VAPID Key Generator

How We Generate Keys

This tool uses the web-push Node.js library to generate cryptographically secure VAPID key pairs:

1. When you click "Generate", your browser makes a request to our Node.js server
2. The server uses the webPush.generateVAPIDKeys() method
3. This creates an ECDSA key pair using the P-256 curve
4. The keys are converted to Base64 URL-safe format
5. Both keys are returned to your browser

Spring Boot Integration

To use these keys in your Spring Boot application:

// application.properties
push.vapid.public-key=YOUR_PUBLIC_KEY
push.vapid.private-key=YOUR_PRIVATE_KEY

// Configuration class
@Configuration
public class WebPushConfig {
  
  @Value("${push.vapid.public-key}")
  private String publicKey;
  
  @Value("${push.vapid.private-key}")
  private String privateKey;
  
  @Value("${push.vapid.subject}")
  private String subject;
  
  @Bean
  public VAPIDKeys vapidKeys() {
    return new VAPIDKeys(publicKey, privateKey, subject);
  }
}

Security Best Practices

• Private Key Protection

  Never commit private keys to version control

• Environment Variables

  Use process.env or similar for production

• Key Rotation

  Regularly rotate keys for enhanced security

• Access Control

  Restrict access to keys to authorized personnel only

Technical Specifications