SSH Workbench

PPK to PEM Converter

Validate PPK keys and get step-by-step instructions to convert to PEM/OpenSSH format.

Client-side only. Nothing leaves your browser

What is PPK to PEM Conversion?

PPK (PuTTY Private Key) is the key format used by PuTTY and related Windows tools like WinSCP and FileZilla. PEM is the standard format that OpenSSH on Linux and macOS expects. If you have been connecting from Windows with PuTTY and now need the same key for the ssh command, a CI pipeline, or an AWS import, you have to convert the .ppk file to PEM first. The cryptographic key inside stays identical; only the container format changes. Going the other way? Use the PEM to PPK converter.

Conversion Methods Compared

MethodPlatformBest For
PuTTYgen GUIWindowsOne-time conversions, visual workflow
puttygen CLIWindows, macOS, LinuxAutomation, scripting, batch conversion
WinSCPWindowsTools > Export/convert when PuTTYgen isn't installed

Frequently Asked Questions

Can I convert a PPK file to PEM?
Yes, any PPK file can be converted to PEM (or OpenSSH format) with puttygen, the tool that created it. The private key material inside a PPK is the same as in a PEM file; only the wrapper differs. Run 'puttygen key.ppk -O private-openssh -o key.pem' on the command line, or use PuTTYgen's Conversions > Export OpenSSH key menu on Windows. If the key is passphrase-protected you will be asked for the passphrase during export.
Can I convert PPK to PEM with OpenSSL?
No. OpenSSL cannot read PPK files, because PPK is PuTTY's own container format, not an OpenSSL-supported encoding. The same goes for ssh-keygen, which only reads OpenSSH and PEM keys. You need puttygen for the PPK side of the conversion. Once the key is in PEM format, OpenSSL and ssh-keygen can both work with it normally (inspect it, change its passphrase, or re-encode it).
How do I convert PPK to PEM on a Mac?
Install PuTTY tools with Homebrew ('brew install putty'), then run 'puttygen key.ppk -O private-openssh -o key.pem' in Terminal. Finish with 'chmod 600 key.pem' so the ssh command accepts the file. macOS has no built-in tool that reads PPK, so the Homebrew install is required. After converting, the key works directly with 'ssh -i key.pem user@host'.
How do I convert a PPK to PEM for AWS EC2?
Convert with 'puttygen key.ppk -O private-openssh -o key.pem', set permissions with 'chmod 400 key.pem', and connect with 'ssh -i key.pem ec2-user@your-instance'. This is common when a key pair was originally downloaded for PuTTY but you now need it for the aws CLI, EC2 Instance Connect, or an ssh session from Mac or Linux. AWS never needs the PPK version; PEM works everywhere on their platform.
How do I convert PPK to PEM without PuTTYgen?
WinSCP is the main alternative on Windows: it bundles PuTTY's key code and can export a loaded PPK key to OpenSSH format from its key tools. On Mac and Linux there is no realistic way around puttygen, since no other mainstream tool parses the PPK format. The install is small ('brew install putty' or 'apt install putty-tools') and includes only command-line utilities, not the full PuTTY GUI.

Related Tools

Key Generator

Generate RSA, Ed25519, and ECDSA SSH keys securely in your browser.

Port Checker

Test if SSH port 22 is open on any server. Diagnose firewall and connection issues.

Config Generator

Generate ~/.ssh/config entries visually. Build config files with host aliases, jump hosts, and identity files.

Key Validator

Validate SSH public and private keys. Check key type, format, fingerprint, and comment.

PEM to PPK Converter

Convert PEM SSH keys to PPK format for PuTTY. Validate keys and get step-by-step conversion instructions.

Need to manage SSH connections?

SSH Workbench lets you connect, browse files, and manage servers visually.

Try SSH Workbench Free