<p>Make sure to verify the keys that you download.</p>

<p>For example, if you first [[authenticate the Tails signing key
through the OpenPGP Web of Trust|install/download#wot]], then
you can verify our others keys as they are all certified by the Tails
signing key.</p>

Is not owned in a usable format by any single individual. It is split cryptographically using [gfshare](https://tracker.debian.org/pkg/libgfshare).

Is only used offline, in an air-gapped Tails only communicating with the outside world through:

Plugging the Tails flash media in another operating system to install Tails in the first place.

Plugging other removable media in the air-gapped Tails to send the public key, secret key stubs, parts of the secret master key, and so on to the outside world.

Plugging other removable media in the air-gapped Tails to receive Debian packages, public keys, and so on from the outside world.

Has a revocation certificate split amongst different people. See the [[details of the mechanism|signing_key_revocation]].

pub rsa4096 2013-07-24 [SC] [expires: 2027-10-08]
1F56EDD30741048035DAC1C5EC57B56EF0C43132
uid [ unknown] Tails user support <support@tails.net>
sub rsa4096 2013-07-24 [E] [expires: 2027-10-08]

Foundations team key
==================