openssl rand -base64 24 | head -c 24
openssl genrsa -out private.pem 2048 && openssl rsa -in private.pem -pubout -out public.pem
Using the Web Crypto API (subtle crypto) โ same algorithms as OpenSSL: RSA-OAEP with SHA-256, and cryptographically secure random passwords. No data stays on my site. The displayed OpenSSL commands produce identical results when run on your own machine.