Generate highly secure Voluntary Application Server Identification (VAPID) keys for Web Push Notifications. Keys are generated entirely in your browser using the native Web Crypto API, meaning your private key is never sent over the network or saved to a server.
VAPID stands for Voluntary Application Server Identification. It is a set of cryptographic keys (a public and a private key) used to restrict who can send push messages to an application. It ensures that only your server can send push notifications to your users, preventing unauthorized parties from spamming them.
Yes! Unlike server-side generation tools, this tool uses your browser's native window.crypto.subtle API. The complex cryptography (ECDSA on the P-256 curve) happens locally on your machine. Your private key is never transmitted over the internet, stored in a database, or seen by our servers. Don't just take our word for it though. Open the Network tab of your browser's developer console to verify this yourself.
The Public Key is safe to share. You will use it in your frontend JavaScript code when you call pushManager.subscribe(). It acts as an identifier, telling the browser's push service (like Google FCM or Apple Push) which server is authorized to send messages to that specific subscription.
The Private Key is a heavily guarded secret. You must store it securely on your backend server (usually as an environment variable). Whenever your server sends a push notification request to a push service, it uses this Private Key to cryptographically sign the request, proving its authenticity.
If you lose your Private Key, you will lose the ability to send push notifications to all users who subscribed using the corresponding Public Key. You will have to generate a completely new key pair, update your server and frontend code, and users will have to subscribe to your app all over again. Keep it safe!
Yes. Setting up VAPID keys, managing subscription logic, and building a secure backend to send notifications is complicated. With Progressier, we abstract all of this away. You don't need to touch VAPID keys or write a single line of backend code to send push notifications. Sign up for the complete solution.
With Progressier, push notifications are built-in. We handle the VAPID keys, subscription logic, and delivery automatically.
Generate PWA See plans