How do I verify a PGP signature?
What GUI (no command line) software or websites can I use to verify a PGP signature?
If I have a message like this
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Because anyone can claim to be me. There's no validation of the user
name or email address when someone posts a comment. While I do try to
remove imposters, some may slip through. By signing my comments using
this technique, anyone can independently verify that I was the author of
the message by validating the signature.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (MingW32)
iD8DBQFFxqRFCMEe9B/8oqERAqA2AJ91Tx4RziVzY4eR4Ms4MFsKAMqOoQCgg7y6
e5AJIRuLUIUikjNWQIW63QE=
=aAhr
-----END PGP SIGNATURE-----How can I verify the message against the public key to get the same signature back?
This online encryption/decryption PGP site does not allow me to do that.
43 Answers
Here's a short list GUIs that let you verify PGP clear-signed messages [which I've personally used and can vouch for].
Nautilus (file manager for Linux), with seahorse plugins
If you use the old version of PGP version 6, not the new version 8, you'll find a GUI interface that lets you store PGP keys and encrypt text, decrypt text and verify signatures with timestamps.
Here's the download link I've uploaded for version 6.
3Here is an extensive list of OpenPGP GUI software for many OS:
The list is referring to Email Encryption. But e.g. GPG Suite for macOS comes with the free to use GPG Services integrating into the macOS Services menu and allowing for text and file verification. Gpg4win offers a GUI solution to get this done on Windows
