Back to Home

    PGP Tutorial

    Last updated: February 10, 2026

    🔐 What is PGP?

    PGP (Pretty Good Privacy) is a public-key encryption system that enables secure communication through asymmetric cryptography. It uses a pair of keys: a public key (shared openly) and a private key (kept secret).

    🔑 How It Works:

    • Public key — shared with others so they can encrypt messages to you
    • Private key — kept secret, used to decrypt messages sent to you
    • Signatures — prove a message was genuinely written by the key holder

    💡 On darknet markets, PGP is used for encrypting sensitive information (like shipping addresses), verifying vendor identity, and enabling two-factor authentication (2FA).

    ⚙️ Setting Up PGP Software

    Choose a PGP implementation based on your operating system. The most common tools are GnuPG (GPG) for Linux/Tails, Gpg4win for Windows, and GPG Suite for macOS.

    🐧 Linux/Tails: GnuPG (pre-installed)
    🪟 Windows: Gpg4win + Kleopatra
    🍎 macOS: GPG Suite
    📱 Android: OpenKeychain

    💡 For maximum security, generate and manage keys on Tails OS where the private key never touches a persistent, internet-connected system.

    🗝️ Generating Your Key Pair

    Generate a strong RSA 4096-bit key pair using the command line. Use a pseudonymous name and email — never your real identity.

    # Generate a new key pair

    gpg --full-generate-key

    # Export your public key

    gpg --armor --export your@email.key

    # Import someone's public key

    gpg --import vendor-key.asc

    ⚠️ Critical Rules:

    • Never share your private key — with anyone, ever
    • Use a strong passphrase to protect your private key
    • Back up your key pair in an encrypted offline location

    📝 Encrypting & Decrypting Messages

    To send encrypted information (like a shipping address), encrypt it with the vendor's public key. Only their private key can decrypt it.

    # Encrypt a message

    gpg --armor --encrypt --recipient vendor@key message.txt

    # Decrypt a received message

    gpg --decrypt encrypted-message.asc

    ⚠️ Always encrypt sensitive data like addresses, order details, and personal information before sending through marketplace messaging.

    🔐 PGP Two-Factor Authentication

    PGP 2FA adds a critical extra layer to your account security. During login, the marketplace encrypts a random code with your public key — only you can decrypt it to complete authentication.

    🛡️ Why PGP 2FA is Essential:

    • Prevents account takeover even if your password is compromised
    • Protects against phishing attacks on login pages
    • No dependency on phone numbers or email addresses
    • The gold standard of darknet account security

    💡 Enable PGP 2FA immediately after creating any marketplace account — it's the single most effective step you can take.