[[!meta title="OpenPGP keys"]]

Tails developers maintain several OpenPGP key pairs.

<div class="caution">

<p>For example, if you first [[authenticate the Tails signing key
through the OpenPGP Web of Trust|install/download#wot]], then
you can verify our others keys as they are all certified by the Tails
signing key.</p>

</div>

[[!toc levels=1]]

<a id="signing"></a>

Signing key

Purpose

This key only has the capability to sign and certify: it has no encryption subkey.

Its only purpose is:

To certify other cryptographic public keys needed for Tails development

Policy

The secret key material will never be stored on an online server or on systems managed by anyone other than Tails core developers.

Primary key

Signing subkeys

Stored on OpenPGP smartcards owned by those who need them. Smartcards ensure that the cryptographic operations are done on the smartcard itself and that the secret cryptographic material is not directly available to the operating system using it.

Key details

pub rsa4096/0xDBB802B258ACD84F 2015-01-18 [SC] [expires: 2027-01-13]
A490D0F4D311A4153E2BB7CADBB802B258ACD84F
uid [ultimate] Tails developers <tails@boum.org>
uid [ultimate] Tails developers (offline long-term identity key) <tails@boum.org>
sub ed25519/0x8E9567D327792707 2024-05-23 [S] [expires: 2027-01-13]
sub ed25519/0xC69FF0E4C08F8209 2024-05-23 [S] [expires: 2027-01-13]
sub ed25519/0xBC8BD3DAC9CD2979 2024-05-23 [S] [expires: 2027-01-13]

How to get the public key?