PGP Verify Signature

Verify digital signatures on PGP/GPG signed messages to confirm authenticity and detect tampering.

How It Works

1

Import Sender's Public Key

Upload or paste the public key of the person who signed the message you want to verify.

2

Paste Signed Message

Copy and paste the complete signed message including the signature block (-----BEGIN PGP SIGNED MESSAGE-----).

3

Verify Signature

The tool checks the signature against the message content and displays whether the signature is valid or invalid.

Frequently Asked Questions

What does signature verification tell me?

Verification confirms two things: the message was signed by the holder of the private key (authenticity) and the message hasn't been modified since signing (integrity).

Why is my signature verification failing?

Common reasons include: wrong public key, modified message content, corrupted signature, or the message wasn't actually signed by that key.

Do I need the sender's private key to verify?

No, you only need their public key to verify signatures. Private keys are used for signing, public keys for verification.

Can I verify signatures from unknown senders?

You can verify the cryptographic signature, but you need to trust that the public key actually belongs to the claimed sender. This is where key verification and web of trust become important.

Is signature verification secure?

Yes, all verification happens locally in your browser. The signed message and public key are processed entirely on your device.