GPG Decryption

---

Files.com site administrators can enable GPG decryption on a per-folder basis.

Enabling GPG decryption for a particular folder also means that files uploaded to any subfolders within that folder will be automatically decrypted unless you explicitly disable the folder setting on a subfolder.

GPG decryption requires a GPG/PGP Private key. You can generate a GPG/PGP key pair using the GPG Key Manager or by using the appropriate GPG software for your operating system. See our steps for Windows, MacOS and Linux.

You can use a different private key for each folder you enable decryption on.

Files.com will attempt to decrypt every file uploaded to this folder or its subfolders using the selected private key. If a file cannot be decrypted then it will remain in its original form. Only files that were encrypted with the matching Public Key will be decrypted. If the Public Key has expired then decryption cannot be performed.

To avoid non-encrypted files being uploaded into a decryption folder, you can use the Folder Setting for Limit uploaded files to certain extensions so that only PGP or GPG files will be allowed.

When enabling GPG decryption on a folder, files that were uploaded to the folder prior to enabling the setting will not be automatically decrypted. You can re-upload those files to have GPG decryption applied to them.

Within the folder where you would like to enable GPG decryption, click on the Folder Settings button.

Expand the GPG encryption/decryption section.

Select the Yes, use GPG decryption on all files in this folder and its sub-folders option.

Within the Auto decryption section, enter a file suffix into the Suffix text box. This suffix will be removed from the uploaded file name. For example, .gpg or .pgp.

Select a key from the presented list.

Optionally, select the Ignore MDC integrity check option if you wish to ignore any Modification Detection Code errors.

In the folder where you would like to enable GPG decryption, click on the Folder Settings button.

Expand the GPG encryption/decryption section.

Select the Yes, use GPG decryption on all files in this folder and its sub-folders option.

Within the Auto decryption section, enter a file suffix into the Suffix text box. This suffix will be removed from the uploaded file name. For example, .gpg or .pgp.

Select the Import from file... option.

Enter your full name or a notable name for this key or key pair.

Paste the Public Key into the Public Key text field, or use the Choose File button to upload the Public Key from a file on your computer.

Paste the Private Key into the Private Key text field, or use the Choose File button to upload the Private Key file from your computer. If the Private Key is protected with a passphrase, enter the passphrase for it. You can leave this option blank if there is no passphrase for the private key.

Optionally, select the Ignore MDC integrity check option if you wish to ignore any Modification Detection Code errors.

In the folder where you would like to enable GPG decryption, click on the Folder Settings button.

Expand the GPG encryption/decryption section.

Select the Yes, use GPG decryption on all files in this folder and its sub-folders option.

Within the Auto decryption section, enter a file suffix into the Suffix text box. This suffix will be removed from the uploaded file name. For example, .gpg or .pgp.

Select the Create new... option.

Enter your full name, or a notable name for this key, and enter your email address.

If you'd like a passphrase for your new key, enter it. This is optional. You can leave this option blank if you wish to have no passphrase to protect the private key.

Select the Generate key pair button. You'll be able to view the public key before you continue to the next step. If you would like to keep a copy of the Public Key, select all of the text and copy it to a file.

Click Save GPG and then a popup window will appear showing the Private Key. Click Download Private Key to save the Private Key to your computer.

Once you've created the new key pair, you'll be returned to the Folder Settings panel.

Optionally, select the Ignore MDC integrity check option if you wish to ignore any Modification Detection Code errors.