Skip to main content

What Are Private TLS Keys?

When uploading your own TLS certificates to ngrok, you must also upload a private key.

You can do so with the private_key_pem field when uploading a TLS certificate with the API.

Loading…

Accepted formats

ngrok accepts the following private key formats:

  • RSA, in either PKCS#1 or PKCS#8 form.
  • ECDSA, in either SEC 1 or PKCS#8 form.
  • Ed25519, in PKCS#8 form.

Regardless of the format you choose, the private key must be formatted as ASN.1 DER, encoded as PEM.

Encryption

ngrok will not accept any private keys that are encrypted (e.g. with DES).

ngrok encrypts your uploaded private keys at rest with NaCL.