---
name: "skopeo-generate-sigstore-key"
section: "1"
platform: "linux"
package: "skopeo"
version: "1.24.1-1"
release: "Arch Linux 2026-11-01"
platforms: ["linux"]
url: "https://new.carta.tech/skopeo-generate-sigstore-key"
---

# skopeo-generate-sigstore-key(1)

Generate a sigstore public/private key pair.

## NAME

skopeo-generate-sigstore-key - Generate a sigstore public/private key pair.

## SYNOPSIS

**skopeo generate-sigstore-key** \[*options*\] **--output-prefix** *prefix*

## DESCRIPTION

Generates a public/private key pair suitable for creating sigstore image signatures. The private key is encrypted with a passphrase; if one is not provided using an option, this command prompts for it interactively.

The private key is written to *prefix***.private** . The public key is written to *prefix***.pub** .

## OPTIONS

See also [skopeo(1)](/skopeo/1.md) for options placed before the subcommand name.

**--help**, **-h**

Print usage statement

**--output-prefix** *prefix*

Mandatory. Path prefix for the output keys (*prefix***.private** and *prefix***.pub**).

**--passphrase-file** *path*

The passphare to use to encrypt the private key. Only the first line will be read. A passphrase stored in a file is of questionable security if other users can read this file. Do not use this option if at all avoidable.

## EXAMPLES

```
$ skopeo generate-sigstore-key --output-prefix mykey
```

## SEE ALSO

[skopeo(1)](/skopeo/1.md), [skopeo-copy(1)](/skopeo-copy/1.md), [containers-policy.json(5)](/containers-policy.json/5.md)

## AUTHORS

Miloslav Trmač mitr@redhat.com ⟨mailto:mitr@redhat.com⟩