PEM / JWK Key Inspector
Inspect, decode, validate, and convert RSA, ECDSA, Ed25519, and JWK cryptographic keys and certificates safely in your browser.
What Does the PEM / JWK Key Inspector Do?
Cryptographic keys are commonly stored in PEM (base64 text with header/footer lines) or JWK (JSON Web Key) format. This tool parses a key in either format and reports its algorithm, size, and structure, and can convert between supported formats.
How to Use the Key Inspector
- Paste a PEM- or JWK-formatted key.
- The tool detects the format and key type automatically (RSA, ECDSA, Ed25519, and others).
- Review the parsed key parameters and whether it's a public or private key.
- Convert to another supported format if needed.
Technical Notes
- PEM is a text envelope (like -----BEGIN PUBLIC KEY-----) around DER-encoded binary key data; JWK represents the same kind of key data as JSON.
- A private key contains everything needed to derive its matching public key — never paste a private key you don't control into any online tool, including this one, unless you fully trust how it's handled. This tool processes keys entirely in your browser and never transmits them.
- Public keys are safe to share; private keys are not.
Frequently Asked Questions
Is it safe to paste a private key here?+
The key is parsed entirely in your browser and never uploaded, but treat any online tool with caution for keys you rely on. Prefer test keys or keys you can rotate. Public keys are safe to inspect anywhere.
What is the difference between PEM, DER, and JWK?+
DER is the raw binary encoding of the key. PEM is that DER wrapped in Base64 with -----BEGIN...----- header lines. JWK expresses the same key material as a JSON object. This tool reads all three and can convert between the supported formats.
What does "importable" mean in the results?+
It means the key's structure is valid and the browser's Web Crypto implementation accepts it for its stated algorithm. It does not verify a certificate chain, an expiry date, or that the key should be trusted — those are separate checks.