ECDSA Key Generator
Generate ECDSA public and private keys online using various curves, with PEM, Hex, or Base64 output and supported PKCS key formats. Read more
Generate an ECDSA key pair online
The Elliptic Curve Digital Signature Algorithm uses a private scalar and corresponding public point to sign and verify messages. Select a supported curve and export the key pair as PEM, Hex, or Base64 according to the receiving system’s requirements.
The default curve is secp256k1. Other available choices include NIST P-256, P-384, P-521, and several legacy curves. Curve names, output type, and PEM container must match the target library or protocol.
How to generate ECDSA keys
- Select the curve required by the application.
- Choose PEM for interoperable key containers or Hex/Base64 when raw key data is explicitly expected.
- For PEM private keys, select the format and optional passphrase protection.
- Generate and download the pair, then protect the private key from disclosure and loss.
Curve selection and storage
NIST FIPS 186-5 specifies ECDSA, while curve acceptance depends on the protocol and security policy. Do not choose a curve only because it appears in the list; confirm current approval, interoperability, and required security strength.
A passphrase encrypts exported PEM data but does not make it safe to expose or reuse broadly. Production signing keys are often better generated in a hardware-backed or non-exportable keystore.
ECDSA key generator FAQ
Can a secp256k1 key be used as a P-256 key?
No. They are different curves even though both use 256-bit-sized parameters. Keys and signatures are not interchangeable.
Is the public key secret?
No. It is intended for verification, but its authenticity and association with an identity must still be established.
Can a lost private key be recovered from the public key?
No practical recovery method is expected for a properly generated key. Maintain protected backups or rotate to a new pair.
