PGP Verify File

Verify digital signatures on files using PGP/GPG to confirm authenticity and detect tampering.

How It Works

1

Import Signer's Public Key

Upload or paste the public key of the person who signed the file you want to verify.

2

Upload File and Signature

Select the original file and its corresponding signature file (.sig), or upload a file with an inline signature.

3

Verify Signature

The tool checks the signature against the file content and displays whether the signature is valid or invalid.

Frequently Asked Questions

What does file signature verification tell me?

Verification confirms the file was signed by the holder of the private key (authenticity) and the file hasn't been modified since signing (integrity).

Why is my file signature verification failing?

Common reasons include: wrong public key, modified file content, corrupted signature file, or the file wasn't actually signed by that key.

What's the difference between detached and inline signatures?

Detached signatures are separate .sig files that accompany the original file. Inline signatures are embedded within the file content. Both can be verified.

Do I need the signer's private key to verify?

No, you only need their public key to verify signatures. Private keys are used for signing, public keys for verification.

Is file verification secure in the browser?

Yes, all verification happens locally on your device. The files and public key are processed entirely on your device.