PGP Export Keys

Overview

Export the keys in your browser keyring as standard ASCII-armored .asc text, ready for gpg --import, Thunderbird or Kleopatra. Each key has two buttons: one for the public key you share, one for the private key you back up. They never end up in the same file, because that's how private keys get published by mistake. The private key stays protected by its passphrase, which this tool never holds. You can also see what each key can do and remove keys from this device.

Publishing a public keyExport the public key as .asc for your email signature, website or a contact, with no chance of the private key coming along.
Backing up a private keySave the passphrase-protected private key to an encrypted drive or password manager, so losing a laptop doesn't mean losing your identity.
Moving to desktop softwareExport a key made here and import it into GnuPG, Thunderbird or Kleopatra to keep using the same identity.
Setting up a second deviceExport the key pair once and import it wherever else you read encrypted mail or sign things.
Clearing a borrowed computerSee what this browser holds and remove it, one key or the whole keyring, before you hand the computer back.

Set

Security Tools 26

Neighbours

01 AES File & Text Encryptor 02 Base64 Decode 03 Base64 Encode 04 CSR Generator 05 DER to PEM Converter 06 Hash Generator

Specification

Command: security.pgp_export_keys
Set: Security
Input: text
Output: ASC
Max file: no limit
Batch: single file

Runtime

Engine: WebCrypto · OpenPGP.js
Threads: single
Isolated: —
WebGPU: —
Memory: —

Transport 0 B

Your file is opened, worked on and saved inside this tab. This tool has no upload step, so your file has nowhere else to go.

Keys

Search: ⌘K
Panels: ⌘1 · ⌘2
Full width: F
All keys: ⌘/

How it works

Check the keyring

Each key shows whether you hold the private half, whether it's valid, expired or revoked, what it can do and where it came from.

Choose public or private

There are two buttons on two separate cards: one for the public key, one for the private key (with "private" in the filename).

Download or clear

You get ASCII-armored text that gpg --import reads directly. You can also remove one key or clear the whole keyring from this device.

Frequently asked

Why can't I export both keys as one file?

Because that's how private keys get leaked by accident: someone shares what they think is a public key, and the file holds the private half too. Here it's always two buttons and two files.

Is the exported private key protected?

Yes. It's exported in the same passphrase-protected form it's stored in. The tool never holds your passphrase, so anyone who gets the file still needs it.

Where should a private key backup go?

Somewhere offline and away from your revocation certificate: an encrypted drive, a password manager or paper in a safe. Not in unencrypted cloud storage, and not next to the passphrase.

Will the export import into GPG?

Yes. It's standard ASCII-armored OpenPGP. We've checked the round trip: gpg --import accepts the key, and gpg can then encrypt to it and verify signatures made with it.

What does clearing the keyring actually delete?

It removes the keys from this browser's IndexedDB storage, so the page can no longer see or use them. That doesn't guarantee the bytes are wiped from the disk, because browser storage and the file system may not overwrite the space. If a device once held a private key, treat it that way.

Keys

Search: ⌘K
Panels: ⌘1 · ⌘2
Full width: F
All keys: ⌘/