> For the complete documentation index, see [llms.txt](https://docs.devolutions.net/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.devolutions.net/rdm/ribbon-menu-bar/tools/ssh-key-generator.md).

# SSH key generator

SSH keys provide a secure way of logging into a virtual private server with SSH than using a password alone. While a password can eventually be cracked with a brute force attack, SSH keys are nearly impossible to decipher by brute force alone.

The ***SSH key generator*** is located under ***Tools*** in the ribbon of Remote Desktop Manager.

{% tabs %}
{% tab title="Windows" %}
![](https://cdnweb.devolutions.net/docs/docs_en_rdm_windows_RDMWin6254.png)

#### Settings

![](https://cdnweb.devolutions.net/docs/docs_en_rdm_windows_RDMWin6255.png)

<table><thead><tr><th width="208">SETTINGS</th><th>DESCRIPTION</th></tr></thead><tbody><tr><td>Algorithm</td><td><p>You can choose between:</p><ul><li>RSA: RSA can be used for signing/verification and also for encryption/decryption. When using RSA it is recommended to use a 2048 bits key size.</li><li>DSA: It is faster in signing but slower in verifying. It can only be used for signing/verification it does not encrypt/decrypt. When using DSA it is a recommended to use a 1024 bits key size.</li></ul></td></tr><tr><td>Key size</td><td><p>You can choose your SSH key size between:</p><ul><li>1024 bits: Minimum key size</li><li>2048 bits: Default and recommended key size</li><li>4096 bits: Maximum key size</li></ul></td></tr><tr><td>Comment</td><td>Enter your username and the name of the computer you are transferring your key to.</td></tr><tr><td>Key format (public key)</td><td>The key format refers to the structure and encoding used to store the key data. A variety of key formats are supported, such as <em><strong>Standard</strong></em>, <em><strong>OpenSSH</strong></em>, <em><strong>PKCS1</strong></em>, and <em><strong>PKCS8</strong></em>.</td></tr><tr><td>Save public key</td><td>Saving the public key will generate a *.pub file. Simply enter a file name when prompted.</td></tr><tr><td>Passphrase</td><td>Choose a passphrase for the private key.</td></tr><tr><td>Confirm passphrase</td><td>Confirm the passphrase for the private key.</td></tr><tr><td>Key format (private key)</td><td>Different private key formats are supported, such as <em><strong>OpenSSH</strong></em>, <em><strong>PuTTY</strong></em>, <em><strong>PKCS1</strong></em>, and <em><strong>PKCS8</strong></em>.</td></tr><tr><td>Save private key</td><td><p>You will have the option of saving your private key in different formats, choose between:</p><ul><li>PKCS8 private key (.pri)</li><li>PuTTY private key (.ppk)</li><li>OpenSSH private key (.pri)</li></ul></td></tr><tr><td>Rounds</td><td>Specifying a higher number of rounds for the key derivation function increases the time it takes to process the passphrase when the key is used.</td></tr><tr><td>Load private key</td><td>This feature will allow you to import a previously saved private SSH key.</td></tr><tr><td>Load public key</td><td>This feature will allow you to import a previously saved public SSH key.</td></tr></tbody></table>

If you did not specify a passphrase you will have to confirm that you do not wish to use a passphrase.

{% hint style="warning" %}
When using the [SSH key agent](https://docs.devolutions.net/rdm/commands/tools/key-agent-manager/) you must select the PuTTY private key (.ppk) or OpenSSH private key (.pri) file format. The PKCS private key is not a supported file format for the SSH key agent manager.
{% endhint %}
{% endtab %}

{% tab title="macOS" %}

#### Settings

<table><thead><tr><th width="207">SETTINGS</th><th>DESCRIPTION</th></tr></thead><tbody><tr><td>Key type</td><td><p>You can choose between:</p><ul><li>RSA: RSA can be used for signing/verification and also for encryption/decryption. When using RSA it is recommended to use a 2048 bits key size.</li><li>DSA: It is faster in signing but slower in verifying. It can only be used for signing/verification it does not encrypt/decrypt. When using DSA it is a recommended to use a 1024 bits key size.</li></ul></td></tr><tr><td>Key size</td><td><p>You can choose your SSH key size between:</p><ul><li>1024 bits: Minimum key size</li><li>2048 bits: Default and recommended key size</li><li>4096 bits: Maximum key size</li></ul></td></tr><tr><td>Comment</td><td>Enter your username and the name of the computer you are transferring your key to.</td></tr><tr><td>Key format (public key)</td><td>The key format refers to the structure and encoding used to store the key data. A variety of key formats are supported, such as <em><strong>Standard</strong></em>, <em><strong>OpenSSH</strong></em>, <em><strong>PKCS1</strong></em>, and <em><strong>PKCS8</strong></em>.</td></tr><tr><td>Save public key</td><td>Saving the public key will generate a *.pub file. Simply enter a file name when prompted.</td></tr><tr><td>Passphrase</td><td>Choose a passphrase for the private key.</td></tr><tr><td>Confirm passphrase</td><td>Confirm the passphrase for the private key.</td></tr><tr><td>Key format (private key)</td><td>Different private key formats are supported, such as <em><strong>OpenSSH</strong></em>, <em><strong>PuTTY</strong></em>, <em><strong>PKCS1</strong></em>, and <em><strong>PKCS8</strong></em>.</td></tr><tr><td>Save private key</td><td><p>You will have the option of saving your private key in different formats, choose between:</p><ul><li>PKCS8 private key (.pri)</li><li>PuTTY private key (.ppk)</li><li>OpenSSH private key (.pri)</li></ul></td></tr><tr><td>Rounds</td><td>Specifying a higher number of rounds for the key derivation function increases the time it takes to process the passphrase when the key is used.</td></tr><tr><td>Load private key</td><td>This feature will allow you to import a previously saved private SSH key.</td></tr><tr><td>Load public key</td><td>This feature will allow you to import a previously saved public SSH key.</td></tr></tbody></table>

If you did not specify a passphrase you will have to confirm that you do not wish to use a passphrase.
{% endtab %}
{% endtabs %}


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.devolutions.net/rdm/ribbon-menu-bar/tools/ssh-key-generator.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.