The GPG Key Manager securely stores your GPG and PGP keys for use across your site. It allows you to create, import, update, and delete keys from a single interface. Keys stored here can be used for both encryption and decryption operations.

As a centralized repository, the GPG Key Manager lets you create or import a key once and reuse it throughout your site. Each entry displays the key’s name, type (public only, or public and private key pair), expiration date, and MD5 hash. You can use this information to identify keys and detect duplicates.

Generating GPG Keys

You can generate a new GPG/PGP key pair directly from your web browser.

When creating keys, enter your full name or a descriptive label for the key, and your email address.

Setting an expiration date is optional. Most GPG and PGP keys are long-lived and do not expire, but you can apply an expiration date if your organization requires periodic key rotation. You can revoke any key at any time, but you cannot extend its expiration date once it’s set.

If you want to protect your private key with a passphrase, enter it now. Leave this blank to create a key without a passphrase.

After generating a key pair, the public key will appear first, Copy and save it if you want to keep a local copy.

After saving the new key pair, a popup will display the private key. Download the private key and save it securely.

Files.com encrypts all private keys before storing them, and they cannot be accessed by Files.com employees.

Viewing GPG/PGP Keys

The GPG Key Manager table displays each key’s name, type, expiration date, and MD5 hash. Use these details to identify keys, confirm validity, and locate duplicates.

Importing GPG/PGP Keys

When importing an existing key or key pair, enter a name or label for the key. You can paste the key text or use Choose File to upload from your computer.

Paste or upload the public key in the Public Key field.

Paste or upload the private key in the Private Key field.

If your private key is protected by a passphrase, enter it during import. The import will fail if the passphrase is incorrect or missing.

Ensure that the private key matches the corresponding public key before completing the import.

Updating GPG/PGP Keys

To update an existing key pair, use the Edit option of the key.

The private key must match its corresponding public key; you cannot update them separately.

Removing GPG/PGP Keys

You cannot delete a key that is currently in use for encryption or decryption.

Remove it from all active configurations before deleting.