diff --git a/sys/man/8/rsa b/sys/man/8/rsa
index 2326088a5..94ae8775b 100644
--- a/sys/man/8/rsa
+++ b/sys/man/8/rsa
@@ -118,7 +118,7 @@ whose
 .B n
 has exactly
 .I nbits
-(default 1024)
+(default 2048)
 significant bits.
 If
 .I tag
diff --git a/sys/src/cmd/auth/rsagen.c b/sys/src/cmd/auth/rsagen.c
index d05f562ef..ec6bbb0c7 100644
--- a/sys/src/cmd/auth/rsagen.c
+++ b/sys/src/cmd/auth/rsagen.c
@@ -18,7 +18,7 @@ main(int argc, char **argv)
 	char *tag;
 	RSApriv *key;
 
-	bits = 1024;
+	bits = 2048;
 	tag = nil;
 	key = nil;
 	fmtinstall('B', mpfmt);