Question 1

Is it safe to generate keystores and private keys in a browser tool?

Accepted Answer

With KeyForge, yes. Every key, certificate and keystore is generated locally using the Web Crypto API and runs entirely on your device — nothing is ever uploaded to a server. You can even use it offline. Keys are only saved when you choose to download them.

Question 2

What can KeyForge generate?

Accepted Answer

JKS and PKCS#12 keystores (the keytool replacement), self-signed TLS/SSL certificates, SSH keys (Ed25519/ECDSA/RSA), PKCS#10 CSRs, PEM↔DER conversions, certificate/keystore inspection and project config files (.env, .gitignore, LICENSE).

Question 3

Are the files compatible with keytool, OpenSSL and Java?

Accepted Answer

Yes. The .jks output is byte-compatible with Java's keytool and KeyStore, PKCS#12 (.p12) files open in OpenSSL, Java, Windows and macOS, and SSH keys are in native OpenSSH format.