VPN Key Generator

Generate keys for OpenVPN (Static Key V1) and WireGuard (key pair, preshared key, config, QR code). Everything runs locally in your browser.

Keys generated locally

Keys are created entirely in your browser using a cryptographically secure random generator (Web Crypto API). They are never sent, stored, or logged on any server.

OpenVPN Static Key V1

2048-bit · 512 hex

Generating key...

How to use the key

Save the key as a ta.key file and place it on both the OpenVPN server and client. Then add one of the following directives to your configuration.

tls-crypt (recommended, encrypts the control channel)

tls-crypt ta.key

tls-auth (legacy, signs packets with HMAC)

# serwer / server
tls-auth ta.key 0
# klient / client
tls-auth ta.key 1

The same ta.key file must be identical on the server and all clients. For tls-auth the server uses direction 0 and the client uses 1. The key matches the output of: openvpn --genkey secret ta.key.