Your files stay on your device

# JWK and PEM converter

Paste a JWK or a PEM key and get the other form, with the direction auto-detected and impossible pairs refused with a named reason.

Paste a JWK or PEM key and convert it.

Only RSA and EC keys convert, public keys come out as SPKI ("BEGIN PUBLIC KEY"), private ones as PKCS#8 ("BEGIN PRIVATE KEY"). Symmetric oct keys have no PEM form, and Ed25519 and X25519 keys are refused because browser Web Crypto support for them is uneven; a converter that works only in some browsers produces subtly wrong deployments. Certificates, CSR requests, legacy SEC1 and PKCS#1 PEMs, and encrypted PEMs are each refused with the command that reshapes them instead of a silent empty result.
OptionsConvert

## More web & auth tools

- [JWK / JWKS](/web/jwk)
- [Certificate & CSR](/web/certificate)
- [JWT decoder](/web/jwt)
[All web & auth tools](/web)

Was this tool useful?
YesNo

---

Canonical HTML: https://nutter.tools/web/jwk-pem-converter
Markdown version: https://nutter.tools/web/jwk-pem-converter.md
Plain-text version: https://nutter.tools/web/jwk-pem-converter.txt
Agent index: https://nutter.tools/llms.txt