PGP Sign File
Digitally sign files using your PGP/GPG private key to prove authenticity and detect tampering.
Overview
PGP Sign File lets you create a cryptographic digital signature for any file — documents, executables, archives, images — using your own PGP or GPG private key, entirely inside the browser. The signing operation runs locally with the Web Crypto API and OpenPGP.js, so your private key and the file you are signing never leave your device. The output is a standard detached signature (.asc or .sig) that anyone can verify with their PGP client or the companion PGP Verify File tool, confirming both authorship and that the file has not been tampered with since it was signed.
Common Use Cases
- Software Release Signing — Developers sign release binaries and checksums so end users can verify downloads are authentic before installing.
- Legal and Contractual Documents — Lawyers and freelancers attach PGP signatures to contracts or agreements to prove the document has not been altered after signing.
- Secure File Handoffs — Researchers and journalists sign source files or datasets before sharing them so recipients can confirm the files are unmodified originals.
- Open-Source Package Distribution — Maintainers sign tarballs or packages so package managers and users can cryptographically verify the supply chain.
How It Works
Import Your Private Key
Upload or paste your PGP private key and enter the passphrase to unlock it for signing.
Select File to Sign
Choose the file you want to digitally sign. The tool supports documents, images, and other file types.
Generate Signature File
The tool creates a digital signature file using your private key that can be shared alongside the original file.
