The built-in GPG Key Manager stores GPG and PGP keys for use across your site.

It allows you to create, import, update, and delete keys. Keys that are stored in the GPG Key Manager can be used for encryption and decryption actions. As a central store for your keys, it allows you to import, or create, a key and use it multiple times on your site.

The GPG Key Manager will display a key's name, type (Public only, or Public and Private key pair), expiration date, and MD5 hash values. You can use this information to identify the stored keys, and to compare stored keys to find duplicate entries.

Generating GPG Keys in the GPG Key Manager

You can generate a GPG/PGP key pair using a web browser.

Within the GPG Key Manager, select the Create button. Enter your full name, or a notable name for this key, and enter your email address.

Setting an expiration date for the key is optional. Most GPG and PGP keys are "long lived" or have no expiration date applied, meaning that they are intended to be used for long periods of time. Keys can be revoked at any time, regardless of whether they contain an expiration date. Applying an expiration date to a key is usually performed in order to comply with regulations that require regular intervals of rotation for keys. The GPG Key Manager does not allow the applied expiration date of a key to be extended.

If you'd like a passphrase for your new key, enter it. This is optional. You can leave this option blank if you wish to have no passphrase to protect the private key.

Select the Generate key pair button. You'll be able to view the public key before you continue to the next step. If you would like to keep a copy of the Public Key, select all of the text and copy it to a file.

Click Save GPG and then a popup window will appear showing the Private Key. Click Download Private Key to save the Private Key.

Viewing GPG/PGP Keys in the GPG Key Manager

The GPG Key Manager table will display a key's name, type (Public only, or Public and Private key pair), expiration date, and MD5 hash values.

You can use the displayed information to identify the stored keys, and to compare stored keys to find duplicate entries.

Importing GPG/PGP Keys Into the GPG Key Manager

When importing a key pair (both the Public Key and the Private Key together), make sure that the Private Key corresponds to its matching Public Key. You cannot import a Private Key without its corresponding Public Key.

When importing private keys that are protected by a passphrase, you must provide the passphrase during the import for the import to succeed.

Within the GPG Key Manager, select the Import button. Enter your full name or a notable name for this key or key pair.

Paste the Public Key into the Public Key text field, or use the Choose File button to upload the Public Key from a file on your computer.

Paste the Private Key into the Private Key text field, or use the Choose File button to upload the Private Key file from your computer. If the Private Key is protected with a passphrase, enter the passphrase for it. You can leave this option blank if there is no passphrase for the private key.

Updating GPG/PGP Keys in the GPG Key Manager

When updating a key pair (both the Public Key and the Private Key together), make sure that the Private Key corresponds to its matching Public Key. You cannot update a Private Key without its corresponding Public Key.

When updating private keys that are protected by a passphrase, you must provide the passphrase for the update to succeed.

Within the GPG Key Manager, select the Edit button on the row of the key that you wish to update. Select the Change Credentials button and enter your full name or a notable name for this key or key pair.

Paste the Public Key into the Public Key text field, or use the Choose File button to upload the Public Key file from your computer.

Paste the Private Key into the Private Key text field, or use the Choose File button to upload the Private Key file from your computer. If the Private Key is protected with a passphrase, enter the passphrase for it. You can leave this option blank if there is no passphrase for the private key.

Removing GPG/PGP Keys from the GPG Key Manager

Keys that are in use for encryption or decryption cannot be deleted. Remove the key from use prior to attempting to delete it.

Within the GPG Key Manager, select the Delete button on the row of the key you wish to delete.