You are not logged in.
Hello everyone,
I am interesting to be a little bit more secure in my life.. I would like to know, if I create a PGP key then is it secure to keep it in my own computer?
What is the correct way to handle your private key and make sure that nobody is going to steal it? And if I do not keep it, and write it to an external disk or somewhere else,
how am I going to decrypt my emails? I will every time load my key from the external disk and doing the same thing every time?
and what if I am online and somebody steal it that moment?
I would appreciate it if I knew how you handle this!
Thank you.
* my question occured by reading GnuPG
** Is there anything similar with the ssh-agent?
Last edited by dsar (2014-10-22 15:17:22)
Offline
See the GNU Privacy Handbook [1] subsection titled "Protecting your private key".
It boils down to how much inconvenience you can tolerate to protect it. Remember a well protected private key is useless if it is so inconvenient that you never use it.
Offline
Remember a well protected private key is useless if it is so inconvenient that you never use it.
That was my main point! Thank you!
Offline