The step Command Line Interface

The step command-line interface (CLI) is an easy-to-use and hard-to-misuse zero-trust swiss army knife. It provides a simple misuse-resistent interface to common cryptographic operations.

Using step you can:

  • Create, validate, and inspect certificates for use with TLS
  • Create a certificate authority for signing certificates
  • Create, verify, and inspect JWTs for use with OAuth and OpenID Connect
  • Create a token authority for signing JWTs
  • Encrypt and decrypt secrets (keys and other data)

And much more.

Join the chat at

Top level commands

step crypto - useful cryptographic plumbing

step oauth - authenticate to Smallstep using OAuth OIDC

step certificate - create, revoke, validate, bundle, and otherwise manage certificates

step path - print the configured step path and exit

step ca - initialize and manage a certificate authority

Utility commands

step help, step h - displays help for the specified command or command group

step version - displays the current version of the cli