Your files stay on your device

JWK and PEM converter

Paste a JWK or a PEM key and get the other form, with the direction auto-detected and impossible pairs refused with a named reason.

Paste a JWK or PEM key and convert it.

Only RSA and EC keys convert, public keys come out as SPKI ("BEGIN PUBLIC KEY"), private ones as PKCS#8 ("BEGIN PRIVATE KEY"). Symmetric oct keys have no PEM form, and Ed25519 and X25519 keys are refused because browser Web Crypto support for them is uneven; a converter that works only in some browsers produces subtly wrong deployments. Certificates, CSR requests, legacy SEC1 and PKCS#1 PEMs, and encrypted PEMs are each refused with the command that reshapes them instead of a silent empty result.
OptionsConvert

More web & auth tools

- JWK / JWKS (/web/jwk)
- Certificate & CSR (/web/certificate)
- JWT decoder (/web/jwt)
All web & auth tools (/web)

Was this tool useful?
YesNo

Canonical HTML: https://nutter.tools/web/jwk-pem-converter
Markdown version: https://nutter.tools/web/jwk-pem-converter.md
Plain-text version: https://nutter.tools/web/jwk-pem-converter.txt
Agent index: https://nutter.tools/llms.txt