JWKS Generator
Generate a JSON Web Key Set (JWKS) from a PEM-encoded private key or public certificate and Key ID (KID).
Input
Enter your PEM-encoded private key or public certificate and KID. This tool sends the input to our server for processing. Prefer a public certificate; do not submit production private keys.
Output
Generated JSON Web Key Set (JWKS).
Generated JWKS will appear here...
Using JWKS Generator for open banking
Convert PEM key material to a public JSON Web Key Set for sandbox integration.
Sandbox example and expected result
Use a disposable public RSA PEM key and kid=sandbox-key-1, then compare the output kid with your test JWT header.
Limitations and troubleshooting
A kid is an identifier, not proof of trust. Do not upload production private keys; use public PEM material. Publication and key rotation remain your responsibility.
Where your input is processed
The PEM input and key ID are sent to our server for conversion. The response contains public key material. Use synthetic test data.
Maintained by OpenFinanceTools. Guidance updated 23 October 2026. Testing and editorial approach