PGP Bestand Verifiëren

Verifieer digitale handtekeningen op bestanden met PGP.

Overview

PGP Verify File lets you confirm the authenticity and integrity of any file by checking its PGP or GPG digital signature entirely in your browser. Paste or upload the signer's public key, supply the original file alongside its detached .sig file (or a file with an inline signature), and the tool immediately tells you whether the signature is valid. Because all cryptographic operations run locally via WebAssembly, your files, keys, and verification results never touch a server — making this the right choice whenever you need to validate sensitive software releases, documents, or archives without exposing them to third parties.

Common Use Cases

  • Software Release Verification — Developers and system administrators verify PGP-signed release tarballs or installers to confirm they came from the legitimate publisher and were not tampered with in transit.
  • Secure Document Receipt — Legal and finance teams validate signed contracts or reports from counterparties, confirming the signer's identity and that the document content is unchanged.
  • Open-Source Package Checks — Developers cross-check detached .sig files shipped alongside open-source packages before installing, following the project's published verification instructions.
  • Air-Gapped or Privacy-Sensitive Workflows — Security-conscious users who cannot risk uploading confidential files to a remote service use this tool to verify signatures entirely on-device.
  • Teaching PGP Concepts — Instructors and self-learners explore how public-key signature verification works in practice by testing real .asc or .sig signatures against known public keys.

How It Works
1

Import Signer's Public Key

Upload or paste the public key of the person who signed the file you want to verify.

2

Upload File and Signature

Select the original file and its corresponding signature file (.sig), or upload a file with an inline signature.

3

Verify Signature

The tool checks the signature against the file content and displays whether the signature is valid or invalid.

Frequently Asked Questions

What does file signature verification tell me?
Verification confirms the file was signed by the holder of the private key (authenticity) and the file hasn't been modified since signing (integrity).

Why is my file signature verification failing?
Common reasons include: wrong public key, modified file content, corrupted signature file, or the file wasn't actually signed by that key.

What's the difference between detached and inline signatures?
Detached signatures are separate .sig files that accompany the original file. Inline signatures are embedded within the file content. Both can be verified.

Do I need the signer's private key to verify?
No, you only need their public key to verify signatures. Private keys are used for signing, public keys for verification.

Is file verification secure in the browser?
Yes, all verification happens locally on your device. The files and public key are processed entirely on your device.

Gerelateerde Tools

AES Bestand & Tekst Encryptor Base64 Decode Base64 Encode CSR Generator DER naar PEM Converter Hash Generator