Creating an SSH Key on Windows
Last updated
Last updated
The steps for generating an SSH keypair on Windows will be different depending on whether you are using a , such as Windows 11, or an .
The easiest way to create an SSH key on Windows is by using PowerShell or the Windows Terminal, via the built-in ssh-keygen utility that comes with Windows 10/11 (as part of OpenSSH).
Open PowerShell or Windows Terminal and run this command.
You’ll be prompted for a filename, which will tell ssh-keygen where to store your generated public and private keys. It will also determine the first part of the file names. If you accept the default, your private key will be C:\Users<YourName>.ssh\id_rsa and your public key will be C:\Users<YourName>.ssh\id_rsa.pub
The ssh-keygen program also prompts your for a passphrase, which is not the same as your account password. The SSH key passphrase is optional. If you supply a passphrase, you will need to enter the passphrase every time you authenticate using your key.
Upload your public key to your account, and add your private key to your SFTP client. Never give your private key to anyone.
If you're using an older version of Windows (such as Windows 7 or early Windows 10) that doesn't have OpenSSH built-in, the easiest method to generate SSH keys is with , part of the PuTTY suite.
Download PuTTYgen from the . You can download either the full Windows Installer, which includes PuTTYgen, or download just the standalone puttygen.exe.
Run puttygen.exe
Select RSA for the key type. 4096 bits is recommended.
Click to generate the keypair.
Move your mouse to generate randomness.
You may choose to add a comment to the key, such as your email address. This is optional and does not impact how the key works.
You can also add a passphrase, which is optional. If you supply a passphrase, you will need to enter the passphrase every time you authenticate using your key.
Copy the contents of the "Public key for pasting into OpenSSH authorized_keys file". Paste those contents into a text file. This is the public key you will upload to ExaVault
Save your private key using the Save private key button
Upload the key from step 8 to your account, and add your private key to your SFTP client. Never give your private key to someone else.