About | News | Usage | FAQ | Stats | Privacy

On this page, we collect information on how to use keys.openpgp.org with different OpenPGP software products.
We are still in the process of adding more. If you are missing some, please write to us and we'll try to add it.

Enigmail

Enigmail for Thunderbird uses keys.openpgp.org by default since version 2.0.12.

Full support is available since Enigmail 2.1 (for Thunderbird 68 or newer):

• Keys will be kept up to date automatically.
• During key creation, you can optionally upload and verify your key.
• Keys can be discovered by e-mail address.

GPG Suite

GPG Suite for macOS uses keys.openpgp.org by default since August 2019.

OpenKeychain

OpenKeychain for Android uses keys.openpgp.org by default since July 2019.

• Keys will be kept up to date automatically.
• Keys can be discovered by e-mail address.

Note that there is no built-in support for upload and e-mail verification so far.

GnuPG

To configure GnuPG to use keys.openpgp.org as keyserver, add this line to your gpg.conf file:

keyserver hkps://keys.openpgp.org

Retrieving keys

• To locate the key of a user, by email address:

  gpg --auto-key-locate keyserver --locate-keys user@example.net

• To refresh all your keys (e.g. new revocation certificates and subkeys):

  gpg --refresh-keys

Uploading your key

Keys can be uploaded with GnuPG's --send-keys command, but identity information can't be verified that way to make the key searchable by e-mail address (what's that?).

• You can try this shortcut for uploading your key, which outputs a direct link to the verification page:

  gpg --export your_address@example.net | curl -T - {{ base_uri }}

• Alternatively, you can export them to a file and enter that into the upload page:

  gpg --export your_address@example.net > my_key.pub

Troubleshooting

• Some old ~/gnupg/dirmngr.conf files contain a line like this:

  hkp-cacert ~/.gnupg/sks-keyservers.netCA.pem

  This configuration is no longer necessary, but prevents regular certificates from working. It is recommended to simply remove this line from the configuration.

• While refreshing keys, you may see errors like the following:

  gpg: key A2604867523C7ED8: no user ID

  This is a known problem in GnuPG. We are working with the GnuPG team to resolve this issue.

Usage via Tor

For users who want to be extra-careful, keys.openpgp.org can be reached anonymously as an onion service. If you have Tor installed, use the following configuration:

keyserver hkp://zkaan2xfbuxia2wpf7ofnkbz6r5zdbbvxbunvp5g2iebopbfc4iqmbad.onion

API

We offer an API for integrated support in OpenPGP applications. Check out our API documentation.

Others

Missing a guide for your favorite implementation? This site is a work-in-progress, and we are looking to improve. Drop us a line at support at keys dot openpgp dot org if you want to help out!