How to Encrypt an Email with PGP, Start to Finish
The full sequence: verify the recipient key out of band, mind the subject line PGP cannot encrypt, encrypt to your own key too, sign, and keep the private key where a stolen laptop cannot export it.
Published 10 October 2026
What a PGP Signature Actually Proves (and What It Doesn't)
A signature proves one key signed one unmodified message. It says nothing about who holds the key, whether malware sent the mail, or when it was sent. The chain of proof, link by link, and every failure you can check for.
Published 6 October 2026
Rotating Your PGP Key Without Losing Old Encrypted Mail
A staged rotation that keeps every old message readable: build the new key, cross-sign, publish, move correspondence, then retire the old key on a schedule you control.
Published 2 October 2026
Moving Your PGP Key to a Hardware Token: What Changes and What Breaks
A smartcard holds the secret key and never releases it, but automated decryption, key backups and multi-machine use all change shape. A practical account of the trade before you make it.
Published 28 September 2026
Your PGP Key on a Public Server: What Anyone Can Learn From It
Keyservers carry no delete button. What your public key reveals to anyone who looks, how to prune stale identities before uploading, and when to use WKD on your own domain instead.
Published 24 September 2026
Multiple PGP Keys for One Identity: Why You Have More Keys Than You Think
Four keys match your email address and you only control one. How duplicate PGP identities pile up, which key is really yours, and a five-step consolidation that does not break existing encrypted mail.
Published 20 September 2026
Encrypting Files for Someone Whose Key You Cannot Verify Yet
The deadline is today and the key arrived by the email you are trying not to trust. Two-channel fingerprint checks, challenge-and-confirm sending, and why keyservers make impostors cheaper.
Published 16 September 2026
PGP on Your Phone: What Actually Works on iOS and Android
Subkeys on the phone, primary key offline. What the mobile PGP apps do with your secret key, and two setups ranked by how much a lost phone costs you.
Published 15 September 2026
Is Key Transparency the End of Manually Verifying Fingerprints?
Transparency logs prove a key directory is consistent, not that the account belongs to the person you think. How the logs work and why PGP users still check fingerprints.
Published 11 September 2026
How to Back Up a PGP Key So It Survives a Lost Laptop, a Forgotten Passphrase and a Decade
The backup pattern that actually works for PGP secret keys: 3-2-1 with paper, the revocation certificate stored away from the key, and a tested restore.
Published 7 September 2026
Moving Your PGP Key to a New Computer Without Breaking Anything
Export the secret key, move it securely, verify decryption and signing on the new machine, then clean up the old one. Full commands included.
Published 3 September 2026
Signing vs Encrypting: What a PGP Signature Actually Proves
Using PGP for Files and Backups, Not Just Email
Encrypt tax records, vault exports and backup archives with your PGP key before they touch cloud storage. The actual commands, the two flags that matter, and how to test a restore.
Published 27 August 2026
Key Expiration, Revocation Certificates and What Happens When You Lose Your PGP Key
Your key expired, was revoked, or the secret key is gone. What still works, what is gone for good, and the habits that keep you out of the bad scenarios.
Published 22 August 2026
How to Send an Encrypted Email With PGP for Free (No Software to Install)
A working walkthrough for encrypting email with your existing Gmail or Outlook account, plus what PGP actually hides and what it doesn't.
Published 27 July 2026
How to Verify a PGP Key Before You Trust It: Fingerprints, Signatures and the Web of Trust
Before you encrypt to someone PGP key, you need to verify it theirs. Here how fingerprints, key signatures and the web of trust work in practice.
Published 6 August 2026