Working with PGP keys

PGP does three jobs: verify signed announcements, encrypt your details to a vendor, and prove your identity at login. Set it up once.

Generate a key

gpg --full-generate-key    # RSA 4096 or ed25519
gpg --armor --export "you@handle" > mypub.asc

Verify a signed mirror list

gpg --import zion-market.asc
gpg --verify mirrors.txt.asc mirrors.txt   # look for: Good signature

Encrypt to a vendor

gpg --recipient VENDOR --armor --encrypt address.txt

Paste the encrypted block into your order so only the vendor can read it. Do the encryption locally; the point is that plaintext never leaves your machine.

PGP two-factor

Enable it in account settings. At login you decrypt a challenge and paste the code back, so a stolen password is not enough to enter your account.

Last reviewed 2026-07-12.