Keys, Certificates & Tokens
PGP Verifier
Process key or token data with PGP Verify and explicit format settings. Enter the key material, choose the required format, then review the result.
This tool runs open-source code from CyberChef by GCHQ (Apache License 2.0). See open-source credits.
PGP Verifier performs OpenPGP signed-message verification for the supplied key or certificate data. It verifies the signed message and reports signer details, key ID, fingerprint, signing time, and message content.
It verifies the signed message and reports signer details, key ID, fingerprint, signing time, and message content. This result runs in the browser for this catalog category. Processing runs in the browser.
OpenPGP provides the selected encryption or signature operation; key trust, revocation, and storage remain external.
Instructions
- Provide text or data for this tool.
- Compare the full fingerprint with an independently trusted value. This applies to PGP Verifier.
- Treat any displayed user ID as information supplied by the key, not verified personal identity. This applies to PGP Verifier.
Example
Input: Use a disposable armored signed message and its signer's public key.
Settings: PGP Verifier: Public key of signer must match the signing key. Input is the signed message, not merely an unsigned plaintext string.
Result: It verifies the signed message and reports signer details, key ID, fingerprint, signing time, and message content.
Limits
- PGP Verifier: Unsigned input produces an error rather than a successful verification.
- PGP Verifier: A short key ID or claimed email address alone is insufficient identity evidence.