PGP Handtekening Verifiëren

Verifieer digitale handtekeningen op tekstberichten met PGP.

Overview

PGP Verify Signature lets you confirm that a signed message or document genuinely came from its claimed sender and has not been altered since it was signed. Paste the sender's public key and the signed message — including the full PGP signature block — and the tool performs the cryptographic check entirely inside your browser using the OpenPGP standard. Because no data ever leaves your device, you can safely verify sensitive communications, software release signatures, or confidential documents without trusting a third-party server with either the message content or the public key.

Common Use Cases

  • Verify Software Releases — Confirm that a downloaded binary or archive was signed by the expected developer key, ruling out tampering or supply-chain substitution.
  • Authenticate Received Messages — Check that an email or document actually came from a known contact by validating their attached PGP signature block.
  • Detect Message Tampering — Catch any post-signature modification to a message — even a single changed character causes verification to fail, making integrity checks reliable.
  • Validate Signed Legal or Financial Documents — Verify PGP-signed contracts or statements before acting on them, without sending the document to an external service.
  • Audit Signed Configuration Files — Confirm that server configs or deployment manifests signed by a team member match the expected public key before applying changes.

How It Works
1

Import Sender's Public Key

Upload or paste the public key of the person who signed the message you want to verify.

2

Paste Signed Message

Copy and paste the complete signed message including the signature block (-----BEGIN PGP SIGNED MESSAGE-----).

3

Verify Signature

The tool checks the signature against the message content and displays whether the signature is valid or invalid.

Frequently Asked Questions

What does signature verification tell me?
Verification confirms two things: the message was signed by the holder of the private key (authenticity) and the message hasn't been modified since signing (integrity).

Why is my signature verification failing?
Common reasons include: wrong public key, modified message content, corrupted signature, or the message wasn't actually signed by that key.

Do I need the sender's private key to verify?
No, you only need their public key to verify signatures. Private keys are used for signing, public keys for verification.

Can I verify signatures from unknown senders?
You can verify the cryptographic signature, but you need to trust that the public key actually belongs to the claimed sender. This is where key verification and web of trust become important.

Is signature verification secure?
Yes, all verification happens locally in your browser. The signed message and public key are processed entirely on your device.

Gerelateerde Tools

AES Bestand & Tekst Encryptor Base64 Decode Base64 Encode CSR Generator DER naar PEM Converter Hash Generator