---
name: "jose-jwk-pub"
section: "1"
platform: "linux"
package: "jose"
version: "15-2"
release: "Arch Linux 2026-11-01"
platforms: ["linux"]
url: "https://new.carta.tech/jose-jwk-pub"
---

# jose-jwk-pub(1)

Cleans private keys from a JWK

## NAME

jose-jwk-pub - Cleans private keys from a JWK

## SYNOPSIS

**jose jwk pub** -i JWK \[-o JWK\]

## OVERVIEW

The **jose jwk pub** command removes all private key material from one or more JWK(Set) inputs. The output will contain only public key material.

If the JWK contains the "key\_ops" property, it will be automatically adjusted to include only operations relevant to public keys.

## OPTIONS

• **-i** *JSON*, **--input**=*JSON* : Parse JWK(Set) from JSON

• **-i** *FILE*, **--input**=*FILE* : Read JWK(Set) from FILE

• **-i** -, **--input**=- : Read JWK(Set) from standard input

• **-o** *FILE*, **--output**=*FILE* : Write JWK(Set) to FILE

• **-o** -, **--output**=- : Write JWK(Set) to standard input

• **-s**, **--set** : Always output a JWKSet

## EXAMPLES

Clean private key material from a JWK:

```
$ jose jwk gen -i '{"alg":"ES256"}' -o prv.jwk
$ cat prv.jwk
{"alg":"ES256","crv":"P-256","key_ops":["sign","verify"],"kty":"EC", ...}
$ jose jwk pub -i prv.jwk -o pub.jwk
$ cat pub.jwk
{"alg":"ES256","crv":"P-256","key_ops":["verify"],"kty":"EC", ...}
```

## AUTHOR

Nathaniel McCallum \<npmccallum@redhat.com\>

## SEE ALSO

[**jose-alg**(1)](/jose-alg/1.md), [**jose-jwe-enc**(1)](/jose-jwe-enc/1.md), [**jose-jwk-exc**(1)](/jose-jwk-exc/1.md), [**jose-jwk-gen**(1)](/jose-jwk-gen/1.md), [**jose-jwk-thp**(1)](/jose-jwk-thp/1.md), [**jose-jwk-use**(1)](/jose-jwk-use/1.md), [**jose-jws-ver**(1)](/jose-jws-ver/1.md)