New GPG Key

Following my data loss, one thing I had to do was create a new GPG key. I use this key for both email encryption and to encrypt my passwords using pass as my password store.

For creating the key, it was as simple as using gpg --full-gen-key and answering a few questions. I made this key valid for 5 years. If I’m still blogging by then (I hope so), I should write then about how to extend it :).

The About page should now lists my new GPG key and I also updated my WKD (Web Key Directory) configuration (for auto discovery with gpg --locate-keys email@domain.tld).

Also, I learned that now revocation certificates are automatically generated (in ~/.gnupg/openpgp-revocs.d/), it wasn’t the case when I generated my previous key, so it was a nice discovery :).

To export the associated public key (so other could send me encrypted email), I used:

gpg --export --armor --output public-key.asc user-id

You can now send encrypted email again that I’ll be able to open (bare in mind that I can not open older mail that was sent encrypted using my previous GPG key)!