Download: http://gpg4win.org/download.html Make sure that Kleopatra and GNU Privacy Assistant (GPA) are installed. GPA is not selected as an option by default. Either Kleopatra or GPA can be used to encrypt and decrypt messages.
-
Choose your language, click “Ok”
-
Click “Next”, then “Next” again. You”ll now be at a screen asking what components you want to install. We’ll be selecting “Kleopatra”, “GpgEX”, and “Gpg4win Compendium”. Then click “Next”
-
It will ask where to install, just keep the default and click “Next”
-
Now it’ll ask where you want to install shortcuts. Select whichever you want, click “Next”
-
You can choose which Start Menu folder you want it installed in, just click “Next”
-
It will now install, when done you should see this. Click “Next”, then “Finish”
The next step is to generate your keypair so you can encrypt/decrypt messages. Like always, we’ll be going with 4096 bit RSA. You will create a Public and Private key pair with information related to your identity and email address or addresses. This is important to help others locate your public key on the key server. If we were concerned with anonymity, we would make sure that none of the information used in the key pair could be used to reveal our true identity. The e-mail could be a valid alias for an anonymous email service on the DarkNet or complete gibberish. Kleopatra should be used to create your key pairs instead of GPA because it will allow you to create a 4096 bit RSA key where GPA will only allow you to create a 2048 bit RSA key.
-
Open up Kleopatra application
-
Click “File”, then “New Certificate…”
-
In the Certificate Creation Wizard click “Create a personal OpenPGP key pair”
-
Enter your personal information, but do not click Next yet.
-
Click “Advanced Settings…”, and in the Advanced Settings dialog box in the “Key Material” section select the “RSA” radio button, select “4,096 bits” from the drop-down menu, and click “Ok”
-
Verify that the information you entered your information correctly and click “Create Key”
-
Enter a secure passphrase in the “pinentry” dialog box and click “Ok”
-
Kleopatra will now generate the key pair. The random entry of data is used to create entropy. Enter text, move the mouse, etc.
-
Once the key is created, click “Finish”
Next, you want to make a PGP key. Remember, none of the details need to be valid. I'd use your online name or a different alias when making your key. Something that isn't your gamertag for online games, or anything that may tie to you. A completely new alias. The e-mail doesn't need to be valid at all. Here are some pictures to help you through the process. Also, make a backup of your key!!! First, click the keys in the menu at the top. Alternatively, you can click CTRL+N to begin the process of creating a key. Shown here:
-
You will go through a set-up, where you make a name for your key, which I suggest you use an alias. Shown here:
-
After selecting your alias, it asks for an e-mail address. This e-mail should be non-existent, and be linked to a website that also doesn't exist. Shown here:
-
Then you're asked to make a backup of your key. I highly suggest you do this! Although you can make a back up at any time, you should just do it now. This is where your public key will be that you give to others to contact you. Shown here:
-
Find where you put the back up of your key. It will be an .asc file but no worries, when asked to open the file just tell windows or whatever OS to open it using Notepad. Here you will find a public key similar to this.
-
When sharing your key with others, you want to copy and paste from the beginning dashes to the end dashes. Exactly how I have copied and pasted above.
Add your public key to a public key server so people can find your public key in order to send you secure messages.
Add your public key to a public key server so people can find your public key in order to send you secure messages. A public key can be published to a key server from GPA by clicking on the “Server” menu and selecting “Send Keys.”
In this step we are going to retrieve the public key from the key pair that was just created. By doing this we are able to make the public key available to those that wish to communicate with you securely. Without it, they will not be able to encrypt messages that you are able to decrypt.
-
In the “My Certificates” tab, right click on your key and click “Export Certificates…”
-
Browse to the location where you want to save the public key and click “Save” (Note: you may want to give it a name that distinguishes this file as your public key)
-
The public key can be viewed in a text editor, like notepad. Browse to the location where you saved the key and open it. (Note: The key will have a “.asc” extension, you may have to select “All files” from the dropdown menu.
-
The text you see in the file is your public key. This is the text that you will send to others so they can import it into their PGP application.
<…>
Similar to obtaining your public key
-
Right click on your key in the “My Certificates tab and select “Export Secret Keys…”
-
Select the location to save your private key, give it a name, check “ASCII armor”, and click “Ok”
The following dialog box confirms the export of your private key. (Remember to keep the private key safe and never share it!)
<…>
It’s impossible to send a vendor an encrypted message without their public key. The public key could be sent to you in an email as an attachment or included in the signature block, downloaded from a key server, shared from removable storage, etc.
-
Receive a public key as a text file through email or other electronic method
-
Copy all text including “—–BEGIN PGP PUBLIC KEY BLOCK—–” and “—–END PGP PUBLIC KEY BLOCK—”
-
In your task bar, right click on the Kleopatra icon, go to “Clipboard”, then click “Certificate Import”
-
If the import worked you should see a window pop up as confirmation, click “Ok”
-
The imported key should now be displayed in Kleopatra under the “Other Certificates” tab
<…>
The private key that you will be importing is from a key pair that you have previously created. This private key is used to sign outgoing messages and to decrypt incoming messages. Any host or device that contains your private key should be considered “sensitive” because loss or theft could lead to the compromise of your private key.
-
Click “File”, “Import Certificates…”
-
Browse to the location where the private key is saved, select it, and click “Open”
-
A window will be displayed confirming the import of the private key. Click “Ok” to contintue.
-
The key information should now be displayed in the “My Certificates” tab
You see people giving their public keys away so others can contact them. Simply open a notepad file, copy and paste their key and import it using the GPA program. I will show you how to do this. First make a blank text file and copy the users pubic key to it. Shown here:
Then, in the Keys menu where you made your key, select import keys. Shown here:
To create a message and encrypt it:
-
Open Notepad and create your message
-
Copy the entire message to the clipboard
-
In your task bar, right click on the Kleopatra icon, go to “Clipboard”, then click “Encrypt…”
-
This gorgeous window will open. Click “Add Recipient…”
-
Another window will appear. Click the “Other Certificates” tab, then select who you want to send your message to, then click “Ok”.
-
You should be back at the previous window with the recipient listed. Click “Next”
-
If all went well, you should see this window. Click “Ok”
-
Your encrypted message will be in your clipboard, all you need to do is paste it into the message box and send
GPA <..>
##Kleopatra
This is just as easy as encrypting.
-
Copy everything that was sent
-
In your task bar, right click on the Kleopatra icon, go to “Clipboard”, then click “Decrypt/Verify…”
-
A window will pop up asking for your passphrase, enter that then click “Ok”
-
A window should pop up verifying it was decrypted, and copied to your clipboard. Click “Finish”
-
Open your text editor of choice, and paste your message
<…>