SSH Key Generatorv2.0
Zero-Knowledge Cryptographic Isolation

Privacy Policy

Last updated: September 18, 2026 • Effective Date: January 1, 2026

The Zero-Knowledge Guarantee in Plain English

We do not collect, transmit, store, or log your SSH private keys, public keys, passphrases, comments, or personal data. All cryptographic operations are executed strictly within your browser's local sandbox using the native Web Cryptography API (SubtleCrypto). No network request leaves your device when you generate, inspect, or convert keys.

1. Scope & Architecture Overview

This Privacy Policy describes the policies and procedures of SSH Key Generator (sshkeygenerator.com) regarding the collection, use, and disclosure of information when you access or use our web application.

Unlike conventional online key generator tools that generate cryptographic key pairs on an application server and transmit them back over HTTPS, SSH Key Generator operates on an entirely decentralized, client-side execution model. Your web browser acts as the isolated execution environment for all entropy generation, key synthesis, wire formatting, and PBKDF encryption.

2. Cryptographic Data Isolation

When you use our tool to generate an Ed25519 or RSA key pair:

  • Cryptographic Randomness: Entropy is gathered directly from your operating system's kernel entropy pool through the browser's native crypto.getRandomValues() implementation.
  • Zero Backend APIs: The application does not contain backend server endpoints for key generation. There are no REST, GraphQL, or WebSocket endpoints to which key data could be transmitted.
  • Memory-Only Lifecycle: Private keys and passphrases reside only in transient JavaScript heap memory while your tab is active and are discarded upon tab closure or page reload.
  • Air-Gapped Operation: You can load this web application, disconnect your Wi-Fi or unplug your Ethernet cable, and generate unlimited SSH keys completely offline.

3. Information We Do NOT Collect

To ensure absolute user privacy and eliminate custodial attack surfaces, we do NOT collect any of the following:

✕ Private & Public Keys

Never logged, sent to servers, or accessible to site operators.

✕ Passphrases & Key Comments

Processed in RAM only for PBKDF2/bcrypt key derivation.

✕ IP Addresses & User Agents

No access log retention or telemetry collection pipelines.

✕ Tracking Cookies & Fingerprinting

Zero cross-site advertising scripts or canvas fingerprinting.

4. Local Storage & Cookies

Our website does not use tracking cookies or persistent advertising identifiers. The only data written to your browser's localStorage is:

  • ssh-theme: Stores your visual theme preference ("dark" or "light") to prevent screen flicker upon subsequent visits.

This value remains strictly local to your browser and is never transmitted across any network connection.

5. External Links & Third-Party Services

Our application contains informational setup guides and external links to third-party platforms such as GitHub, GitLab, Bitbucket, Amazon Web Services, and IETF RFC standards. When you click on an external link, you leave our website and become subject to the respective third party's privacy policy and terms. We are not responsible for the privacy practices or content of third-party domains.

6. Regulatory Compliance (GDPR, CCPA & CPRA)

Because SSH Key Generator does not process, retain, or share personal identifying information (PII), we inherently fulfill the core privacy-by-design mandates of the European Union General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA/CPRA). You do not need to submit "Right to Forget" or "Data Deletion" requests because we possess zero data regarding your identity, IP address, or generated cryptographic material.

7. Changes to This Privacy Policy

We may update our Privacy Policy periodically to reflect architectural improvements or legal requirements. Any modifications will be posted directly to this page with an updated "Effective Date". We encourage users to review this page periodically.

8. Contact Us Regarding Privacy

If you have any questions or concerns regarding this Privacy Policy or our client-side cryptographic isolation model, please reach out through our Contact Page or via email at:

Email: privacy@sshkeygenerator.com