# AGEX Keypair Generator Generate an Ed25519 keypair for AGEX bundle signing and verification > Canonical page: https://elysiatools.com/en/tools/agex-keypair-generator - **Category:** Security - **Keywords:** agex, ed25519, keypair, signature, public key, private key ## Overview Use this tool to create a base64 Ed25519 keypair for AGEX bundle signing. Keep the private key secret and share only the public key with people who need to verify your bundles. ## Inputs - **Signer ID** (text): Optional label, e.g. ops-key-1 ## When to use - When preparing to sign AGEX bundles for secure distribution and deployment. - When setting up a new release pipeline or environment that requires cryptographic verification. - When rotating existing signing keys to maintain security compliance for your AGEX packages. ## How it works - Enter an optional Signer ID to label the generated keypair for a specific team, environment, or purpose. - Click the generate button to run the Ed25519 cryptographic keypair generation process. - Download or copy the resulting JSON output containing the base64-encoded public and private keys. - Store the private key securely for signing, and distribute the public key to parties verifying the bundles. ## Use cases - Generating a new Ed25519 keypair for a CI/CD pipeline to sign production AGEX bundles automatically. - Creating distinct keypairs labeled with unique Signer IDs for staging and production environments. - Replacing compromised or expired signing keys with a freshly generated base64 keypair. ## Frequently asked questions ### What algorithm does this tool use? It uses the Ed25519 signature scheme, which provides high security and fast performance. ### Is the private key stored on your servers? No, the keypair is generated locally in your browser and is never sent to or stored on any server. ### What is the purpose of the Signer ID? The Signer ID is an optional label to help you identify which keypair belongs to which environment, team, or deployment pipeline. ### How should I store the generated private key? You should store the private key in a secure secrets manager or environment variable, and never share it publicly. ### How do others verify my AGEX bundles? You share your generated public key with the verifying parties, who use it to validate the signatures created by your private key. ## Related tools - [Key Pair Generator](https://elysiatools.com/en/tools/key-pair-generator): Generate public/private key pairs for various cryptographic algorithms - [ML-KEM / Kyber Keypair & Encapsulation Tester](https://elysiatools.com/en/tools/ml-kem-kyber-keypair-and-encapsulation-tester): Generate ML-KEM-512/768/1024 (FIPS 203 / CRYSTALS-Kyber) keypairs, encapsulate a random shared secret against the public key, decapsulate it with the private key, and verify both sides match — with the exact wire sizes of all three parameter sets checked live against the standard. - [RSA Key Pair Generator](https://elysiatools.com/en/tools/rsa-key-generator): Generate an RSA key pair (2048/3072/4096-bit) as PEM-encoded public and private keys. Optionally encrypt the private key with a passphrase. PKCS#8 (recommended) or PKCS#1 private key format. Everything runs locally. - [Env File Secret Rotation Planner](https://elysiatools.com/en/tools/env-file-secret-rotation-planner): Paste a .env file and get a staged secret-rotation plan. Detects database URLs, API keys, auth tokens, private keys, cloud credentials, payment keys and encryption secrets, scores each by exposure and age, and schedules them across a 4-week rotation timeline with a dual-key checklist and a generated .env.example. Optional last-rotated dates and a configurable cadence (30/90/180/365 days) drive compliance scoring. - [AGEX Passphrase Strength Checker](https://elysiatools.com/en/tools/agex-passphrase-strength-checker): Evaluate a passphrase for AGEX file bundles and recommend the most suitable protection profile - [Ed25519 / X25519 Keygen and Signature Verifier](https://elysiatools.com/en/tools/ed25519-x25519-keygen-signature-verifier): Generate Ed25519 or X25519 keypairs from random or deterministic seed text, then sign or verify messages - [Password Generator](https://elysiatools.com/en/tools/password-generator): Generate secure random passwords - [AGEX Secure Share Note](https://elysiatools.com/en/tools/agex-secure-share-note): Generate a plain-language share note for an AGEX bundle so recipients know how to decrypt and verify it safely ## Samples - [Android Image Processing Java Samples](https://elysiatools.com/en/samples/android-image-processing-java): Android Java image processing examples including reading/saving images, scaling, and format conversion - [Android Image Processing Kotlin Samples](https://elysiatools.com/en/samples/android-image-processing-kotlin): Android Kotlin image processing examples including reading/saving images, scaling, and format conversion - [Web Image Processing Python Samples](https://elysiatools.com/en/samples/web-image-processing-python): Web Python image processing examples using PIL/Pillow including reading, saving, resizing, and format conversion - [Web Image Processing Rust Samples](https://elysiatools.com/en/samples/web-image-processing-rust): Web Rust image processing examples including image read/save, scaling, and format conversion ## Related content - [AGEX Secure Package Review Before Handoff](https://elysiatools.com/en/hubs/agex-secure-package-review): Generate a test signing key, inspect AGEX bundle metadata, verify its signature with a trusted public key, and stop the handoff when evidence is incomplete. - [AGEX Secure File Packaging and Handoff](https://elysiatools.com/en/hubs/agex-secure-file-sharing): Package a file as AGEX, inspect visible metadata, choose passphrase and signature settings, and verify the handoff before delivery.