I'm interested to know whether you have a specific process or tool you use for managing your PGP keys?
I was thinking it'd be great if Lemmy allowed you to use PGP to verify your identity across multiple users on different instances. This made me think I need a good way to make sure I never lose my keys!
4 Comments
bbigras@sh.itjust.works · 4 pts · 3y
Not as the only way but using paperkey might be a good idea too.
benkinder@infosec.pub · 3 pts · 3y
I install my keys on 5 Yubikeys and then encrypt a copy of the private key so that it can only be decrypted with one of the Yubikeys. I store the encrypted bundle on Google drive and I’ve spread out the Yubikeys a little geographically by sending them to friends who I trust (PIN is still required to use the Yubikey so there’s still a layer of security). I also keep one of them in a safe at my house just in case.
I do feel like I may have gone a little overboard but maybe something similar could work for you!
PetrichorBias@lemmy.one · 3 pts · 3y
pragma@lemmy.zip · 1 pts · 3y
I have mine in a Kleopatra keychain for convenience, but I also keep backups in a KeePassXC encrypted database for security. They are essentially text files, so you can treat them the same way as you treat your passwords. I hope this helps.
isaachernandez@lemmy.world · 1 pts · 3y
I mostly just use personal pgp keys now, but I keep them in an encrypted container on my external hard drive and in proton drive.
hamid@lemmy.world · 0 pts · 3y