .ppk extension. In PuTTY, pick it under Connection › SSH › Auth › Credentials (or load it into Pageant), keeping any passphrase ready. To use the same key on Linux, convert it to OpenSSH format first.