Email Encryption with GnuPG and OpenPGP

GnuPG implements the OpenPGP standard and can be used to encrypt files or messages and to create digital signatures. It is still useful, but many older email-client instructions and key-generation examples are no longer current.

Generate a modern key

gpg --full-generate-key

Choose a modern algorithm offered by your installed GnuPG version and protect the private key with a strong passphrase. Keep a secure backup and consider creating a revocation certificate.

List and export keys

gpg --list-keys
gpg --armor --export you@example.com > public-key.asc

Import a public key

gpg --import public-key.asc

Before trusting a public key, verify its fingerprint through a separate trusted channel. A key received by email should not automatically be assumed to belong to the claimed sender.

Email clients

Some current mail clients include OpenPGP support directly, while others use extensions or external tools. Follow the documentation for the exact client version you use rather than relying on old Enigmail-era instructions.

Never send online-banking passwords or other high-value credentials by ordinary email. Encryption reduces exposure in transit and storage, but endpoint security and key management still matter.

Leave a Comment