How to use PEM to JWK
- 1. Paste PEM. BEGIN PUBLIC KEY / PRIVATE KEY (PKCS#8 / SPKI).
- 2. Click PEM → JWK. Highlighted as the action for this URL.
- 3. Copy the JWK. Keep private keys off shared screens.
About this tool
JOSE and WebAuthn want JWK. OpenSSL still prints PEM. This alias is that direction, with copy that talks about PEM labels — not SSH, not certificates.
Supported labels
SPKI and PKCS#8. Classic PKCS#1 RSA PRIVATE KEY often needs a conversion in OpenSSL first. X.509 certificates are out of scope here.
Code examples
JWK
{ "kty": "EC", "crv": "P-256", "x": "…", "y": "…" }