<p>Make sure to verify the keys that you download, because there are
several fake and maybe malicious Tails keys on the key servers.</p>

<p>For example, if you first [[authenticate the Tails signing key
through the OpenPGP Web of Trust|install/download#wot]], then
you can verify our others keys as they are all certified by the Tails
signing key.</p>

To sign Tails released images

To certify other cryptographic public keys needed for Tails development

The secret key material will never be stored on an online server or on systems managed by anyone other than Tails core developers.

Is not owned in a usable format by any single individual. It is split cryptographically using [gfshare](https://tracker.debian.org/pkg/libgfshare).

Is only used offline, in an air-gapped Tails only communicating with the outside world through:

Plugging the Tails flash media in another operating system to install Tails in the first place.

Plugging other removable media in the air-gapped Tails to send the public key, secret key stubs, parts of the secret master key, and so on to the outside world.

Plugging other removable media in the air-gapped Tails to receive Debian packages, public keys, and so on from the outside world.

Has a revocation certificate split amongst different people. See the [[details of the mechanism|signing_key_revocation]].

Stored on OpenPGP smartcards owned by those who need them. Smartcards ensure that the cryptographic operations are done on the smartcard itself and that the secret cryptographic material is not directly available to the operating system using it.

Expiration date: same as the primary key.

To get this OpenPGP public key, download it from this website: [[!tails_website tails-signing.key]].

Use this key to encrypt private support requests sent to [[support@tails.net|doc/about/contact#support]].

This same key is used to handle [[*WhisperBack* reports|first_steps/whisperback]].

pub rsa4096 2013-07-24 [SC] [expires: 2025-11-07]
1F56EDD30741048035DAC1C5EC57B56EF0C43132
uid [ full ] Tails bug squad <tails-bugs@boum.org>
uid [ full ] Tails bug squad (schleuder list) <tails-bugs-owner@boum.org>
uid [ full ] Tails private user support <tails-support-private@boum.org>
uid [ full ] Tails bug squad (schleuder list) <tails-bugs-request@boum.org>
uid [ unknown] Tails user support <support@tails.net>
sub rsa4096 2013-07-24 [E] [expires: 2025-11-07]

Download it from this website: [[!tails_website tails-bugs.key]].

Fetch it from your favourite key server.

<a id="foundations"></a>