age key pair generate
Generate an age identity (private key) and its matching recipient (public key), on your device; the identity never leaves your browser.
age key pair generate builds one identity and its matching recipient with the age-encryption library, printed as two labeled lines. The options schema is empty, so each run draws a fresh pair. The identity line holds the raw secret key with no passphrase around it, so reading that line is enough to decrypt anything sent to its recipient.
Questions
What do the two output lines mean?
The recipient line is the public half, safe to share and to give to age encrypt. The identity line is the secret half, printed in the clear with no passphrase around it. Anyone who reads the identity line can decrypt anything sent to its matching recipient.
What options can I set?
None. The options object is empty, so every run draws a fresh, unrelated pair from the age-encryption library with nothing to configure.
Can I use this from the command line?
Yes. The tool runs the same way on this page, from the CLI and through MCP, since key generation needs no browser API.
Does the identity ever leave my browser?
The tool never sends it anywhere. It is generated and printed in this tab and nowhere else.
How do I use the pair?
Give the recipient line to age encrypt to lock a file for you, and give the identity line to age decrypt to open it again.