A secure, client-side GPG/PGP key generator with a modern terminal-inspired interface. Generate cryptographic key pairs entirely in your browser with zero server-side processing for maximum security and privacy.
The xsukax GPG/PGP Key Generator is a single-file web application designed for secure, client-side generation of GPG/PGP cryptographic key pairs. Built with privacy-first principles, this tool performs all cryptographic operations locally in your browser, ensuring your private keys never leave your device.
- Client-Side Cryptography: Complete key generation using OpenPGP.js library
- Modern Security: ECC (Elliptic Curve Cryptography) with Curve25519
- ASCII-Armored Export: Standard
.ascformat compatible with all GPG implementations - Optional Passphrase Protection: Secure your private keys with custom passphrases
- Terminal Aesthetic: Professional command-line inspired user interface
- Cross-Platform Compatibility: Works on any modern web browser
graph TD
A[User Input] --> B[Browser Local Processing]
B --> C[OpenPGP.js Library]
C --> D[Key Generation]
D --> E[Local Storage Only]
E --> F[User Download]
G[No Server Communication] -.-> B
H[No Data Transmission] -.-> C
I[No Remote Storage] -.-> D
- 🔒 Client-Side Only: All cryptographic operations occur within your browser
- 🚫 No Data Transmission: Zero communication with external servers during key generation
- 🔑 Modern Cryptography: Utilizes Curve25519 ECC for enhanced security and performance
- 💾 No Persistent Storage: Application doesn't store any user data or generated keys
- 🔐 Passphrase Protection: Optional encryption of private keys with user-defined passphrases
- 🛡️ Memory Safety: Secure key handling with proper cleanup procedures
- Anonymous Usage: No user tracking, analytics, or data collection
- Offline Capable: Can be downloaded and run without internet connectivity
- Open Source: Full transparency with publicly auditable source code
- Self-Hostable: Deploy on your own infrastructure for complete control
- 🖥️ Terminal Interface: Authentic command-line aesthetic with modern usability
- 🌗 Theme Toggle: Switch between light and dark modes with preference persistence
- 📱 Mobile Responsive: Optimized experience across all device types
- ⚡ Fast Generation: Efficient key pair creation using modern ECC algorithms
- 📄 Standard Compliance: Full compatibility with GNU Privacy Guard (GPG) and other OpenPGP implementations
- Single File Deployment: Entire application contained in one HTML file
- No Dependencies: Self-contained with embedded cryptographic library
- Instant Setup: No installation required - runs immediately in any browser
- Professional Design: Clean, minimal interface suitable for enterprise environments
- Educational Value: Clear workflow demonstration for cryptographic concepts
-
Download the Application
wget https://raw.githubusercontent.com/xsukax/xsukax-GPG-PGP-Key-Generator/main/index.html
-
Open in Browser
# Open the downloaded file in your preferred browser open index.html # macOS xdg-open index.html # Linux start index.html # Windows
-
Clone the Repository
git clone https://github.com/xsukax/xsukax-GPG-PGP-Key-Generator.git cd xsukax-GPG-PGP-Key-Generator -
Launch Application
# Serve locally (optional, for HTTPS) python -m http.server 8000 # Then visit: http://localhost:8000
-
Deploy to Web Server
# Copy to web server directory cp index.html /var/www/html/keygen.html -
Configure HTTPS (Recommended)
- Ensure your web server supports HTTPS
- Modern browsers may restrict cryptographic operations over HTTP
- Browser: Any modern web browser (Chrome 63+, Firefox 57+, Safari 11+, Edge 79+)
- JavaScript: Must be enabled
- Storage: ~2MB for application and temporary key storage
- Network: Initial load only (for CDN library), then fully offline capable
flowchart TD
A[Open Application] --> B[Fill User Information]
B --> C{Enable Passphrase?}
C -->|Yes| D[Enter Passphrase]
C -->|No| E[Generate Keys]
D --> E
E --> F[Keys Generated]
F --> G{Export Key Type}
G -->|Public| H[Export Public Key]
G -->|Private| I[Export Private Key]
H --> J[Download .asc File]
I --> J
$ generate-keypair --interactive- Open the application in your web browser
- Choose theme using the toggle switch (optional)
- Verify secure connection (HTTPS recommended for production use)
- Full Name: Enter your complete name as it should appear in the key
- Email Address: Provide the email associated with this key pair
- Validation: Both fields are required and validated
$ configure-passphrase --protection=enabled- Enable Protection: Check the "Enable passphrase protection" option
- Enter Passphrase: Choose a strong passphrase for private key encryption
- Security Note: Passphrases add an additional security layer
$ execute-keygen --algorithm=curve25519 --format=armored- Click "Execute Key Generation"
- Wait for Processing: Cryptographic generation takes 2-5 seconds
- Success Confirmation: Green checkmark indicates completion
$ export-keys --format=asc --type=[public|private]Public Key Export:
- Contains only public cryptographic material
- Safe to share openly
- Used by others to encrypt messages to you
Private Key Export:
- Contains sensitive cryptographic material
- Keep secure and confidential
- Required for decrypting messages
For multiple key pairs, repeat the process with different user information:
graph LR
A[User 1 Info] --> B[Generate Keys 1]
C[User 2 Info] --> D[Generate Keys 2]
E[User 3 Info] --> F[Generate Keys 3]
B --> G[Export All Keys]
D --> G
F --> G
# Import generated public key
gpg --import user_public_key.asc
# Import generated private key
gpg --import user_private_key.asc
# Verify key import
gpg --list-keys
gpg --list-secret-keys-
Environment Security
- Use on trusted devices only
- Ensure secure browser environment
- Clear browser cache after use
-
Key Management
- Store private keys securely
- Use strong, unique passphrases
- Create backups of important keys
- Never share private key material
-
Operational Security
- Verify key fingerprints
- Use secure communication channels
- Regularly update your setup
graph TB
subgraph "Client Browser"
A[HTML Interface] --> B[JavaScript Engine]
B --> C[OpenPGP.js Library]
C --> D[WebCrypto API]
D --> E[Key Generation]
E --> F[ASCII Armor Export]
end
subgraph "Security Boundary"
G[No Network Communication]
H[No Server Storage]
I[Local Processing Only]
end
F --> J[File Download]
G -.-> B
H -.-> C
I -.-> D
- Frontend: Vanilla HTML5, CSS3, JavaScript (ES2020+)
- Cryptography: OpenPGP.js v5.10.2
- Algorithms: Curve25519 ECC, AES encryption
- Export Format: ASCII-Armored (.asc) compatible with RFC 4880
- Styling: CSS Custom Properties with theme switching
This project is licensed under the GNU General Public License v3.0 (GPL-3.0).
- Freedom to Use: Run the program for any purpose
- Freedom to Study: Access and examine the source code
- Freedom to Modify: Change the program to suit your needs
- Freedom to Distribute: Share copies with others
- Copyleft Protection: Derivative works must also be GPL-3.0 licensed
See the LICENSE file for the complete GNU General Public License v3.0 text, or visit: https://www.gnu.org/licenses/gpl-3.0.html
- OpenPGP.js: Licensed under LGPL-3.0-or-later
- Web Standards: Public domain specifications (HTML5, CSS3, ECMAScript)
Contributions are welcome!
- OpenPGP.js Team: For the excellent cryptographic library
- OpenPGP Working Group: For maintaining the OpenPGP standard
- Community Contributors: For feedback, testing, and improvements
Made with ❤️ for privacy and security