Vapid Keys Generator

WebPush can be used to send notifications to endpoints which server delivers Web Push notifications as described in the Web Push protocol. Browsers need to verify your identity. A standard called VAPID can authenticate you for all browsers. You'll need to create and provide a public and private key for your server. These keys must be safely stored and should not change.

Click ‘GENERATE’ button to generate VAPID keys and use them to authenticate you.

When VAPID keys are required

VAPID keys are used by an application server to identify itself when sending Web Push notifications to browsers such as Chrome, Firefox, Edge, and Safari.

  • Use the public key in browser-side push subscription code.
  • Store the private key securely on the application server that sends push notifications.
  • Keep the same key pair for an application. Changing keys can require users to subscribe again.

Security guidance

Treat the private key as a secret. Generate production keys only from an environment you trust, and never expose the private key in client-side JavaScript.

Privacy note: Submitted values are processed only to produce the requested result and are not stored by this tool.

Based on the web-push-libs/web-push-php library.