GPG notes

one.md

1. To list available public keys

gpg -k --keyid-format long

2. To List the available secret keys

gpg -K --keyid-format long

• If the primary secret key is not available, the secret title will end in a hash i.e. (sec#). In this case, you will need to import the primary master key to be able to modify/generate secret sub keys

3.Import the primary secret key

gpg --import {filename}

4. Do something: Using the primary key identifier run,

gpg --edit-key {key identifier}

i) To change password:

• Run command to change the passphrase

passwd

ii) To create new sub key

• Run command to add sub key

addkey

5. Remove the primary/master key from local machine and use sub keys

i) Export the subkeys

gpg -a --export-secret-subkeys ${subKey! or primary key identifier} > {filename}

ii) Delete the primary and subkey from current keyring

gpg --delete-secret-keys {uid email here}

iii) Import the sub key(s)

gpg --import {filename}

iv) Trust the key Using the primary key identifier run,

gpg --edit-key {key identifier}

then run command trust