How to Convert PPK to PEM

PPK is PuTTY’s private key format, while PEM is commonly used by OpenSSH and many Linux or cloud server workflows. If you created your SSH key for PuTTY but now want to connect using terminal-based tools, automation, or another environment that expects PEM, you may need to convert the key.

This is a normal workflow when moving between Windows and Linux-based tooling.

The easiest way to convert PPK to PEM on Windows is with PuTTYgen. Open PuTTYgen, load the PPK file, and then export the private key in OpenSSH-compatible format. That exported private key can then be used as a PEM-style key in terminal workflows.

Be careful while exporting private keys. Anyone who gets access to the file can potentially access the server if the key is valid and authorized.

Once exported, you can reference the converted key in SSH commands or other tools that accept PEM or OpenSSH-style private keys. On Unix-like systems, you may also need to tighten permissions on the file before using it.

For example, OpenSSH often expects private key permissions that are limited to the current user.

Do not email the PEM file or leave it in shared folders. Private keys should be stored securely and only on systems that actually need them. If you believe the key has been exposed, replace the key pair and update the authorized public key on the server.

If you are converting keys just to move between tools, keep the files organized clearly so you know which environment uses which format.

If your starting point is a PEM file and you need the opposite conversion, use the PEM-to-PPK guide instead. If you are connecting to EC2 from Windows, the EC2 SSH article helps explain how the key file fits into the full connection flow.