JOSE(1)
π so you found jose (that's section 1 of the manual, bestie) π
okay so picture this: you're deep in the terminal, you need to sign something, encrypt something, or just vibe-check a key, and boom β jose is right there. this is the man page for the JosΓ© command line toolkit, and honestly? she's iconic. let's get into it π
β¨ NAME β¨
jose β the Toolkit for performing JSON Object Signing and Encryption. yes that's the whole name, no notes, it's giving main character energy πΈ
β¨ SYNOPSIS β¨
here's the whole menu of what she can do. every line is a real invocation, copy-paste ready, no cap π«Ά
jose alg [-k KIND]
jose b64 dec -i B64 [-O BIN]
jose b64 enc -I BIN [-o B64]
jose jwe dec -i JWE [-I CT] -k JWK [-p] [-O PT]
jose jwe enc [-i JWE] -I PT -k JWK [-p] [-r RCP] [-o JWE] [-O CT] [-c]
jose jwe fmt -i JWE [-I CT] [-o JWE] [-O CT] [-c]
jose jwk exc [-i JWK] -l JWK -r JWK [-o JWK]
jose jwk gen -i JWK [-o JWK]
jose jwk pub -i JWK [-o JWK]
jose jwk thp -i JWK [-a ALG] [-o THP]
jose jwk use -i JWK [-a] [-r] -u OP
jose jws fmt -i JWS [-I PAY] [-o JWS] [-O PAY] [-c]
jose jws sig [-i JWS] [-I PAY] [-s SIG] -k JWK [-o JWS] [-O PAY] [-c]
jose jws ver -i JWS [-I PAY] -k JWK [-O PAY] [-a]
(and yeah, every one of those subcommands has her own separate man page down in SEE ALSO β we'll get there π)
π OVERVIEW π
so real talk: JosΓ© is a C-language implementation of the Javascript Object Signing and Encryption standards. like, actual C. compiled. fast. not playing around. π₯
and specifically, JosΓ© is out here aiming towards implementing these standards, in this exact list, no skips:
- RFC 7515 - JSON Web Signature (JWS)
- RFC 7516 - JSON Web Encryption (JWE)
- RFC 7517 - JSON Web Key (JWK)
- RFC 7518 - JSON Web Algorithms (JWA)
- RFC 7519 - JSON Web Token (JWT)
- RFC 7520 - Examples of Protecting Content Using JOSE
- RFC 7638 - JSON Web Key (JWK) Thumbprint
that's a whole stack of RFCs and she ate every single one πβ¨
π¦ what the JosΓ© command line utility actually gives you π¦
the JosΓ© command line utility provides facilities for the following β and bestie, this list is lowkey stacked:
- URL-safe Base64 Encoding & Decoding
- Key Generation and Management
- Encryption & Decryption
- Signing & Verification
like... that's the whole lifecycle of a secret. encoding it, making keys for it, locking it up, unlocking it, signing it, checking the signature. she does it all and she does it in one binary. obsessed ππ
π AUTHOR π
Nathaniel McCallum <npmccallum@redhat.com> β thank you for your service, king π (no, but literally, this is the author listed on the page, we're just giving credit where it's due π«Ά)
π SEE ALSO π
go read these next, iykwim, they're all one subcommand deep and they all slay in their own way:
jose-alg(1)jose-b64-dec(1)jose-b64-enc(1)jose-jwe-dec(1)jose-jwe-enc(1)jose-jwe-fmt(1)jose-jwk-exc(1)jose-jwk-gen(1)jose-jwk-pub(1)jose-jwk-thp(1)jose-jwk-use(1)jose-jws-fmt(1)jose-jws-sig(1)jose-jws-ver(1)
β tiny lil sign-off note before you go: this page is from theJOSE(1)manual, dated06/09/2026. that's the source/version + date tea π keep it in your back pocket for citing purposes.
anyway, that's the page! go encrypt something, sign something, generate a key, b64-decode a mystery blob β she's got you. mwah ππ§β¨
π¦ where this page comes from
- arch rolling: jose 15-2 Β· Apache-2.0
- π girlified by deepseek-ai/DeepSeek-V4.1-Flash-1017 on : a language model's rewrite of the original, under its terms