Free online tools that run in your browser
Your files never leave your device · No login required · 100% free
Convert, compress, calculate, generate, edit and check files right in your browser — fast, private and easy to use.
Search results
Popular tools
View all toolsBrowse by category
Popular file conversions
View all convertersProgramming
Learn and practise programming in your browser. Pick a language: write code, run it in a real terminal and follow the lessons step by step.
Why Shiklo Tools?
Simple, private tools that just work — right in your browser.
- Private Everything runs in your browser. Files are never uploaded.
- Secure Encrypted HTTPS connection, and nothing you open is stored on our servers.
- No login required No account, no sign-up, no email. Just open a tool and use it.
- Fast No upload or download wait — results appear instantly.
- Free All tools are free to use, with no limits.
- Works everywhere Phone, tablet or computer, in any modern browser.
🆕 New tools
★ Popular tools
Recently used
Frequently asked questions
Are my files or text uploaded anywhere?
No. Every tool runs inside your browser on your own device. Nothing you enter or open is sent to a server.
Do I need to create an account or log in?
No login is required. There are no accounts — open any tool and start using it straight away.
Are the tools really free?
Yes. All tools are free, with no limits or watermarks. The site is supported by ads.
Does it work on my phone?
Yes. The tools work in any modern browser on phones, tablets and computers.
Can I use the tools offline?
Once a tool has loaded it does its work on your device, so it keeps working even if your connection drops.
Which file types are supported?
PDF, Word, Excel, PowerPoint, OpenDocument and RTF documents, JPG, PNG, WebP, HEIC, AVIF, GIF and BMP images, MP4, MOV, WebM and MKV videos, MP3, WAV, M4A, OGG and FLAC audio, ZIP, 7z, RAR, TAR and GZIP archives, CSV, JSON, XML and plain text. Each tool lists exactly what it opens.
All tools with descriptions →
RSA Key Generator
Generate RSA key pairs (2048, 3072 or 4096 bits) as PEM, OpenSSH and JWK, for signing or encryption — made on your device.
RSA key pairs are still everywhere: signing JSON Web Tokens (RS256), TLS certificate requests, SSH access to servers, encrypting small secrets, and testing APIs that use public-key cryptography. Generating one usually means OpenSSL commands or ssh-keygen; this tool does it in the browser with the Web Crypto API.
Choose the key size and what the key is for — RSASSA-PKCS1-v1_5 signing (RS256), RSA-PSS signing (PS256) or RSA-OAEP encryption — and press Generate. You get the private key as PKCS#8 PEM, the public key as SPKI PEM, as an OpenSSH ssh-rsa line for authorized_keys, and as a JWK for JWT and OAuth libraries, plus the SSH-style SHA-256 fingerprint. The keys are created on your device and never sent anywhere.
How to use RSA Key Generator
- Choose the key size: 2048, 3072 or 4096 bits.
- Choose what the key is for: signing or encryption.
- Optionally add a comment for the SSH key, such as your email address.
- Press Generate key pair and download the files you need.
Features
- 2048, 3072 and 4096-bit keys.
- Signing (RS256, PS256) or encryption (RSA-OAEP).
- Private key in PKCS#8 PEM.
- Public key in SPKI PEM, OpenSSH and JWK.
- SSH SHA-256 fingerprint.
- Generated with the Web Crypto API on your device.
Which key size?
Larger keys are stronger but slower to generate and use. 2048 bits is the minimum accepted today; 3072 bits matches the long-term strength recommended by NIST for use beyond 2030; 4096 bits adds margin at the cost of speed.
| Size | Typical use |
|---|---|
| 2048 bits | JWT signing, API testing, short-lived keys |
| 3072 bits | Long-lived keys, compliance with current NIST guidance |
| 4096 bits | SSH keys and certificates kept for many years |
The formats
The private key is PKCS#8 PEM (BEGIN PRIVATE KEY), which OpenSSL, Node.js, Python, Java and Go read directly. The public key is SPKI PEM (BEGIN PUBLIC KEY), the standard form for verifying signatures. The OpenSSH line (ssh-rsa AAAA…) goes into a server's ~/.ssh/authorized_keys; to use the private key with SSH, OpenSSH 7.8 and later accept the PKCS#8 PEM file directly, or convert it with ssh-keygen. The JWK is the JSON form used in JWKS endpoints and JWT libraries.
Signing or encryption?
Web Crypto keys are created for one purpose. RSASSA-PKCS1-v1_5 with SHA-256 is the RS256 algorithm used by most JWT and OAuth systems; RSA-PSS (PS256) is its more modern signing scheme. RSA-OAEP is for encrypting small pieces of data such as symmetric keys. The key material is the same kind of RSA key, so other tools can use the PEM files for any purpose, but choosing the right one makes testing in the browser straightforward.
Keeping the private key safe
Anyone with the private key can sign as you or decrypt your data, so treat it like a password: store it in a password manager, a secrets vault or a protected file, never in a public repository. The PEM file produced here is not protected by a passphrase; add one with OpenSSL if you need to. Share only the public key. For SSH, modern Ed25519 keys made with ssh-keygen are a good alternative to RSA.
Private
Keys are generated by your browser's own cryptography using the operating system's secure random generator. Nothing is sent to a server or stored after you leave. To make OpenPGP keys for email and file encryption, use the PGP Key Generator; to inspect a JSON Web Token signed with your key, use the JWT Decoder.
Frequently asked questions
How long does generating a 4096-bit key take?
Usually a second or two; the time is shown after generating.
How do I generate an RSA key pair?
Choose the size and use, then press Generate key pair.
Which key size should I choose?
2048 bits at minimum; 3072 or 4096 bits for long-lived keys.
Can I use the key for SSH?
Yes. Put the OpenSSH line in authorized_keys and use the private PEM file with OpenSSH 7.8 or later.
Can I sign JWTs with it?
Yes. Choose Signing (RS256) and use the private PEM or the JWK in your JWT library.
Is the private key protected by a password?
No. Store it safely, or add a passphrase with OpenSSL.
Are the keys sent anywhere?
No. They are generated on your device.
What is the fingerprint?
A SHA-256 hash of the public key, in the format ssh-keygen shows.
Related tools
PGP Key GeneratorCreate an OpenPGP key pair (ECC Curve25519 or RSA 4096) with a passphrase, expiry and revocation certificate — for email and file encryption.
JWT DecoderDecode a JSON Web Token: header, payload, readable exp/iat dates and expiry status. Verify HS256, RS256, ES256 and more. Token stays on your device.
Random Bytes GeneratorGenerate cryptographically secure random bytes for keys, salts, nonces and tokens — as hex, Base64, Base64url, byte arrays or a file.
Hash GeneratorGenerate MD5, SHA-1, SHA-256, SHA-512, SHA-3, BLAKE3 and CRC32 hashes of text or files of any size, with HMAC and checksum comparison. Private.
AES EncryptionEncrypt and decrypt text or files with a password using AES-256-GCM and PBKDF2 — in your browser, with nothing uploaded.
Base64 Encoder / DecoderEncode text or files to Base64 and decode Base64 back to text or a file. UTF-8, URL-safe, MIME line wrap and data URIs. Private.