How to Verify a GPG Signature

Step-by-Step Guide

1. 1

   Step 1: Acquire the Public Key.

   Import the Public Key into GPG.
2. 2

   Step 2: Acquire a copy of the file in question.

   Save it in a Folder. , Save it in the same Folder. , Change the working directory to the Folder where your file and signature-file are saved. , Type the following command into a command-line interface: gpg
   --verify E.g., if you have acquired (1) the Public Key 0x416F061063FEE659, (2) the Tor Browser Bundle file (tor-browser.tar.gz), and (3) the signature-file posted alongside the Tor Browser Bundle file (tor-browser.tar.gz.asc), You would type the following: gpg
   --verify tor-browser.tar.gz.asc tor-browser.tar.gz
3. 3

   Step 3: Acquire a copy of the signature-file in question.

4. 4

   Step 4: Open a command-line interface.

5. 5

   Step 5: Verify the signature.

Detailed Guide

About the Author