''This page is about using GnuPG in Debian. For development work, see the [[Teams/GnuPG|GnuPG packaging team page]].''

{{attachment:logo-gnupg-light-purple-bg.png|GnuPG logo|align="right"}}

GnuPG is a complete and free implementation of the OpenPGP standard. GnuPG allows to encrypt and sign your data and communication, features a versatile key management system as well as access modules for all kinds of public key directories. GnuPG, also known as GPG, is a command line tool with features for easy integration with other applications. A wealth of frontend applications and libraries are available. Version 2 of GnuPG also provides support for S/MIME and Secure Shell (ssh).

 * Upstream Homepage: https://www.gnupg.org/
 * Upstream Documentation: https://www.gnupg.org/documentation/

<<TableOfContents()>>

= Introduction =

As GnuPG is an implementation of the OpenPGP standards, you can get an understanding of the concepts you'll need from the [[https://userbase.kde.org/Concepts/OpenPGP_For_Beginners|OpenPGP concepts]] pages on the KDE wiki.

You may also read [[https://help.riseup.net/en/security/message-security/openpgp/best-practices|riseup's best practices document]] (though as of 2021-05 that guide is now deprecated, and GnuPG default options are recommended).

= Getting Started =

 * [[http://keyring.debian.org/creating-key.html|Getting started with GnuPG]] - Generating and publishing a key
 * [[Subkeys]] - Using subkeys for easier key management
 * [[OfflineMasterKey|Offline master key]]

= Integrations with other applications =
== GnuPG plugin for vim ==

GnuPG plugin for vim is part of vim-scripts package.

{{{
# apt install vim-scripts
$ mkdir ~/.vim/plugin/
$ ln -sf /usr/share/vim-scripts/gnupg ~/.vim/plugin/
}}}

Now you can transparently edit .gpg files and manage recipients who has access to the files easily. See `/usr/share/vim-scripts/gnupg/README.md` for more details of how to use this plugin. 

= Advanced Topics =

 * [[GnuPG/AirgappedMasterKey|Airgapped Master Key]] - Generating an airgapped master key and subkeys
 * [[GnuPG/SmartcardSubkeys|Smartcard Subkeys]] - Exporting subkeys to a [[Smartcards|smartcard]] (or other OpenPGP hardware token)

----
[[CategoryOpenPGP]]