GPGSuite for Mac OS installation and GPG Keychain operation guide

Sat, 17 Aug 2024 12:04:00 +0000

GPGSuite is a comprehensive toolset for managing PGP encryption and PGP signatures on macOS. This guide describes how to install GPGSuite how and use GPG Keychain on Mac OS.

Installing GPG Suite on macOS #

Download GPG Suite from the official website: https://gpgtools.org.
Open the downloaded DMG file and drag the GPG Keychain application to the Applications folder.

After installation, launch GPG Keychain using Finder or Spotlight.

Generating keys in GPG Keychain #

Open the GPG Keychain application and click the New button.
Enter your nickname and set a passphrase for the key, which will be used to protect it.
Select your preferred key algorithm and size (e.g., RSA, 4096 bits) and click Create Key.

When prompted to upload the key, click No, thanks!.

Backing up the private key in GPG Keychain #

Go to the key management screen, select your private key, and click Export….

Select the location where you want to save the key, and click Save.

Ensure the key is saved in a secure location.

A backup copy of the private key should be encrypted with VeraCrypt or TrueCrypt and placed on external media for protection against data loss.

Importing public keys in GPG Keychain #

Open the email or other communication containing the public key.
Copy the public key to the clipboard. The application will automatically detect the key in the clipboard.
Open the GPG Keychain application and select the Import option.

Then certify the public key to confirm its authenticity. Right-click on the key and select Details.

Confirm the key signing by selecting Ownertrust Ultimate.

If the key was not automatically detected, click Import.

Encrypting messages in GPG Suite #

Copy the message content you want to encrypt to the clipboard.
Right-click on the copied text or the text document you want to encrypt.
From the context menu, select Services .

Select the recipient’s public key from the list of available keys and click Encrypt.

After encrypting the message, copy the resulting text to the clipboard or save it to a file.

We do not need to import the public key again when encrypting the next messages. The key will be saved in the program files.

Decrypting messages in GPG Suite #

Copy the encrypted message to the clipboard or select the encrypted file.
Right-click on the selected content or file, then choose Services .

If prompted for a passphrase, enter the passphrase for your private key. After decryption, the decrypted text will be available in the clipboard or in the output file.

Signing messages in GPG Suite #

Copy the message content you want to sign to the clipboard or select the document you want to sign.
Right-click on the selected content or file.
From the context menu, select Services .

If you have more than one private key, select your private key from the list, then click Sign. The signed text or file will be saved or copied to the clipboard.

Avoid signing messages that seem universal. For example, a signed “I agree” or “It’s me” message can be saved and used to impersonate you in another conversation. Signed messages should be complete sentences describing the purpose and circumstances of the signature.

Verifying messages in GPG Suite #

Select the signed text or file you want to verify.
Right-click on the selected content or file.
From the context menu, select Services .

GPG Suite will display the verification result, informing you whether the signature is valid and who the author is.

We do not need to import the public key again when verifying subsequent signatures of the same author. The key will be saved in the program files.

Mac OS on Cebulka Blog